Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          CrSUAzRQl6psrebeEWVXa2xWxRGMS6o0aI5TalRl1n8=
Subject key identifier:   C0:F5:D1:F3:3B:8D:8C:25:F6:B5:C7:16:4F:36:21:2E:39:80:A6:7C
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019DA29CD2834C0446F380914A99C3C6A9D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          03EF
Signing time:             Sat 18 Apr 2026 22:01:19 +0000
Manifest this update:     Sat 18 Apr 2026 22:01:19 +0000
Manifest next update:     Sun 19 Apr 2026 22:01:19 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: i/ayJMF1EpHgLWpAbPuKTd2OvFCJRBOCeH9K91yRO4k=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:d2:83:4c:04:46:f3:80:91:4a:99:c3:c6:a9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Apr 18 22:01:19 2026 GMT
            Not After : Apr 19 22:01:19 2026 GMT
        Subject: CN=c0f5d1f33b8d8c25f6b5c7164f36212e3980a67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:64:4b:d3:c9:bc:06:f2:f1:c9:10:49:a9:
                    23:7d:a7:d6:66:79:bf:9d:6f:f3:69:78:e9:c2:74:
                    49:9b:78:22:41:d2:44:13:8a:16:cb:ec:a0:e7:8d:
                    a1:46:80:b4:36:c4:aa:e6:e2:a6:8c:a8:a3:0d:e5:
                    bb:07:75:52:da:b9:99:0e:fa:c5:a0:c7:8c:e9:28:
                    29:12:fd:c8:f6:ae:46:95:da:92:ba:ac:e2:f1:82:
                    2c:6d:9f:66:4c:95:f7:3e:30:66:4a:04:bd:1d:9a:
                    b4:24:a4:8b:f2:5f:6d:8e:a3:fa:8e:cf:e6:4d:39:
                    78:f8:b2:fc:37:d8:19:1a:12:c7:57:b8:52:0b:97:
                    69:4f:4b:6e:4f:b4:6e:e6:dc:43:8c:1d:a1:46:5b:
                    a6:cf:5b:85:99:a3:46:bc:b6:8d:0d:66:63:72:1c:
                    e8:a3:34:c1:ff:62:d1:41:a9:04:ab:0b:87:6e:08:
                    ef:d9:48:af:ca:19:35:70:15:63:d1:2e:6a:5b:c2:
                    02:ac:cb:cb:94:f4:3d:31:92:9f:ab:24:0c:5f:95:
                    6e:49:e3:d0:00:51:e3:1e:ae:f2:3a:ad:4e:0b:10:
                    03:96:09:5b:9a:c7:b5:21:3b:f6:42:ac:2b:25:8e:
                    7c:44:07:ca:b6:66:75:dc:8d:f0:0d:81:46:64:bc:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F5:D1:F3:3B:8D:8C:25:F6:B5:C7:16:4F:36:21:2E:39:80:A6:7C
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:b9:9c:44:8d:8f:fa:bf:2f:e3:c0:d5:31:61:80:48:7a:
         65:5d:e1:73:f8:e9:40:c3:c9:df:f4:d3:f4:f5:1c:43:60:6e:
         27:59:22:3d:d6:38:1c:71:1f:1b:23:f1:88:35:70:b7:7e:bb:
         04:9c:74:16:f1:21:15:d1:1c:ab:8f:cd:7d:39:a4:c0:eb:d6:
         ad:e3:9f:20:36:60:64:5c:b8:a9:83:6b:3b:c7:81:a6:80:b2:
         d7:ed:e9:e6:b0:2a:e5:36:4f:3c:00:96:c1:b3:42:22:f4:e4:
         f1:89:dc:9b:ff:e1:08:02:c3:38:50:f9:b0:82:bd:e8:1a:77:
         14:ee:fe:bc:12:7e:3f:f7:8a:9d:62:f5:80:a4:25:2c:32:3b:
         0c:06:da:8e:5b:2c:d2:47:b2:14:95:6e:ce:2c:3d:a8:83:f3:
         a0:2c:2f:55:25:9a:2c:62:d8:57:3d:57:49:3d:a6:9b:8f:67:
         2c:ff:95:08:85:d9:95:7a:3d:1d:ff:b0:83:1e:a2:33:d8:93:
         db:c2:96:31:5f:c1:4d:f4:f6:51:ba:12:ad:26:50:4e:8a:cd:
         1b:0c:bc:e3:9d:69:bd:08:98:49:89:ae:c1:69:55:0f:e2:37:
         66:b7:8d:7c:0c:e3:6a:0a:6b:57:40:22:39:53:36:de:67:30:
         c3:63:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:52:58 2026 by rpki-client