Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          KmlteFQ7r4pVImWw31oj99/KN6WdqKPFq/Cu51qYcAE=
Subject key identifier:   34:B5:4F:B3:93:16:74:EB:4B:EF:BA:46:9E:8A:04:81:55:8D:55:7C
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       01A123F8754360B162EA1FB8625BBFC3F70F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          06EB
Signing time:             Sat 10 Oct 2026 04:00:47 +0000
Manifest this update:     Sat 10 Oct 2026 04:00:47 +0000
Manifest next update:     Sun 11 Oct 2026 04:00:47 +0000
Files and hashes:         1: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (hash: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: hxkAS54D8j4zm2sPMTQSd/bco3QJlYfoWDkWqe1sMt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:f8:75:43:60:b1:62:ea:1f:b8:62:5b:bf:c3:f7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Oct 10 04:00:47 2026 GMT
            Not After : Oct 11 04:00:47 2026 GMT
        Subject: CN=34b54fb3931674eb4befba469e8a0481558d557c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:fd:f7:1e:a0:7a:44:de:30:01:e5:a6:bf:
                    a9:e8:47:e6:63:9e:1a:3c:a2:ba:b3:09:79:7d:28:
                    1d:ca:24:53:7b:17:08:df:b9:7a:a7:41:27:d4:e6:
                    4a:56:b0:4e:f0:31:e0:89:61:98:fe:13:44:e5:9b:
                    1f:b9:3f:b6:5c:4e:cd:fc:c2:b0:dc:d1:e4:6f:9a:
                    55:a5:05:b8:ed:3b:4f:30:ad:2f:92:af:a2:3b:5b:
                    62:ef:94:f9:43:df:03:80:c3:54:ca:12:95:07:41:
                    ab:eb:d6:a2:d4:75:70:db:48:49:83:61:52:ea:37:
                    20:c2:61:2b:1b:7d:77:96:cc:a2:c5:35:bc:c6:63:
                    ca:d8:0e:11:e9:d1:f0:51:d8:65:cb:6c:54:e8:8c:
                    a8:b1:e8:c5:15:0f:69:26:9e:b9:8e:25:82:06:11:
                    31:82:b1:89:53:e2:9e:16:46:0e:11:c9:0f:ec:eb:
                    f8:eb:d6:27:10:f9:50:07:ee:e5:ed:8a:f8:e5:f0:
                    86:66:5d:0d:66:85:73:77:fa:74:21:ac:cf:3a:21:
                    e7:3d:a4:50:e1:01:b5:06:60:8e:e2:68:4e:8f:16:
                    ac:56:85:a3:43:27:44:fe:59:78:41:4b:f8:4b:59:
                    f3:9a:0c:d6:1e:b4:c9:95:84:55:09:cc:b9:75:ba:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:4F:B3:93:16:74:EB:4B:EF:BA:46:9E:8A:04:81:55:8D:55:7C
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0c:c9:0d:dc:6f:de:8a:43:ac:c1:b1:21:0e:fe:76:be:dc:
         09:89:b4:25:3d:29:93:22:d2:fb:29:a4:f0:97:91:ef:35:00:
         25:88:c6:2e:9f:e6:7a:a4:b1:7f:43:e5:80:73:70:88:92:81:
         4b:89:23:e0:e0:98:e5:5d:37:67:43:43:a2:c5:86:81:e9:cc:
         8a:67:99:a5:c2:99:74:bb:6f:4e:48:e6:d4:52:24:11:38:d8:
         73:d2:a3:d9:1f:0c:a7:81:1d:4e:a1:c6:ea:19:16:48:e2:2f:
         ce:6a:52:0c:fb:36:52:ee:4d:7b:ef:34:fc:0f:16:a8:1d:f5:
         e4:88:aa:2c:8f:81:af:54:60:f6:96:45:da:b1:c1:01:38:42:
         98:24:33:22:e8:4f:42:a6:ac:3c:e5:cf:4f:4e:48:c2:a1:63:
         aa:f4:e8:2a:ee:ff:4e:62:b7:09:78:bd:11:5c:c8:51:06:f4:
         20:3f:aa:e9:6b:af:eb:21:7f:cd:8d:72:92:1d:69:bd:53:54:
         c0:23:e8:08:b2:3c:e6:0b:44:b5:99:d5:14:38:8c:8a:f5:69:
         83:18:84:79:3f:6e:fe:18:70:3e:3b:a7:6e:b9:41:48:fc:d1:
         1a:ee:67:d6:cd:6e:b8:3f:dc:fb:30:e9:ab:14:bd:4b:d9:43:
         bd:82:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:16:54 2026 by rpki-client