Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File:                     NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier:          oMuHIJVQDaCMDIQD6xhkJ5Jbz9c8w82ty/UwwYaHbtI=
Subject key identifier:   74:CA:05:49:FF:08:91:DD:C3:C9:23:82:54:53:37:42:5F:03:2E:D6
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer:       /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial:       019D9F9B70BE33A354FF28E38CE398D92794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number:          162F
Signing time:             Sat 18 Apr 2026 08:00:57 +0000
Manifest this update:     Sat 18 Apr 2026 08:00:57 +0000
Manifest next update:     Sun 19 Apr 2026 08:00:57 +0000
Files and hashes:         1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
                          2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
                          3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: JDLyxFy//eA7S115afPY0eETWKSb8UjG3qJyiKWAw9k=)
                          4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 08:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9f:9b:70:be:33:a3:54:ff:28:e3:8c:e3:98:d9:27:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
        Validity
            Not Before: Apr 18 08:00:57 2026 GMT
            Not After : Apr 19 08:00:57 2026 GMT
        Subject: CN=74ca0549ff0891ddc3c92382545337425f032ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:1d:64:bc:28:a6:bb:06:6e:4d:88:3f:aa:
                    0d:f0:6d:fe:c5:ce:96:ce:ee:7f:99:2c:ff:2e:20:
                    c7:77:29:07:a2:41:a4:ee:34:07:a6:63:ee:26:af:
                    dc:ff:41:ef:f4:e1:48:71:a9:d2:d3:13:27:55:0e:
                    a4:eb:22:41:73:b9:6b:30:ac:79:92:2a:54:8e:a3:
                    ae:d9:06:f5:23:2f:8f:50:20:27:88:d8:94:ea:f5:
                    42:b6:08:87:57:e6:34:8a:3c:e8:ec:35:5b:b8:cf:
                    23:c6:0e:56:39:41:04:ef:9b:90:b6:2b:99:3c:a4:
                    23:aa:cc:be:0d:c8:08:3e:16:3c:6c:68:98:99:75:
                    d7:0f:93:0a:50:fd:84:46:87:ce:b7:b1:d9:e7:bd:
                    40:25:e8:16:4f:79:70:c3:8b:58:9b:20:21:05:8e:
                    b1:75:65:d3:69:f9:9d:2f:c8:ab:b9:71:25:40:b5:
                    74:99:7e:5a:f6:45:63:dd:da:4b:98:89:ba:a1:c5:
                    34:d1:3d:be:c9:da:15:79:09:8e:81:31:1a:7e:97:
                    1b:76:69:7e:f2:62:9b:d4:28:1d:b1:33:7a:92:6d:
                    f2:63:2b:46:11:98:45:9a:b3:cd:1f:6a:72:d0:1a:
                    9e:cb:7f:e2:83:1f:bd:da:c1:80:06:de:c5:ff:df:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:05:49:FF:08:91:DD:C3:C9:23:82:54:53:37:42:5F:03:2E:D6
            X509v3 Authority Key Identifier:
                keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:72:c2:02:ee:d1:67:c0:21:34:7d:8f:c2:bb:7a:eb:d3:54:
         ca:36:b1:32:a6:ab:b4:ae:2a:a4:31:a9:4c:cc:4c:f1:84:ec:
         53:d5:81:1a:ab:4a:42:77:26:66:58:de:f8:82:e5:70:8f:32:
         34:1d:73:ce:5b:32:be:1f:c6:1c:54:30:c8:25:fa:03:79:a2:
         3e:af:a5:15:d9:bb:f2:6f:a3:c6:03:e4:18:a7:85:b9:58:2c:
         95:c4:5c:84:89:57:a4:e0:e7:3e:66:8e:01:68:fb:b4:f0:c9:
         7c:fe:29:1c:de:da:29:60:fb:d5:85:20:53:4e:24:d4:91:c1:
         d1:ac:89:a1:2f:09:c9:82:72:3b:20:87:60:51:f9:5f:b9:c5:
         cb:5a:b3:40:df:be:d3:fb:a8:7a:e4:ec:55:70:31:db:17:10:
         d3:4c:d0:c1:8b:29:7e:d8:30:08:7b:9b:4c:30:41:c1:4b:35:
         7a:93:1b:9f:88:b2:4a:2a:e4:31:9c:db:0c:96:df:0d:9c:06:
         79:29:11:89:d4:5a:08:71:bd:db:ac:0f:3e:b2:d3:81:f6:9b:
         21:1f:d2:44:29:88:b0:f5:20:c7:84:03:c8:c7:8c:5f:95:86:
         8c:bb:cf:4a:87:70:2c:b4:0c:0d:4e:d7:06:be:06:6e:9f:17:
         11:ff:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:54 2026 by rpki-client