Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          osGVTttXgRIbhijre8bN67k/fqCYL5jCcWAWWxHS3qk=
Subject key identifier:   AC:BB:6D:B3:88:2C:7B:10:3D:CF:D2:D1:B2:37:A6:DB:D7:4D:78:1B
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       019D37C0E5C68D0D66EFBB4403B1A1C14ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          14D5
Signing time:             Sun 29 Mar 2026 04:01:20 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:20 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:20 +0000
Files and hashes:         1: 0SFsSDHYS4Gp8mYI62oKwdXXyJo.roa (hash: WkJ2KNUQsuLO69HUCr/UO91pQlE2mJKqwGtnWIGMWy4=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: 9Jq/RK1b69PaPzh81dBV4JbRn2xbg30ELsKghuFWXTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:e5:c6:8d:0d:66:ef:bb:44:03:b1:a1:c1:4e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Mar 29 04:01:20 2026 GMT
            Not After : Mar 30 04:01:20 2026 GMT
        Subject: CN=acbb6db3882c7b103dcfd2d1b237a6dbd74d781b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:e0:cc:f5:00:ba:c2:df:1e:99:d3:35:fe:
                    39:07:f2:52:85:64:d6:98:3f:4b:0d:33:ba:89:a1:
                    86:da:1f:83:63:fa:09:0f:d0:3a:31:ce:1f:df:00:
                    a6:b5:b4:df:3d:f4:89:5d:99:84:a8:59:3b:f5:85:
                    a0:e9:26:c9:4f:f2:bf:27:2f:26:09:b0:b5:9c:38:
                    47:ba:74:f3:c1:39:5e:c6:3a:4e:28:4b:da:6b:8e:
                    ce:ed:6d:14:39:75:15:d0:71:a2:5c:f2:a4:03:cd:
                    30:bd:50:63:37:81:d2:0d:39:97:c5:e2:cf:af:62:
                    fa:a0:5f:e2:57:ac:e0:24:2b:e2:22:78:62:8e:97:
                    7f:0d:22:96:13:cb:f7:27:5c:da:b6:21:ab:e3:ca:
                    87:cd:73:a1:8e:0d:85:9c:82:c6:5a:d5:97:7f:8c:
                    31:c9:6f:7f:06:6a:4f:56:7a:b3:0e:4f:35:6c:cd:
                    1c:f2:06:34:2b:9b:ae:4f:f8:bd:39:2a:f4:5b:96:
                    23:06:35:bf:30:2a:3d:a3:ad:e9:f3:59:f5:2e:23:
                    ac:75:06:1b:4d:f6:02:ac:2b:49:2f:17:3b:9e:99:
                    e4:56:ff:d2:21:0c:e7:28:8a:d8:c1:2d:70:c0:86:
                    37:31:8b:aa:74:63:40:5a:59:c8:4f:c5:08:7f:99:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BB:6D:B3:88:2C:7B:10:3D:CF:D2:D1:B2:37:A6:DB:D7:4D:78:1B
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0d:95:2d:05:1f:ee:96:65:c9:3d:5e:27:31:8b:20:e5:ad:
         f9:5b:5a:8a:bd:ad:ed:b1:3e:64:19:18:0b:11:9a:9c:58:b7:
         b1:ff:1c:15:a2:98:47:86:29:ac:b6:53:b6:af:fe:f4:da:d6:
         23:9e:40:95:85:40:33:15:2d:ce:2e:66:26:c9:ee:3b:31:2e:
         82:20:6b:2b:a8:6b:c6:58:ba:82:25:ab:a5:26:bd:2a:62:f1:
         e6:9b:80:12:bd:8e:28:8c:6b:99:09:85:2e:30:58:ad:47:a7:
         ee:a4:03:0f:81:3b:4b:1e:26:27:e9:d8:00:e2:dd:e6:32:7f:
         0e:ca:67:e5:85:cc:6d:55:e6:3c:c0:ef:65:cc:39:68:d2:99:
         59:72:57:ee:b9:36:f6:d3:e8:ff:19:55:b3:ba:4f:6e:20:36:
         9c:de:3a:6d:86:0d:f8:4e:17:4d:24:ab:ba:25:ab:d1:41:12:
         10:b6:2c:7b:85:93:9b:0c:16:b0:4f:d8:10:0a:33:c9:27:7a:
         1e:53:88:c2:49:4b:0e:69:20:68:c9:4b:08:95:d9:81:ff:a3:
         ea:96:86:99:cc:99:66:e3:23:1c:31:b5:86:d0:ec:b3:4a:cc:
         68:7b:2c:c0:6e:bf:bd:79:3c:10:d9:e1:0c:29:30:0c:f9:ae:
         0e:2f:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:42 2026 by rpki-client