Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          GYisw8lGleF2q9u6QrBbPDhrhSoCUUntSUPH4zm4PfM=
Subject key identifier:   B2:5C:9D:53:F3:DC:C2:27:3E:00:A4:B3:74:79:05:AD:F1:0A:3B:CB
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       01A0024AD7008C3B639625F10C4AC9C6DBC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          1647
Signing time:             Fri 14 Aug 2026 22:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:54 +0000
Files and hashes:         1: 0SFsSDHYS4Gp8mYI62oKwdXXyJo.roa (hash: WkJ2KNUQsuLO69HUCr/UO91pQlE2mJKqwGtnWIGMWy4=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: MZywNVMm2CQdwZv1wWdcxY3BMmMuQlW6PvyfmKFMLNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:d7:00:8c:3b:63:96:25:f1:0c:4a:c9:c6:db:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Aug 14 22:00:54 2026 GMT
            Not After : Aug 15 22:00:54 2026 GMT
        Subject: CN=b25c9d53f3dcc2273e00a4b3747905adf10a3bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:44:68:90:21:61:2d:4d:4f:a5:78:97:64:
                    8a:18:de:85:7d:b5:9c:fd:ce:83:f0:f0:75:20:ef:
                    02:0a:7c:7c:99:b3:6b:da:0b:9e:f5:8e:51:13:bc:
                    98:51:ba:5c:08:71:9b:56:2b:5b:c5:a3:e9:c5:33:
                    8b:01:72:a3:1f:2d:20:ac:bb:2e:41:f8:89:95:66:
                    a2:74:b6:d2:fe:88:a9:9f:b3:18:ac:0b:30:f7:29:
                    83:99:0a:d4:84:55:ca:ab:8c:f7:1b:3d:78:91:4f:
                    b3:0d:56:f6:e2:45:01:30:bd:7b:fd:7b:8e:de:5b:
                    7d:80:fa:23:94:cd:c9:0a:37:ac:bd:5e:16:6c:4e:
                    b6:76:a6:76:f2:54:5c:72:4b:b0:dd:a5:4c:86:6a:
                    1a:35:7b:03:06:f5:7f:86:e8:3e:f2:21:f4:d5:5a:
                    81:93:c4:7a:93:0f:7a:d0:1b:c3:8b:74:aa:a6:b7:
                    af:3c:61:68:53:4d:27:9a:de:94:22:fe:d4:fd:d5:
                    f3:9b:ba:e1:31:ca:b3:3e:a5:06:b2:de:18:9c:4e:
                    b5:70:87:8a:61:f7:f9:3b:ce:51:46:8b:ff:ee:af:
                    1d:5b:0d:11:34:fd:de:9a:f4:46:36:93:f9:65:83:
                    63:68:e2:65:44:83:a8:10:90:fd:9f:ec:58:09:00:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:9D:53:F3:DC:C2:27:3E:00:A4:B3:74:79:05:AD:F1:0A:3B:CB
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:6f:80:aa:f1:45:be:ee:fe:42:83:6a:bb:18:e5:c7:9a:
         36:f6:ec:a3:91:24:99:61:58:99:f7:bf:ad:bc:f4:d2:95:6a:
         d1:38:43:42:51:67:2b:38:01:e3:ec:09:34:b6:f7:fe:d2:44:
         a4:99:f5:bc:49:74:10:1c:3e:41:ca:41:c4:c0:38:02:d3:ef:
         e3:47:14:9f:98:79:d5:ee:fa:fd:32:4e:d2:b8:72:d9:d8:5c:
         be:80:28:45:35:80:1b:cf:58:44:dc:c2:6d:b3:35:e4:ed:25:
         5a:05:a0:c6:c2:4b:a6:a6:99:36:e2:26:94:89:c4:3d:72:ef:
         12:21:b0:a9:47:5a:8d:a7:fd:ac:58:ee:a3:ca:1b:a2:e8:e9:
         ba:d5:cc:47:38:60:2c:7d:9d:4e:88:52:12:e1:26:32:e2:26:
         f4:38:06:40:01:8f:b4:b6:3e:0e:43:8d:ba:44:9d:5e:9b:78:
         2f:9b:1e:60:87:21:45:fc:40:a8:76:3c:c7:33:c6:cf:c3:6d:
         98:74:66:59:2c:a4:00:6e:4a:64:06:17:ad:19:f8:f3:00:80:
         08:b1:a9:8c:4a:03:9c:be:7c:0d:8c:24:ad:5f:75:d9:44:d9:
         e4:af:97:51:96:f2:f7:1a:60:7a:ec:b6:91:49:79:cc:ff:95:
         a6:db:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:59 2026 by rpki-client