Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File:                     N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier:          2RQO3Ujt8+CpEUxhWlCP8eFtm09Vzt3EPejn0fpvYbM=
Subject key identifier:   00:92:1A:C8:34:CB:6A:AE:A8:F0:3C:55:33:26:51:14:44:6B:EA:82
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer:       /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial:       019D051CF3076E50BEE3F34E8DD45031E437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number:          1579
Signing time:             Thu 19 Mar 2026 08:01:16 +0000
Manifest this update:     Thu 19 Mar 2026 08:01:16 +0000
Manifest next update:     Fri 20 Mar 2026 08:01:16 +0000
Files and hashes:         1: L4LHXK0GX3W-TkIYyV116VIxXoI.roa (hash: fcLNxKQ8yWrXIL5Wmszwu+qvpRuxr2NO+f0WZHV/MxY=)
                          2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: svNjvbfF0Fx3V/ZaLV9CTnYnGmBbjWgvSyFJ7AGDQwA=)
                          3: n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa (hash: hXDmI2LoN2Vg0aHEdqhP1gGIgLWmSc2cb/qRIsBSYnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:1c:f3:07:6e:50:be:e3:f3:4e:8d:d4:50:31:e4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
        Validity
            Not Before: Mar 19 08:01:16 2026 GMT
            Not After : Mar 20 08:01:16 2026 GMT
        Subject: CN=00921ac834cb6aaea8f03c5533265114446bea82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:e3:e8:fe:61:ba:f9:e7:33:ab:41:6d:3d:
                    d3:90:27:28:06:42:20:46:1f:8f:42:d4:35:95:34:
                    55:fc:f8:68:b4:91:63:94:e7:f2:66:53:27:3d:13:
                    79:26:3d:47:da:39:5f:cc:3e:6f:b8:31:3c:27:92:
                    99:c5:e5:d3:1b:7e:7c:a8:07:25:e4:cf:b0:7d:24:
                    d0:c7:7f:dc:3b:00:18:7d:e6:90:88:40:94:20:3d:
                    26:4b:a3:31:c5:48:a8:10:ac:3d:63:43:93:f4:f0:
                    43:42:5a:ab:3b:d5:8d:ce:01:a0:b7:b3:2a:c3:ca:
                    fa:7a:cd:e0:25:0c:e2:a2:82:d1:4f:42:f8:23:db:
                    20:8d:e4:25:cb:96:e5:5e:53:ba:6d:02:b1:a7:d9:
                    1c:2e:fe:07:10:3f:40:a9:53:3c:e1:1b:57:59:1b:
                    a1:ad:b8:7a:fd:2c:a5:db:4d:64:08:db:58:d5:f8:
                    0f:5f:9f:ee:43:a9:59:1a:61:af:8a:53:b0:ef:f8:
                    03:2b:b7:71:1e:fd:08:74:68:6c:32:a6:bf:3b:93:
                    ba:68:2e:cf:cf:14:ca:60:69:d6:1f:26:dd:df:ee:
                    a3:49:24:12:25:14:69:b3:a5:5f:70:d4:c6:2a:cb:
                    9b:e6:70:c8:ed:11:94:7d:57:93:7b:74:92:65:fd:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:92:1A:C8:34:CB:6A:AE:A8:F0:3C:55:33:26:51:14:44:6B:EA:82
            X509v3 Authority Key Identifier:
                keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:cd:b9:5a:2b:8e:7c:9c:e9:50:31:11:97:64:b2:58:a2:eb:
         16:a8:9d:7a:81:09:36:1d:bc:7a:56:70:65:6a:38:ff:48:30:
         a7:94:7a:91:6e:8b:2a:fc:62:50:dc:98:0a:8c:70:8e:07:ae:
         39:18:a5:90:fe:75:4a:33:7e:46:98:ca:5f:1f:47:41:b7:80:
         fb:06:e2:a9:4b:21:40:f4:08:e2:c6:7c:f5:f3:4b:c9:4b:5f:
         9a:06:c5:8b:d4:18:60:38:c1:f2:77:8e:17:2b:7f:fc:2e:b0:
         e3:7e:f9:44:06:8a:d4:79:ec:bc:e8:69:d2:9e:3d:c0:c0:2e:
         9e:01:35:dc:f0:90:bd:0e:7f:db:b4:79:e5:c5:21:0b:8e:b9:
         91:64:d8:38:fc:b0:77:e7:ef:38:5b:e2:1c:68:9c:f5:68:46:
         84:eb:80:d4:4a:e2:d0:77:e8:de:c9:35:8c:b8:94:58:6b:f7:
         eb:68:39:19:f9:b6:de:84:d5:9b:6c:25:4b:ab:00:7c:ee:f9:
         f0:a8:17:45:48:fd:fb:4d:21:96:fd:5b:0e:8b:78:b1:84:31:
         85:d3:66:73:11:20:52:2d:cc:29:85:6c:12:0b:1d:ac:b9:ac:
         e3:5f:b1:62:61:f9:1b:d1:b3:c3:c5:00:cf:eb:e2:c5:55:b5:
         f8:7f:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:30:40 2026 by rpki-client