Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/n-CixHGnJLq6zUvx5SaqjQ73Y_c.mft
File:                     n-CixHGnJLq6zUvx5SaqjQ73Y_c.mft (raw, json)
Hash identifier:          tDEXVQZETlNpH47Px/m1Ynz0iSme4EM5iz8oGPA4ly4=
Subject key identifier:   3F:51:77:83:A8:57:BF:BF:22:FA:ED:19:C2:DC:EC:2C:01:FA:73:C8
Authority key identifier: 9F:E0:A2:C4:71:A7:24:BA:BA:CD:4B:F1:E5:26:AA:8D:0E:F7:63:F7
Certificate issuer:       /CN=9fe0a2c471a724babacd4bf1e526aa8d0ef763f7
Certificate serial:       019F122ECACB9C5E1B464052BBF15EC18D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-CixHGnJLq6zUvx5SaqjQ73Y_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/n-CixHGnJLq6zUvx5SaqjQ73Y_c.mft
Manifest number:          03
Signing time:             Mon 29 Jun 2026 07:01:24 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:24 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:24 +0000
Files and hashes:         1: n-CixHGnJLq6zUvx5SaqjQ73Y_c.crl (hash: odjfk3qIB0+ZaF8sTEVgjzgEfk6ZqbNbY+G5TW9PWU8=)
                          2: tAI5Yo1WoQfyE_uYKEfBmP8XKZw.asa (hash: USRcLTOlgNTouxmTNSnSNV6rzbDPNoz1j4TqfN0uroA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/n-CixHGnJLq6zUvx5SaqjQ73Y_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/n-CixHGnJLq6zUvx5SaqjQ73Y_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-CixHGnJLq6zUvx5SaqjQ73Y_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:ca:cb:9c:5e:1b:46:40:52:bb:f1:5e:c1:8d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe0a2c471a724babacd4bf1e526aa8d0ef763f7
        Validity
            Not Before: Jun 29 07:01:24 2026 GMT
            Not After : Jun 30 07:01:24 2026 GMT
        Subject: CN=3f517783a857bfbf22faed19c2dcec2c01fa73c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:2f:da:29:2f:da:9c:ea:95:ba:cf:3c:b1:
                    82:74:79:a4:1f:27:cb:70:70:63:5c:9b:cb:64:c9:
                    67:73:54:ac:a4:46:30:03:73:bf:13:ad:da:42:03:
                    1f:cf:15:e8:53:17:f5:e1:fa:57:c3:a3:af:db:f8:
                    49:f7:ad:60:d1:88:12:24:c5:65:86:b3:9a:1e:3a:
                    9c:e7:8a:4d:ba:d9:5b:19:1f:be:79:e0:ee:7b:bc:
                    ee:07:85:5f:48:da:47:9e:41:a6:db:56:c7:01:cf:
                    83:0f:9d:8d:73:54:e4:af:fa:46:f3:20:df:2b:c3:
                    81:c1:dc:f9:99:5e:cf:ab:7d:19:b7:ce:d1:db:df:
                    f9:31:ca:8c:10:84:e8:4c:a5:2f:73:33:c3:57:83:
                    b9:dd:ec:5a:e7:4e:f1:05:76:b4:f0:d0:fd:49:5d:
                    5b:1c:45:8c:91:3a:0d:47:3e:5b:04:42:ef:35:28:
                    31:cd:f3:a9:92:f2:66:fd:2b:68:30:70:52:29:f8:
                    3c:c0:3f:f5:75:1e:40:45:07:d4:10:59:a9:35:84:
                    ff:4a:a3:e6:b9:6d:8a:18:f6:82:77:1e:89:94:c7:
                    70:fb:8e:94:ac:5f:f7:c3:62:ff:94:1d:57:01:de:
                    6f:b7:d5:ad:de:5c:4e:35:93:ca:0c:92:3c:d6:aa:
                    62:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:51:77:83:A8:57:BF:BF:22:FA:ED:19:C2:DC:EC:2C:01:FA:73:C8
            X509v3 Authority Key Identifier:
                keyid:9F:E0:A2:C4:71:A7:24:BA:BA:CD:4B:F1:E5:26:AA:8D:0E:F7:63:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-CixHGnJLq6zUvx5SaqjQ73Y_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/n-CixHGnJLq6zUvx5SaqjQ73Y_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/n-CixHGnJLq6zUvx5SaqjQ73Y_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:8d:11:b1:58:cb:ea:3f:6c:cd:10:71:32:a0:51:b6:75:
         a3:47:8c:f7:6c:a8:e8:86:9c:a8:17:7a:2f:f3:e5:15:c7:61:
         34:5e:3b:46:cf:89:5f:13:17:24:ef:b2:35:5b:8c:39:28:4a:
         99:fd:30:1a:4b:53:00:b1:f6:3e:a5:d5:71:2b:86:5c:8c:5c:
         ff:15:fe:26:93:a0:79:14:df:ab:ec:ba:aa:c4:96:30:3b:6f:
         71:87:f2:25:58:61:ac:00:cb:41:91:45:44:ac:09:4d:22:88:
         ba:65:f3:0d:d6:c0:14:ac:49:a9:ce:42:41:47:72:c3:b3:55:
         bf:71:59:fe:76:96:9b:e5:11:2d:87:c6:df:39:ef:14:5c:8b:
         f0:96:d8:18:11:61:c2:ca:0d:80:b5:b3:72:fe:4b:a8:2a:39:
         a2:c7:e3:ec:b9:a3:4a:9a:09:f1:da:b6:e1:d1:b3:f5:46:51:
         a2:e7:60:f5:9c:6f:d8:4c:20:04:5e:7b:39:5f:3e:7c:0e:b3:
         9a:2a:64:41:10:64:9d:23:02:5c:54:3d:3d:62:2f:1d:2c:9d:
         30:0e:15:96:a6:c0:9b:2f:29:0a:f6:0d:ce:97:0c:f0:56:2b:
         f7:92:b7:cb:24:1e:91:1d:8d:79:12:3f:b1:9c:3c:8e:49:06:
         d7:79:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:44 2026 by rpki-client