Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
File:                     NPWeovpHqdYxGxyMxahqW5oOR6c.mft (raw, json)
Hash identifier:          aoGbbSQVJfoMqXgU+f3TLmYBFPQFIl0VLsNhw78efSA=
Subject key identifier:   26:5D:13:43:E4:78:82:22:F9:7D:3B:41:19:DB:C0:37:7E:EE:18:13
Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Certificate issuer:       /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Certificate serial:       019D2771CE441F8E38F996A3E468131AA618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 00:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:02 +0000
Files and hashes:         1: NPWeovpHqdYxGxyMxahqW5oOR6c.crl (hash: fGJmjdqCd4LBqhZCDtAWyPQXFRuferxDIw+qN4WRJhw=)
                          2: hB_chSYrjrugAT_A-KrXYM2hDOo.roa (hash: bObSAygQ33RlHdWKvJJo7WM9/6CgsuzaqEedUPRm6u0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:ce:44:1f:8e:38:f9:96:a3:e4:68:13:1a:a6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
        Validity
            Not Before: Mar 26 00:01:02 2026 GMT
            Not After : Mar 27 00:01:02 2026 GMT
        Subject: CN=265d1343e4788222f97d3b4119dbc0377eee1813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:4e:cf:a1:5c:76:c2:e1:92:71:a5:02:3a:
                    6d:b6:73:0f:1e:f0:f6:dc:5b:bc:7d:50:e9:09:b5:
                    13:55:0b:77:27:93:75:b0:55:f1:8f:55:62:aa:5b:
                    f1:3e:2a:9e:f9:d0:6f:1b:41:31:a6:52:c0:d6:93:
                    66:0f:9d:91:2a:c8:b6:64:a4:4d:bd:37:39:f0:7d:
                    4a:2c:26:d5:96:5c:d2:34:b4:db:c6:54:85:73:23:
                    07:62:a6:3e:a1:64:d9:92:bd:74:0f:27:00:28:c2:
                    97:ea:51:93:d2:b1:3b:95:e3:43:14:97:c8:69:07:
                    6f:07:da:75:52:d4:57:7d:c9:23:8c:a2:72:b8:59:
                    aa:bb:56:15:44:6d:77:27:98:a7:1e:1e:0c:5b:13:
                    7a:6a:c4:ff:f2:2d:ed:d1:bf:be:1f:54:a4:9f:7f:
                    a4:28:d7:b6:44:f7:26:4c:c8:d6:3e:41:6e:ba:4f:
                    f5:da:c7:af:7c:1f:77:75:b6:fa:36:40:c2:58:ed:
                    5e:3d:92:9d:0b:41:a2:5a:cd:ac:c3:9f:ad:f1:b4:
                    80:5b:84:d7:08:cf:82:98:a3:cb:2e:99:48:fd:40:
                    ae:75:2f:00:f5:fd:bf:19:e7:df:f1:cb:56:8c:9a:
                    2e:b4:44:fe:49:ac:e7:84:eb:3c:cc:be:c7:8b:b2:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5D:13:43:E4:78:82:22:F9:7D:3B:41:19:DB:C0:37:7E:EE:18:13
            X509v3 Authority Key Identifier:
                keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:82:3c:d0:d4:81:67:91:30:66:dd:c5:48:6c:48:53:0f:91:
         fa:17:8d:53:1c:44:e9:19:04:87:23:67:d9:1d:66:97:b3:d8:
         b7:af:97:b1:29:1c:5c:86:bb:6d:be:d5:62:86:b7:e6:10:25:
         f0:fa:19:b1:32:77:51:84:36:6f:10:23:b1:c8:b6:d8:ec:a7:
         b0:64:1b:66:61:f9:95:ef:81:cd:69:ce:b3:54:eb:b8:14:7c:
         d0:4a:7a:fd:1a:91:63:34:9b:bc:8a:81:15:28:25:fe:5d:b9:
         5e:f4:3b:60:08:c5:30:07:73:2a:cf:ac:bb:bb:fc:80:57:c0:
         fb:c3:c5:2f:3d:77:c2:4b:e5:28:df:a4:31:d0:97:89:8e:36:
         cf:71:e1:5e:80:67:b5:1f:c1:ff:e9:f3:80:36:1a:d3:13:f1:
         4b:1c:54:43:72:f7:51:ca:4e:7d:58:5b:d6:30:63:98:7b:cb:
         12:e7:cd:5e:42:a6:69:7a:6f:c1:33:0e:34:41:40:09:e4:6e:
         48:15:14:ee:b6:fa:94:49:c4:8f:63:2e:a9:c4:71:87:9d:0b:
         af:d7:be:c1:37:ba:d3:c4:49:51:08:85:bc:7f:66:86:28:31:
         c9:d0:8b:8e:0e:b2:26:2c:3f:54:bd:22:dc:a8:04:43:45:dc:
         ea:60:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:18 2026 by rpki-client