Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          Jex98iKZgEW4zhcEWDBbuBX11WhO6DBJ/467wM1vuFo=
Subject key identifier:   E0:12:16:AB:67:EE:98:89:3D:91:9D:12:F4:6D:9F:29:71:56:D4:03
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       01A15BFA3FD5A7B6D56FDBD1755CFB438618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          16FA
Signing time:             Wed 21 Oct 2026 01:01:29 +0000
Manifest this update:     Wed 21 Oct 2026 01:01:29 +0000
Manifest next update:     Thu 22 Oct 2026 01:01:29 +0000
Files and hashes:         1: 0SFsSDHYS4Gp8mYI62oKwdXXyJo.roa (hash: WkJ2KNUQsuLO69HUCr/UO91pQlE2mJKqwGtnWIGMWy4=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: tvXzEXgb/Bqaeb4tgs5xKJG6y6YzILwKvh9prygxT8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:fa:3f:d5:a7:b6:d5:6f:db:d1:75:5c:fb:43:86:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Oct 21 01:01:29 2026 GMT
            Not After : Oct 22 01:01:29 2026 GMT
        Subject: CN=e01216ab67ee98893d919d12f46d9f297156d403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:33:4d:8d:f2:77:10:78:86:c8:ef:7f:15:
                    e7:da:3a:84:26:c2:1c:7e:ea:d6:5f:64:de:5b:88:
                    cd:8f:c6:e2:e2:65:46:c5:f1:98:5a:98:2f:a5:1f:
                    b5:ee:85:56:14:0b:1e:46:c3:83:56:c7:ec:3b:f4:
                    63:d6:ae:58:2b:94:9e:05:b4:92:a4:c6:6f:04:48:
                    12:45:c1:db:7a:2c:53:ac:3d:a9:07:5a:9d:8a:7f:
                    a8:b8:f2:b0:ce:a7:2f:55:2b:d4:01:12:b2:14:6e:
                    05:ef:13:4c:a5:0d:76:11:33:40:11:5f:c0:43:a9:
                    bc:24:09:95:e1:93:87:43:32:7a:7d:d8:59:20:20:
                    e0:19:56:92:12:b4:e8:ab:f6:af:fe:3c:b9:28:37:
                    76:7d:c7:af:2c:ac:59:02:a7:5e:ec:4c:b5:e9:60:
                    1b:1b:f2:bd:e5:c5:83:ea:61:40:a4:21:9b:bf:6a:
                    d5:3a:81:d9:59:ad:e9:2a:c3:8d:36:74:b7:9b:d8:
                    bb:17:5b:c1:c7:ee:a4:d1:c5:82:a0:b5:07:4e:ed:
                    82:18:ad:5d:39:2d:dd:15:97:dd:68:e3:df:82:80:
                    05:e6:2e:90:7e:a3:7d:13:fa:1e:4c:1c:d1:83:45:
                    a5:e6:7b:93:9a:af:d7:64:d5:b6:4d:9d:c0:4a:ec:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:16:AB:67:EE:98:89:3D:91:9D:12:F4:6D:9F:29:71:56:D4:03
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b2:a7:b0:3c:17:d8:2d:79:7b:ad:ee:5e:39:c6:57:ee:60:
         28:5c:a6:34:1e:33:21:c9:b2:1f:5d:c7:1f:f7:15:51:e2:35:
         5d:b5:12:75:07:71:10:99:38:99:de:f4:f6:c8:10:15:3a:53:
         dd:e6:52:17:1f:3f:cc:f7:4e:3b:4a:77:b7:a6:18:e3:ae:63:
         c3:2d:a8:1c:76:c8:4e:ca:f6:23:75:ad:2e:d4:ab:f0:ea:5d:
         39:f3:36:07:a5:4b:8c:92:a4:0d:ff:2b:2a:7e:f3:8c:43:20:
         7b:3d:7f:9a:5e:3e:13:5d:42:2c:0f:a3:9a:9f:d8:46:56:77:
         e4:34:ec:37:65:0d:4c:2a:90:da:aa:dc:50:cf:f0:82:64:34:
         b6:32:d5:8b:a6:8a:e1:32:57:51:d7:4e:a5:bb:d9:9b:b8:35:
         8a:69:81:47:72:0e:a9:98:15:38:a9:3f:c1:9e:81:a2:c1:c3:
         b2:44:21:df:96:0d:00:31:7d:11:ba:09:82:1f:4e:ab:66:b8:
         84:80:fd:8b:f4:a9:87:b5:4f:5e:85:5f:c1:43:bc:98:81:21:
         42:a9:bf:c0:b9:71:2d:6c:a8:e8:c2:85:03:36:b0:43:ba:d6:
         7c:1a:47:33:a1:d1:9a:5c:2d:32:76:c6:bc:44:55:9f:94:81:
         5a:32:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:08:40 2026 by rpki-client