Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
File:                     n6TechyAssnnbOAVqErHDv_F7YY.mft (raw, json)
Hash identifier:          uDqNkJOVW4J4ch0WzUnYYYswdk4+F7t0L9tC2DgVHJc=
Subject key identifier:   DE:79:A0:D8:F5:E4:9C:FA:97:9A:09:D3:26:BB:12:4F:A4:8A:AA:67
Authority key identifier: 9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
Certificate issuer:       /CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Certificate serial:       019D38D2AE35C25BE6ECE2A09AFD6F24827A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
Manifest number:          0685
Signing time:             Sun 29 Mar 2026 09:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:24 +0000
Files and hashes:         1: JM6GKQftlnRZxpBKt8Qp5u-DSws.roa (hash: wuuHv8GFSYvD4TiRpQntr79G5SD1rNYlmVrdlTMzxqc=)
                          2: n6TechyAssnnbOAVqErHDv_F7YY.crl (hash: NxS5CHdooI9K2WnehSkSjQzHvjf4ebAid04Ew4hnSr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:ae:35:c2:5b:e6:ec:e2:a0:9a:fd:6f:24:82:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
        Validity
            Not Before: Mar 29 09:00:24 2026 GMT
            Not After : Mar 30 09:00:24 2026 GMT
        Subject: CN=de79a0d8f5e49cfa979a09d326bb124fa48aaa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:2e:97:86:5e:f7:88:a7:be:69:95:d9:1a:
                    d5:db:1f:a7:b2:32:36:bc:1c:89:14:02:47:87:2b:
                    cc:3e:f4:fc:e4:11:79:93:63:f0:09:41:91:45:53:
                    53:16:71:06:0a:f5:4e:0d:19:95:41:dc:8e:13:b6:
                    64:eb:ee:b6:82:aa:24:d4:69:f9:69:b9:be:4f:4b:
                    fe:5a:ab:58:8a:bd:90:c0:75:5e:44:7a:d5:44:85:
                    c5:89:e1:e1:c5:f7:26:c8:b8:e3:41:cd:fc:ea:9c:
                    8c:e7:03:ad:2c:38:00:a1:44:87:de:f3:b1:29:5a:
                    36:ed:98:da:60:7d:14:f2:85:aa:b8:74:cf:ff:df:
                    12:d3:c3:ae:52:af:67:4e:20:8c:85:b2:85:fb:3e:
                    34:98:21:e8:06:73:12:9e:dd:2c:00:a0:c0:d0:a3:
                    3f:02:f5:38:29:99:ed:b4:9f:35:f6:6f:4d:e6:e2:
                    05:f9:86:65:4b:b2:5a:03:2e:b3:cd:99:4d:82:13:
                    0c:ea:bf:38:a2:f7:2f:db:ed:ee:c8:e3:64:ac:fc:
                    36:4b:a8:91:23:b4:92:fd:c5:3f:27:b8:ee:af:e8:
                    4e:61:1f:85:0f:da:39:be:88:17:48:58:0e:65:ad:
                    5d:d7:88:e3:21:8d:89:7c:21:de:4c:92:94:3a:21:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:79:A0:D8:F5:E4:9C:FA:97:9A:09:D3:26:BB:12:4F:A4:8A:AA:67
            X509v3 Authority Key Identifier:
                keyid:9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:da:51:39:3f:37:6f:56:94:10:8b:e0:bf:13:82:a9:27:06:
         95:a0:06:b2:1d:ea:ba:fd:fc:5e:79:58:b3:f5:63:79:ea:30:
         d4:10:bf:97:45:b0:aa:97:8d:eb:55:db:93:d1:a0:b3:dc:57:
         b5:c5:dd:9c:3b:30:c4:5b:15:1b:f2:05:59:18:17:dc:35:b3:
         ff:98:56:dd:e7:2e:7b:d6:db:2e:14:cd:79:df:d7:c7:97:79:
         f6:a9:50:29:1f:46:ad:0c:dd:98:05:a7:12:61:79:5b:4e:d0:
         76:3e:9d:bf:74:8e:d7:68:40:25:5d:ec:c8:5f:8a:44:15:f0:
         ca:f8:12:dc:b9:74:7b:6a:fc:58:1e:65:00:f4:aa:c3:ba:39:
         e7:16:96:38:3c:4f:79:7b:bd:ba:e2:c4:99:eb:d8:30:a5:7e:
         48:34:48:81:22:a3:f8:3a:6e:3d:f3:f5:28:4e:2d:f7:90:10:
         ab:e9:69:b6:fd:cb:d6:9d:29:5f:38:f1:bd:db:e2:36:e3:9d:
         91:af:1e:f1:65:07:95:69:ec:a3:bd:29:d3:14:b0:5e:de:08:
         bb:7d:7a:d5:65:f8:9a:26:91:f2:d9:53:06:6e:66:19:1e:57:
         f2:d5:60:96:04:a9:35:e4:63:7d:84:5c:f5:15:86:63:24:e6:
         01:d9:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:44 2026 by rpki-client