Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          UpcaIy/zc+f0EWljuGEtHSnfNn9rza6osUCAgowCs9w=
Subject key identifier:   36:32:6A:9F:3E:42:C8:72:4E:7D:92:F4:69:32:DC:E4:06:9B:B1:8E
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       019D17FE9D2C2F6F23B601FF2509462799E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          0A54
Signing time:             Mon 23 Mar 2026 00:00:55 +0000
Manifest this update:     Mon 23 Mar 2026 00:00:55 +0000
Manifest next update:     Tue 24 Mar 2026 00:00:55 +0000
Files and hashes:         1: 1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa (hash: 3frOGkt9ftuVgtTCe7VyDncQkJsfKLeQbnXtJjtvP38=)
                          2: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: v3cid/miGzC7BivZVbTjl56jxLobdCxbUlq4MwHleD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:17:fe:9d:2c:2f:6f:23:b6:01:ff:25:09:46:27:99:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Mar 23 00:00:55 2026 GMT
            Not After : Mar 24 00:00:55 2026 GMT
        Subject: CN=36326a9f3e42c8724e7d92f46932dce4069bb18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:6b:a1:07:9c:69:66:b7:e5:b2:f6:07:bc:
                    4a:f4:2c:3f:26:ea:7c:fb:b9:2f:1d:c9:a7:15:33:
                    3a:06:f7:82:86:e6:ec:1b:b6:a0:96:ef:2c:f0:79:
                    12:10:06:3c:08:d3:a7:82:43:43:fe:0b:82:50:b6:
                    e3:e1:94:54:dd:8a:43:ea:8d:06:70:cf:1f:96:81:
                    45:3b:e9:df:56:b3:62:63:82:8e:0a:10:80:17:ba:
                    67:1f:44:3c:dd:f3:3e:08:25:26:a6:26:e4:19:41:
                    8d:5a:e1:4f:b4:c9:21:2f:b0:44:94:ba:5a:e3:6f:
                    ca:29:dd:a6:e6:f5:06:25:d7:f0:27:fd:68:e4:9f:
                    a3:0e:c0:98:20:c2:ff:7f:ac:e9:be:6c:68:95:f6:
                    42:81:21:19:e7:94:8a:9c:a0:5f:2d:e4:82:3a:f0:
                    18:5a:6b:ec:69:0f:e3:81:eb:19:86:e4:4a:98:f3:
                    f2:a4:a0:71:68:e3:2c:1b:92:0b:f0:11:64:d3:d9:
                    b2:2f:45:6c:99:27:4c:84:5b:53:f7:73:cb:b9:3c:
                    96:00:95:5b:b8:34:67:8b:c4:7f:b7:83:c2:82:79:
                    d1:dd:fa:82:70:fb:40:67:59:50:57:ac:9b:be:f9:
                    e3:61:a5:67:7a:6c:25:f7:0a:57:1a:5b:e9:bf:0e:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:32:6A:9F:3E:42:C8:72:4E:7D:92:F4:69:32:DC:E4:06:9B:B1:8E
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:98:94:f4:74:02:da:ef:dd:d5:08:fb:f1:1d:56:8c:ee:a0:
         be:1e:05:02:68:ec:df:09:0e:af:84:cc:de:18:ee:ee:17:df:
         c6:77:42:ed:14:6b:1f:9b:12:6c:eb:a5:bf:47:ab:a4:15:f8:
         ce:9f:fe:b7:77:69:ee:10:65:89:1c:84:2f:72:01:ef:e1:8e:
         cc:79:e6:a8:8c:11:54:59:b8:ab:fd:03:db:4b:53:70:c5:46:
         11:af:45:8d:ad:a4:46:d6:af:55:9b:e9:de:7e:99:50:ad:90:
         36:cb:03:e2:56:95:f6:92:d0:b4:04:76:10:7b:f3:0f:a5:f6:
         73:35:fc:e3:3a:0d:8e:92:19:a8:10:d7:ce:a2:be:07:ae:1e:
         ec:5c:cd:d0:4e:79:27:7f:40:8a:d6:b8:f5:5f:77:46:84:b0:
         41:5b:f5:4a:cf:da:14:d8:5b:7a:b1:83:9c:f2:ff:1c:6c:17:
         2b:23:50:13:20:a8:ac:6e:46:14:9a:f7:47:c4:2c:d2:96:a7:
         1b:be:5b:ab:ed:75:42:e6:9a:92:4c:93:a5:f4:2b:d1:13:20:
         b7:6e:92:d4:d3:64:cd:ce:15:4b:a5:01:77:ee:fe:54:05:cb:
         f6:a8:de:c7:36:45:8e:2a:48:72:b2:e8:13:6c:dc:04:e6:0e:
         8d:f1:59:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0X/p0sL28jtgH/JQlGJ5nlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTMzZjJjZTU3Yzc0Y2JmOWZmYTUwOTY4NWQ2YWNiZDhj
NTM5OTgwHhcNMjYwMzIzMDAwMDU1WhcNMjYwMzI0MDAwMDU1WjAzMTEwLwYDVQQD
EygzNjMyNmE5ZjNlNDJjODcyNGU3ZDkyZjQ2OTMyZGNlNDA2OWJiMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDNroQecaWa35bL2B7xK9Cw/Jup8
+7kvHcmnFTM6BveChubsG7aglu8s8HkSEAY8CNOngkND/guCULbj4ZRU3YpD6o0G
cM8floFFO+nfVrNiY4KOChCAF7pnH0Q83fM+CCUmpibkGUGNWuFPtMkhL7BElLpa
42/KKd2m5vUGJdfwJ/1o5J+jDsCYIML/f6zpvmxolfZCgSEZ55SKnKBfLeSCOvAY
WmvsaQ/jgesZhuRKmPPypKBxaOMsG5IL8BFk09myL0VsmSdMhFtT93PLuTyWAJVb
uDRni8R/t4PCgnnR3fqCcPtAZ1lQV6ybvvnjYaVnemwl9wpXGlvpvw5SawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYyap8+QshyTn2S9Gky3OQGm7GOMB8GA1UdIwQY
MBaAFJ6TPyzlfHTL+f+lCWhdasvYxTmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDkt
ODI1OTgwNWM2NDRjLzEvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDktODI1OTgwNWM2NDRj
LzEvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5iU9HQC
2u/d1Qj78R1WjO6gvh4FAmjs3wkOr4TM3hju7hffxndC7RRrH5sSbOulv0erpBX4
zp/+t3dp7hBliRyEL3IB7+GOzHnmqIwRVFm4q/0D20tTcMVGEa9Fja2kRtavVZvp
3n6ZUK2QNssD4laV9pLQtAR2EHvzD6X2czX84zoNjpIZqBDXzqK+B64e7FzN0E55
J39Aita49V93RoSwQVv1Ss/aFNhberGDnPL/HGwXKyNQEyCorG5GFJr3R8Qs0pan
G75bq+11QuaakkyTpfQr0RMgt26S1NNkzc4VS6UBd+7+VAXL9qjexzZFjipIcrLo
E2zcBOYOjfFZ1A==
-----END CERTIFICATE-----
Generated at Mon Mar 23 05:49:42 2026 by rpki-client