Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          djG1LA24laLNzcVk5ju2rTgo914ABmDOHAi8DmWKV90=
Subject key identifier:   E9:DD:03:7A:2B:5C:F9:9B:C9:D6:11:A6:14:7B:73:27:F6:D4:0B:3E
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       019D31F559B5EF40B5A7F57EF87A142895EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          04E0
Signing time:             Sat 28 Mar 2026 01:00:56 +0000
Manifest this update:     Sat 28 Mar 2026 01:00:56 +0000
Manifest next update:     Sun 29 Mar 2026 01:00:56 +0000
Files and hashes:         1: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (hash: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: W4oV5aP4yue8UCGh/v7YArwEk1W5ikIfYohcY4aRMIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:f5:59:b5:ef:40:b5:a7:f5:7e:f8:7a:14:28:95:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Mar 28 01:00:56 2026 GMT
            Not After : Mar 29 01:00:56 2026 GMT
        Subject: CN=e9dd037a2b5cf99bc9d611a6147b7327f6d40b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:4c:78:36:4e:6c:53:50:65:df:e8:e3:e7:
                    8c:40:3b:bc:c5:5c:bf:96:80:94:a9:1a:80:0f:da:
                    33:58:40:5d:38:cc:89:5f:79:8c:05:49:5c:61:1d:
                    f5:68:3e:68:a8:4a:72:2c:d2:ad:d9:7d:e8:d4:86:
                    6f:d9:22:2f:f3:c7:0e:f8:ef:93:54:f2:cb:43:93:
                    95:ec:05:e6:d7:c5:b2:80:f1:f0:78:ac:7a:c7:a9:
                    a4:b2:5a:8a:00:cd:39:85:80:b8:04:f6:4e:b2:6b:
                    18:a9:82:c2:cf:0c:5d:68:fe:6d:38:08:5b:c6:f6:
                    b1:42:78:c3:37:be:83:b2:c5:a2:d3:ea:c1:e9:b3:
                    cf:8f:69:80:4f:8a:6b:8a:6b:6e:4d:5d:dd:52:8a:
                    2e:e5:bb:b8:59:b9:ad:bf:d7:4e:91:fb:1a:83:42:
                    96:ab:5c:a4:15:cb:e8:8a:41:d2:81:1b:3f:78:22:
                    40:af:50:33:d8:a5:ac:4f:c4:2b:b5:11:d4:1b:e8:
                    b4:30:6e:ac:a7:04:12:09:f7:d6:97:83:c2:9e:5d:
                    c0:70:73:4e:d8:03:de:40:80:8c:41:01:91:e0:11:
                    9a:7e:46:2c:71:17:c0:40:20:c9:a4:37:29:dc:ee:
                    c8:57:6b:f2:e7:d0:7f:ef:31:c3:57:39:ff:ee:e8:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DD:03:7A:2B:5C:F9:9B:C9:D6:11:A6:14:7B:73:27:F6:D4:0B:3E
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:94:04:43:31:be:76:54:fe:8d:20:85:9c:53:c7:31:8a:
         08:1d:34:cd:6e:67:28:71:1c:24:75:e6:66:61:e5:9e:1d:ad:
         45:81:13:bc:f7:3d:b0:83:f0:ea:aa:52:82:27:81:12:93:7e:
         23:19:eb:94:f5:3f:38:56:94:cf:a4:7e:6f:de:2c:ce:78:ab:
         cd:d4:cb:db:78:71:72:ca:8a:ff:82:9e:f8:45:1d:c1:76:a7:
         10:30:31:2b:9f:08:54:94:92:dd:72:23:39:e8:cf:64:c7:42:
         d9:41:71:5b:c8:72:a1:cf:99:bf:69:28:79:5c:08:d7:3f:e6:
         98:23:61:ad:62:87:eb:23:49:80:2b:cb:f0:58:43:a6:bd:e1:
         bb:cf:a4:92:b7:aa:fb:5f:ae:b1:be:01:b5:d4:b8:3f:88:35:
         cb:6b:63:8b:35:b4:65:0f:eb:89:5a:95:8d:ad:6a:64:52:0e:
         32:4c:6c:52:0a:e7:a6:15:ef:65:05:0d:6a:30:03:e6:d9:89:
         c8:ec:47:b9:8c:99:8b:5d:08:2d:8d:00:a8:02:a1:53:19:03:
         80:26:89:d0:d8:63:6f:3b:1c:73:04:cd:eb:72:e8:11:3c:37:
         97:86:8c:5b:9b:46:55:1b:5e:20:cc:c7:ac:91:4b:86:53:ff:
         df:b8:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:53:44 2026 by rpki-client