Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
File:                     n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft (raw, json)
Hash identifier:          +QzX6zkvUe41/449w81H9zaGQgSqS5tiM9WI21AGAps=
Subject key identifier:   50:42:CB:6A:F6:E4:82:39:D9:B1:31:B8:90:42:C2:E4:63:37:4C:89
Authority key identifier: 9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A
Certificate issuer:       /CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a
Certificate serial:       019CE3D9A47B6CE9F9897A0946D417F22AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
Manifest number:          7B
Signing time:             Thu 12 Mar 2026 21:00:17 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:17 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:17 +0000
Files and hashes:         1: n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl (hash: QEMnDJioJsDW8C80pQWjHz0NtKlnHvs9s7/7LDOWVK0=)
                          2: xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa (hash: dzRHmEV436bNSbP8ukf6XV97axT5lZpoDEiJJC7vBXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:d9:a4:7b:6c:e9:f9:89:7a:09:46:d4:17:f2:2a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a
        Validity
            Not Before: Mar 12 21:00:17 2026 GMT
            Not After : Mar 13 21:00:17 2026 GMT
        Subject: CN=5042cb6af6e48239d9b131b89042c2e463374c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:d5:c9:d5:e3:92:98:9b:66:5a:38:e5:64:
                    7e:fd:6f:d5:76:ec:de:ce:0f:7e:27:e3:a7:e3:6c:
                    7a:98:3e:a5:59:c3:42:ac:3c:7f:c0:59:6d:e2:83:
                    be:82:c1:5e:a3:e8:0c:2d:64:f0:60:d9:aa:d4:13:
                    9b:89:04:7b:45:49:e1:c0:8a:4b:bf:82:dd:13:90:
                    89:d4:52:a1:37:ad:2b:bf:7d:2b:ef:b9:91:57:5f:
                    e4:c0:b2:05:11:04:eb:1b:9a:cb:bc:31:88:cc:0a:
                    b8:4a:49:2a:68:75:7b:05:2e:f4:54:61:31:d7:23:
                    99:7b:e0:1a:12:69:b4:a5:bf:0e:5c:3f:e4:f2:88:
                    3d:41:72:bc:7d:bd:2a:8a:ff:2f:69:ea:dc:4e:0f:
                    07:6e:ad:7f:bc:5d:18:b0:0d:46:b8:ca:f1:d9:32:
                    6b:cf:fa:b2:96:99:26:4d:db:58:6f:33:ef:53:12:
                    ee:3e:59:79:ca:21:bd:af:db:ce:8e:23:62:3d:48:
                    59:23:9a:77:52:46:3f:d9:8d:16:ef:94:75:df:4e:
                    29:81:8d:14:f2:da:03:47:e9:14:a2:b8:ab:a5:46:
                    c7:91:0c:28:95:dc:86:53:a0:4e:f2:c5:58:b3:89:
                    a6:be:5c:51:3c:e5:29:56:c2:ce:83:2c:ec:5b:92:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:42:CB:6A:F6:E4:82:39:D9:B1:31:B8:90:42:C2:E4:63:37:4C:89
            X509v3 Authority Key Identifier:
                keyid:9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:02:9d:9e:29:df:8a:f1:53:c2:f2:c3:5a:cc:16:64:9e:03:
         37:1d:20:1a:29:71:b0:7c:2d:44:96:82:e2:bf:11:17:00:d3:
         2e:4d:ea:76:98:fe:10:d1:cd:f4:4f:50:fc:a4:98:2d:cb:9c:
         97:9a:8b:68:cf:a9:01:74:a1:47:a6:d3:4e:df:38:ce:3d:3c:
         b1:bb:3e:dd:3d:3c:dc:19:d6:59:2a:d5:ca:3c:98:7a:c2:b9:
         8e:65:c5:8e:36:44:cf:a7:c0:64:60:8f:d1:1e:5b:62:15:40:
         e5:57:4e:6f:f4:1d:34:d2:a6:57:8f:12:eb:fc:eb:b2:1d:2e:
         eb:af:c8:7b:ba:a4:de:63:fb:8a:4d:d4:9c:0d:7d:c6:64:d1:
         0a:40:06:c9:a6:56:af:ad:31:43:80:9c:0b:27:d8:60:a8:04:
         60:88:40:0d:d4:b5:fb:7d:61:ee:cb:3c:4c:5c:fd:31:3b:9e:
         9b:30:75:1d:15:5c:03:78:55:62:a3:ae:f9:9d:46:c8:f6:ca:
         2e:4a:72:ce:11:09:90:97:e3:71:8c:02:17:c6:5e:c8:fc:9e:
         00:65:1f:0d:5b:aa:6b:cf:d4:d5:ff:58:fa:01:bc:2d:d0:8f:
         dd:50:f9:3a:23:8e:b4:4d:76:7a:fb:8f:ce:1e:76:95:58:be:
         91:f4:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:55:49 2026 by rpki-client