Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
File:                     NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json)
Hash identifier:          oSdZqMgPvTZsuy1EPGfnps+eIVQpiW1Mkog2oD9vuQk=
Subject key identifier:   05:E8:AC:33:1B:BA:5D:31:B6:F4:2B:C4:9E:B1:71:40:E8:11:C8:A3
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Certificate issuer:       /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial:       019D68E4440D6848FC571B0DA165E047F88C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
Manifest number:          18AD
Signing time:             Tue 07 Apr 2026 17:01:23 +0000
Manifest this update:     Tue 07 Apr 2026 17:01:23 +0000
Manifest next update:     Wed 08 Apr 2026 17:01:23 +0000
Files and hashes:         1: MRi2QUKiUYiuqZDbNN8AWi7khO4.roa (hash: NMGJJ7+SOJryUXuDS+WQnGKqDDO2i9Z6K8gWplB05UE=)
                          2: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: JCmbQ8A3zkpI4HSoLniydZq9W9ellUFLXH3+xetyCA0=)
                          3: zDNouUxa3WBuZGVPOGveYWb3T6I.roa (hash: dlBZu5xfm6bRA2HTdrEgFNefU2JSuyk/ZA0x+VgcU8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 14:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:68:e4:44:0d:68:48:fc:57:1b:0d:a1:65:e0:47:f8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
        Validity
            Not Before: Apr  7 17:01:23 2026 GMT
            Not After : Apr  8 17:01:23 2026 GMT
        Subject: CN=05e8ac331bba5d31b6f42bc49eb17140e811c8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:9a:b2:45:06:5e:7c:7a:df:a5:a4:2c:17:
                    33:6d:48:ad:0c:60:da:02:b7:8b:cc:27:9a:16:c8:
                    d6:9c:ae:03:56:91:1a:a1:69:18:93:bf:95:f4:30:
                    eb:9b:97:ad:6e:ed:93:a2:9d:cb:9a:bd:cc:9a:78:
                    02:e9:27:ae:e1:f8:bb:96:7c:4a:40:02:93:13:8b:
                    26:e3:e8:8b:84:3f:52:fa:12:3c:fd:7d:57:5e:24:
                    32:23:21:60:41:06:f1:06:f0:c8:ad:24:75:60:2f:
                    96:f4:46:bc:00:c8:96:7c:98:58:fd:3f:64:2c:1b:
                    e9:1e:1e:a2:e0:bf:55:90:9e:69:8f:68:97:03:32:
                    1d:79:db:b1:e7:1f:66:73:15:4b:54:c1:08:0f:ec:
                    b9:2d:12:b8:8e:58:38:35:35:3a:e8:50:a1:53:89:
                    84:2e:fe:e9:3b:48:8f:1c:e5:fd:b1:fd:74:25:1d:
                    66:14:80:1e:a5:15:25:29:f9:31:a2:d6:aa:9b:b4:
                    e1:8c:e4:36:10:0f:4c:1a:03:76:c9:78:49:cd:d2:
                    29:ff:ad:cf:3d:38:2d:94:8b:da:2f:51:07:98:4d:
                    41:85:e8:a6:56:1d:77:b8:32:6a:98:ca:a2:80:44:
                    3c:af:1a:ac:31:ef:66:62:81:88:09:50:f5:a4:bd:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E8:AC:33:1B:BA:5D:31:B6:F4:2B:C4:9E:B1:71:40:E8:11:C8:A3
            X509v3 Authority Key Identifier:
                keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:12:2b:3b:28:5c:1c:c8:71:86:4e:5c:43:06:a3:d5:48:6f:
         18:8b:2c:1f:97:07:97:aa:8f:9e:86:5d:31:30:c9:03:8a:e9:
         b2:e5:9b:fa:2a:ff:9a:83:97:25:b8:bc:19:58:a1:f7:bc:b6:
         5a:2a:75:81:56:10:6b:ad:ad:48:39:6a:bf:36:dd:c5:f4:2a:
         24:f2:21:60:4b:fb:fd:1e:48:33:b8:96:bc:e2:4c:a0:8a:7a:
         02:d0:bc:05:83:7a:bc:4d:04:ce:c1:ef:19:c1:8e:2c:3a:01:
         82:34:bf:04:2e:3e:67:d3:95:80:fa:39:4e:8e:73:56:4e:90:
         92:6f:e2:21:5e:46:31:e2:57:d9:2d:a1:fa:be:54:57:16:ac:
         19:7d:36:4f:72:14:4b:62:b3:7c:cc:8a:1f:1b:cd:3f:70:bc:
         4d:3a:f4:6e:d8:f1:a6:fa:a1:4a:d0:7b:4b:14:9f:5e:22:9f:
         58:5b:99:d0:cd:28:37:a0:2c:c9:d7:34:68:c5:23:3b:dc:e4:
         25:ce:88:9d:98:ce:07:f7:21:db:eb:b6:a0:41:94:05:77:f0:
         61:17:d7:89:3f:0b:13:9a:b1:f5:97:46:06:a1:3a:0c:b5:fb:
         e6:3a:ff:a9:b5:0e:22:97:41:31:7e:1c:9b:5b:90:8c:47:c3:
         0f:0d:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:06:43 2026 by rpki-client