Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File:                     npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier:          hF2h4XzlIrNpauSVe3z+bhYZDzab8HzSORRFGfZ0xQY=
Subject key identifier:   CA:97:98:A2:96:2E:0E:64:7A:F7:A8:DF:05:AF:52:75:BF:74:83:38
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer:       /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial:       019E9B17EFFC245B2E1141A33740DCB4F0AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number:          0A05
Signing time:             Sat 06 Jun 2026 04:01:37 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:37 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:37 +0000
Files and hashes:         1: npTVvz231nNNzxvmItX97i_sO48.crl (hash: XEfJHXjLW7WbEKo0B5kzkd7+OOmtpjcHpCdBYbqFE+g=)
                          2: zcxoOaYQZVz0kyNkbAvoL7_cGOo.roa (hash: cbQCnBDpdRHmtA6XlyYrBSpV92ISXXC3TjEjSfaVLUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:ef:fc:24:5b:2e:11:41:a3:37:40:dc:b4:f0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
        Validity
            Not Before: Jun  6 04:01:37 2026 GMT
            Not After : Jun  7 04:01:37 2026 GMT
        Subject: CN=ca9798a2962e0e647af7a8df05af5275bf748338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:23:f9:40:fa:aa:65:90:9c:b6:8a:6d:9f:
                    4b:4d:e5:91:4f:1e:6e:8e:db:28:74:7d:c5:af:a3:
                    b7:d4:79:9c:7c:f0:90:1c:96:bd:c8:37:08:a0:79:
                    6e:c9:df:24:88:d8:a7:78:fa:99:69:fb:48:20:50:
                    eb:cc:27:e2:79:ee:ac:88:65:7b:de:d2:a8:f8:74:
                    06:4b:ae:79:92:37:d6:e8:3f:8f:47:d0:df:dc:f4:
                    fb:dd:f5:c2:da:b0:f1:7f:f9:44:b6:27:49:dd:f0:
                    a6:76:65:8d:33:41:b8:39:4a:32:b0:88:2d:38:c9:
                    f0:8c:9c:2a:85:d7:f4:c9:a0:34:6e:3b:c0:dc:53:
                    7f:1c:2e:ba:52:d7:ef:d3:ae:5b:c4:69:10:40:13:
                    e7:f4:20:21:2c:7a:68:3b:17:4f:b0:ec:fa:52:f4:
                    36:2a:fb:f5:f2:2c:7f:96:24:4d:81:fd:31:f4:98:
                    2b:14:b0:ed:82:9c:a5:7c:9b:96:80:2f:1d:4a:f6:
                    7b:b9:ae:43:70:4f:29:79:ba:e5:44:27:ab:2e:94:
                    b2:29:e4:3c:75:0c:46:d7:b4:de:fd:f9:85:c4:ea:
                    6e:73:07:11:14:26:e5:14:a6:9a:91:c4:a4:55:d0:
                    0b:04:e9:92:6b:6c:09:60:b4:4c:0a:09:7c:50:b6:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:97:98:A2:96:2E:0E:64:7A:F7:A8:DF:05:AF:52:75:BF:74:83:38
            X509v3 Authority Key Identifier:
                keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c4:e9:79:e9:41:72:3d:a9:fb:df:72:37:15:6c:18:fb:71:
         d0:96:a4:10:3e:ea:b9:1e:18:e0:23:75:13:6c:1f:31:0c:d2:
         d0:f4:35:29:94:ef:20:74:4e:ae:bb:b7:9e:da:9c:1a:57:47:
         70:48:31:95:ca:82:14:fd:c9:4f:86:b4:b8:9c:08:16:f5:6a:
         1b:9c:61:3a:f8:cd:c4:f6:60:82:5a:88:bf:6b:47:4b:3a:f9:
         31:d1:94:eb:72:6e:0b:da:c1:4c:60:1c:59:b3:9b:61:bb:03:
         af:6b:22:33:cd:fe:c6:ba:11:9b:fb:8f:68:0c:89:17:02:18:
         0c:80:43:26:6b:85:f7:81:11:30:12:4b:fa:cc:a0:95:4b:b7:
         92:78:5c:69:f7:b5:4c:4a:6b:1f:07:31:8f:11:f9:e1:e9:0a:
         30:db:ad:2d:38:e4:df:c6:a9:f3:51:f4:ec:58:df:76:fa:2d:
         2c:58:f4:09:a3:0d:a6:0a:b4:cf:c6:e7:df:b6:b1:40:7a:8a:
         ee:35:13:ef:32:56:05:02:0a:a7:b9:d4:79:8c:63:37:a3:1e:
         1c:52:8e:17:73:26:4f:43:45:1c:a9:37:45:9f:2e:8d:64:a3:
         24:a4:aa:e3:c9:43:3f:09:dc:38:df:d7:3b:7f:9a:7b:93:a0:
         7f:30:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:00:30 2026 by rpki-client