Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
File:                     NpxxPFGYfh_6VIInf18cjLci9Es.mft (raw, json)
Hash identifier:          CxCCIJKTrAotNDg4dxhaJdY9Tn4QDNUqVWHbfXNOHic=
Subject key identifier:   F1:10:E0:88:24:23:FB:68:FF:FF:D3:96:DD:CE:6F:1E:7B:38:C8:2C
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Certificate issuer:       /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial:       019D37522D9D05E2603592AB8714EDCBFB9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
Manifest number:          0C92
Signing time:             Sun 29 Mar 2026 02:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:25 +0000
Files and hashes:         1: NpxxPFGYfh_6VIInf18cjLci9Es.crl (hash: TmJXam5G/TIoBxZmPrUCLaFO3SqTstUAUmsk6+b+J6k=)
                          2: QwNboN_9MI4QbK7an7tUKY8o-q0.roa (hash: OratTvFz7yhhbwXN3POQgTrmHqy78LoHV2ykDq3UAs8=)
                          3: hdNCABPIWSKjzwuzDhnhKyCtFMY.roa (hash: S6v1PFLMZ4fBXkE2JupwrwrFL+vUqpbqMjBcV5qYv+A=)
                          4: zve4cZPkJTuNk3bkahTD510MrsY.roa (hash: iNvGvJvafo/4OLNnQgS+81pjqvPzlpg25mG1fyG2Mig=)
                          5: zxQemoMm5X0mTwb9tpZgiU6HVr0.roa (hash: nsUKW7BtpCE6NOIWO/jRsU+0063Xs0/OmJg7fDjF/1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:2d:9d:05:e2:60:35:92:ab:87:14:ed:cb:fb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
        Validity
            Not Before: Mar 29 02:00:25 2026 GMT
            Not After : Mar 30 02:00:25 2026 GMT
        Subject: CN=f110e0882423fb68ffffd396ddce6f1e7b38c82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:98:6f:5c:7b:10:05:7f:5c:18:ad:dc:45:
                    a6:3b:62:57:74:bf:27:47:9b:71:ca:6c:ad:ef:59:
                    18:bc:03:41:3e:60:9e:e4:49:76:3d:0d:4f:87:86:
                    fb:a8:b4:90:f5:cf:cd:cc:6a:58:68:41:44:3b:4f:
                    35:7d:0e:6f:e0:f0:e3:11:ca:94:0e:a6:9a:18:85:
                    8c:7e:d2:00:b5:b9:3a:f7:bb:35:cc:5c:27:a5:6b:
                    6e:bc:a7:69:e0:58:93:63:5e:23:d5:4e:7e:6a:7c:
                    72:cf:a4:a1:db:f6:4e:a1:fc:48:fb:3c:83:57:36:
                    af:bc:c7:d9:20:54:3e:9e:f9:a6:2c:1f:55:f3:77:
                    58:93:a4:8c:40:bf:81:a6:fe:f0:f8:90:f3:de:bb:
                    a3:5e:17:3a:40:f4:84:4d:12:71:1f:62:50:b7:77:
                    69:3a:71:12:bc:e3:18:75:11:7f:a4:4b:8e:ff:51:
                    6e:ac:56:0a:8d:81:81:f0:a1:f0:98:e1:07:ec:55:
                    09:95:b5:5f:91:f3:4e:ad:93:3c:1d:49:8a:98:02:
                    1a:6a:2f:04:f5:cb:58:87:f8:e9:e4:ee:aa:b6:79:
                    40:d2:79:c2:61:55:63:d3:f9:2f:9e:19:51:2d:d6:
                    93:c5:e4:1d:26:44:5b:9e:8c:20:89:43:e2:e5:39:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:10:E0:88:24:23:FB:68:FF:FF:D3:96:DD:CE:6F:1E:7B:38:C8:2C
            X509v3 Authority Key Identifier:
                keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:d1:a5:3c:65:8f:77:30:3f:da:a0:c2:e4:44:36:6b:7a:
         b5:65:16:b1:d8:46:b2:b6:e7:66:61:f1:45:75:e5:f0:96:9d:
         0b:57:3b:1a:f8:f1:9f:ae:e4:97:cf:4b:7f:dd:4d:7f:0c:4c:
         7f:23:b1:31:26:b0:4f:86:af:4b:20:d3:0a:43:58:5b:50:de:
         d6:84:4e:f9:39:7d:de:95:e8:57:cb:45:3f:e2:8b:c2:b1:9a:
         42:d0:57:b5:96:81:30:09:63:ef:9a:cb:ce:4e:25:aa:14:93:
         00:ed:48:15:e8:d9:6b:b3:4b:ce:03:35:92:3f:f2:54:07:67:
         71:e1:83:d2:cf:99:65:52:40:6f:c3:74:58:f7:6f:84:ba:a7:
         7d:0e:6f:e7:9f:b5:c6:f5:26:c2:2a:08:6e:1f:17:34:b6:93:
         af:63:69:58:96:63:11:44:b3:de:f2:bc:90:0b:a3:d0:c9:b5:
         45:41:eb:44:d2:c1:7a:ac:17:b6:6c:09:15:80:21:e4:c7:cf:
         ab:a4:91:36:91:d4:d1:27:a0:99:87:d9:e6:b9:91:ac:5a:ef:
         20:38:b8:32:c0:44:10:af:a5:c1:c5:01:9a:1f:58:ef:87:8a:
         f9:58:dc:42:56:d7:1c:e6:9f:91:52:76:a9:02:33:25:2c:e9:
         de:95:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:40 2026 by rpki-client