Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          PELUY6I2xBLAKM9UwAofvhumxFutYEZnlhnnOZLo/HU=
Subject key identifier:   55:D3:67:C8:FC:F0:F0:69:B2:65:B8:4A:1B:C2:64:1F:74:AD:35:31
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       019F0A3DBAE472C065445C3EAC4BCADE4A8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          0B56
Signing time:             Sat 27 Jun 2026 18:00:45 +0000
Manifest this update:     Sat 27 Jun 2026 18:00:45 +0000
Manifest next update:     Sun 28 Jun 2026 18:00:45 +0000
Files and hashes:         1: 1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa (hash: 3frOGkt9ftuVgtTCe7VyDncQkJsfKLeQbnXtJjtvP38=)
                          2: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: naI6cShoeuS8kuMfkO+Ex5N1HlH7NoKBAjHzqvjJigo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0a:3d:ba:e4:72:c0:65:44:5c:3e:ac:4b:ca:de:4a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Jun 27 18:00:45 2026 GMT
            Not After : Jun 28 18:00:45 2026 GMT
        Subject: CN=55d367c8fcf0f069b265b84a1bc2641f74ad3531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:a5:d3:5a:41:c5:c5:9e:ec:d7:b7:44:b3:
                    ce:f1:31:c4:d9:5f:b3:43:dd:7b:dc:44:c4:aa:d8:
                    bb:3a:4e:65:e2:45:61:a4:52:64:3d:a4:c4:5e:01:
                    d1:1c:1d:d7:b2:b0:13:92:51:ad:48:1a:b0:d6:93:
                    c2:87:15:65:9d:2c:fc:e7:af:73:0a:2f:d9:48:32:
                    c5:52:71:0e:f7:1d:f9:c6:92:03:1d:d7:54:31:92:
                    4c:da:b4:30:9c:20:17:5c:e4:56:e3:45:76:34:38:
                    29:58:1f:76:32:4e:ff:04:6e:90:c3:f5:8e:d3:cc:
                    7b:b4:5a:21:16:6f:63:e4:1e:f0:1c:8a:77:49:84:
                    d8:ac:d8:9d:76:ad:99:52:a9:61:0e:6d:68:60:e2:
                    31:92:31:b6:64:a1:db:4c:99:a9:a9:62:39:0e:59:
                    66:a8:5c:e0:3d:b5:63:d1:39:96:bc:3b:95:45:14:
                    73:d3:8e:d0:12:c1:3e:85:ae:a7:10:8e:67:ab:6c:
                    f2:81:e3:af:13:58:16:b1:84:6e:d4:d4:95:49:a3:
                    03:1d:4d:da:25:3c:81:11:2f:0e:c7:75:4e:66:90:
                    c2:8d:06:a0:5c:67:fc:79:01:5d:74:a0:60:1c:a8:
                    56:fb:57:95:5e:c0:e6:b2:c6:90:c7:6c:18:60:5d:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D3:67:C8:FC:F0:F0:69:B2:65:B8:4A:1B:C2:64:1F:74:AD:35:31
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:83:6c:20:72:c9:25:2b:e8:82:6b:07:10:01:e6:04:6a:79:
         d2:15:29:31:ec:c0:f6:2b:26:17:34:09:6a:f8:d8:50:6e:58:
         30:c1:6d:16:30:4a:7e:df:d1:00:1f:82:85:a8:eb:29:d8:31:
         03:90:e3:44:b7:94:97:7b:d2:92:1f:54:35:75:25:ac:77:e3:
         d4:a8:b8:e6:29:7d:ea:a7:ec:f5:8e:c2:38:49:82:94:82:b5:
         ac:12:55:30:23:1c:e3:d4:83:16:bb:db:01:77:88:ad:e4:1f:
         1b:0f:9c:12:28:fb:db:69:ef:4b:03:d7:1a:1e:e6:6e:b0:f7:
         c5:65:13:bc:98:71:23:c1:3a:1a:f1:a9:83:c4:a4:82:bd:3b:
         b4:9d:cc:33:52:a9:50:f3:c0:9a:db:28:18:85:f3:96:6c:f8:
         05:9f:e6:9a:94:9d:29:a5:db:2f:97:f0:f3:f2:60:92:5d:a8:
         82:9d:06:fd:bf:f0:a3:fc:14:83:e9:86:3a:0d:ad:4c:a4:1e:
         d2:4b:6f:8a:5e:8f:7a:e8:4e:5d:23:2a:40:50:42:16:3c:9b:
         41:25:35:35:07:7a:86:79:44:0f:2c:49:8b:f0:1a:0b:7e:e0:
         b5:a9:32:7a:8c:09:48:34:0d:28:3e:99:dc:17:ea:f0:93:91:
         4a:28:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:53:05 2026 by rpki-client