Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          0IE36ga9GcuNf2LfMjDDRvnZtP7L7iALChVxREOkTPg=
Subject key identifier:   4A:AD:E4:4D:EB:B7:95:8F:F8:56:DD:E9:54:50:47:41:37:44:7C:A4
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       01A152525046717DF3832E8BB767AE30E16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          16F5
Signing time:             Mon 19 Oct 2026 04:01:28 +0000
Manifest this update:     Mon 19 Oct 2026 04:01:28 +0000
Manifest next update:     Tue 20 Oct 2026 04:01:28 +0000
Files and hashes:         1: 0SFsSDHYS4Gp8mYI62oKwdXXyJo.roa (hash: WkJ2KNUQsuLO69HUCr/UO91pQlE2mJKqwGtnWIGMWy4=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: 2bt8GYh9w9BIxx2GI0p+aoiiuOahcO0BYmdVgc8gXms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:52:52:50:46:71:7d:f3:83:2e:8b:b7:67:ae:30:e1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Oct 19 04:01:28 2026 GMT
            Not After : Oct 20 04:01:28 2026 GMT
        Subject: CN=4aade44debb7958ff856dde95450474137447ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:bf:c0:55:50:e0:73:7e:e3:30:9c:ad:e8:
                    cb:fb:79:25:bb:c8:79:7a:1d:39:1a:26:34:aa:18:
                    7d:68:29:2e:00:9d:71:62:b4:e2:41:8c:70:3b:3d:
                    3a:c9:05:ea:76:bd:de:cc:17:d9:de:0d:c3:18:78:
                    f6:fc:27:de:d6:bd:2b:29:62:82:cd:11:0c:fa:0e:
                    30:ef:25:20:58:ab:01:d2:f3:f2:a1:40:2e:41:1f:
                    a9:cd:e9:cd:63:6f:9f:41:b5:d4:8c:20:54:91:62:
                    d1:b3:01:20:51:1a:33:f5:aa:67:6b:d2:f5:58:bb:
                    c6:e6:9d:b5:3d:62:7d:0c:e8:da:ae:f4:a9:d8:3e:
                    e3:50:21:eb:a6:b4:f0:17:1b:95:ec:fd:cb:42:6e:
                    f9:c4:c9:a7:ed:83:35:80:e1:71:c3:5e:0d:c6:8a:
                    02:a3:55:92:21:cc:bc:7e:a2:dc:9f:34:a1:7c:12:
                    e1:ff:fa:ea:b9:8e:5d:53:2f:d0:47:6c:bb:c4:d8:
                    a5:bc:ae:50:0d:57:d0:09:48:ee:56:0b:b3:26:cc:
                    65:7f:7a:50:62:f7:46:38:41:b2:3c:9d:fa:40:6f:
                    e0:79:69:70:ff:95:95:39:ae:3f:88:67:e7:a9:1a:
                    b4:73:60:80:29:ab:6f:2c:1d:d1:10:62:90:8a:ac:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:E4:4D:EB:B7:95:8F:F8:56:DD:E9:54:50:47:41:37:44:7C:A4
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:4f:7d:43:3c:c9:f2:21:cb:a6:c8:54:e6:f0:0a:e8:bc:
         36:21:c2:1c:aa:1f:fc:68:c9:ad:81:fa:0f:ff:c1:2f:97:34:
         09:49:5e:00:28:8b:4e:c6:55:2b:11:16:f4:0d:56:7e:66:5b:
         97:a0:6a:90:7c:f8:7d:67:07:af:92:23:f4:bd:d8:d6:1b:e6:
         10:99:5c:da:7c:72:7f:f1:78:2b:fb:97:40:b4:74:74:5c:38:
         55:9f:2d:59:de:01:a9:e1:8c:07:36:87:5c:94:95:f4:45:91:
         c3:f7:99:27:ab:eb:6e:63:07:7b:62:b0:0b:cb:dd:dc:f5:8b:
         02:c4:5c:1e:6e:74:b8:94:39:03:16:3d:fc:83:11:ca:24:ef:
         6e:f5:05:ae:33:60:66:c4:20:63:26:2d:3f:bf:a5:66:07:4d:
         d5:f9:4d:59:9a:7d:37:84:0c:f9:70:d6:60:92:2c:47:e4:06:
         f1:2c:95:d1:23:4e:4d:f3:4a:04:5f:bc:10:22:bf:dc:5c:e6:
         1b:6f:b9:92:f4:96:ec:90:ae:52:d5:cd:de:79:b9:50:26:58:
         35:ea:d6:7a:d8:9e:42:33:f0:7e:a3:ab:aa:af:28:87:32:6e:
         34:9f:e9:1a:f9:75:a8:87:75:3d:2f:95:9d:0c:ff:5d:2e:d6:
         00:58:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:30:38 2026 by rpki-client