Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File:                     NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier:          oj4KZgd6gq35Q2OArOVJKCkafnPv1Wlr9wVIw83wP84=
Subject key identifier:   A5:AB:12:22:C9:31:9D:50:B3:A4:D1:C1:31:07:9F:3D:E5:32:2F:C6
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer:       /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial:       01A0D64BB5B674C92ED5B8A29CE97CF90ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number:          17D9
Signing time:             Fri 25 Sep 2026 02:01:20 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:20 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:20 +0000
Files and hashes:         1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
                          2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
                          3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: SDBZPx30ySVqis/A9GsqbJZCVeyafDmR7EHdW8Dt+1E=)
                          4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:b5:b6:74:c9:2e:d5:b8:a2:9c:e9:7c:f9:0e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
        Validity
            Not Before: Sep 25 02:01:20 2026 GMT
            Not After : Sep 26 02:01:20 2026 GMT
        Subject: CN=a5ab1222c9319d50b3a4d1c131079f3de5322fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:31:e8:62:23:15:53:bf:0f:21:5e:03:75:
                    ac:53:ee:af:e9:a3:06:c9:66:fb:65:0a:a4:a2:37:
                    4a:44:0b:52:e7:6d:01:a4:b5:09:b7:4c:3e:82:7a:
                    bb:f3:12:6e:58:98:43:56:6b:d1:c0:08:93:3b:ef:
                    b0:4a:a9:07:6a:e5:99:8d:3e:28:f4:b4:11:89:7d:
                    5f:e8:d2:51:f7:fb:62:75:f7:fa:67:ac:78:1e:84:
                    93:b1:cf:ca:6a:91:bb:63:3c:ec:48:87:9c:60:c4:
                    43:02:ba:8f:a2:ce:26:83:e7:71:18:7e:3b:e5:dd:
                    90:11:c2:e0:2c:1d:c0:31:4a:8f:fd:6e:3d:aa:8f:
                    ac:20:eb:49:c5:dd:18:3b:dd:a5:20:cb:30:dd:cf:
                    2b:76:0d:c8:2b:1d:9b:0b:b1:e9:a1:3b:95:a8:9e:
                    69:73:da:7b:4f:a8:33:70:17:35:bd:15:4a:f9:c7:
                    10:67:18:8b:38:5e:b2:3d:fa:94:16:69:60:b0:2e:
                    b4:f5:63:bf:15:0a:13:aa:11:e1:fd:33:68:7f:1c:
                    93:67:85:46:c4:72:93:c6:36:4a:76:c1:01:07:6c:
                    4a:a6:e6:ee:19:9f:e2:02:f8:83:93:33:33:68:2d:
                    d9:d0:85:e1:0f:52:18:25:19:49:4f:60:ce:dc:f5:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AB:12:22:C9:31:9D:50:B3:A4:D1:C1:31:07:9F:3D:E5:32:2F:C6
            X509v3 Authority Key Identifier:
                keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f3:00:b3:a0:e5:e4:95:9d:1a:fe:5d:a7:0f:ea:e7:f6:0e:
         03:8e:7e:f4:f2:56:68:16:9e:b0:64:0f:bd:be:40:8f:5e:30:
         ea:61:d7:eb:1a:ef:c9:ae:98:e0:29:d3:1f:12:73:e1:ab:26:
         48:12:d1:f0:30:e4:f1:4e:4f:82:e0:82:a6:1a:ae:c4:c4:d6:
         b3:4d:48:93:50:2d:0d:da:6e:17:e6:2e:67:1c:62:99:d8:23:
         e0:d9:8b:17:15:f0:e7:11:a6:2e:66:fa:42:d4:77:4a:a2:f5:
         65:ec:30:51:f8:e5:43:45:43:26:f0:9c:05:04:bf:70:7c:b3:
         13:e7:b0:26:4f:ff:5a:f3:02:88:bc:14:bf:24:9d:6e:f2:69:
         b7:dd:38:61:3d:dd:6b:6c:48:eb:72:20:5b:41:e9:71:b6:cf:
         4c:a6:b7:b8:bc:69:37:4f:a4:38:8d:fe:d8:ea:04:94:49:0c:
         80:dc:d3:3b:c7:5d:32:43:c2:8f:6b:cc:97:3a:c6:4d:01:7a:
         10:a6:eb:49:d4:35:cb:3c:ec:23:9a:53:4f:b5:9f:7c:14:a5:
         60:dd:79:c9:74:ee:3a:73:64:f5:4e:45:5c:3c:7d:39:66:eb:
         1c:c0:69:e4:9a:26:5b:43:ac:29:48:30:12:a8:81:28:55:7a:
         ab:56:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:44:45 2026 by rpki-client