Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File:                     NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier:          rwng9dXheXE6rWkneto+DmMRvtqtez1oqoJkL360Aro=
Subject key identifier:   A7:3B:83:62:3C:70:09:18:45:1A:B4:C9:73:E1:D0:35:01:58:75:D6
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer:       /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial:       019E1E6C68F7DD72A9D5915188F4D5C94AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number:          0600
Signing time:             Tue 12 May 2026 23:01:21 +0000
Manifest this update:     Tue 12 May 2026 23:01:21 +0000
Manifest next update:     Wed 13 May 2026 23:01:21 +0000
Files and hashes:         1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
                          2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: Dgy5v5cXgyxoq+te5U5tr1KS1/jrI9zfu7Z/LMet540=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:68:f7:dd:72:a9:d5:91:51:88:f4:d5:c9:4a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
        Validity
            Not Before: May 12 23:01:21 2026 GMT
            Not After : May 13 23:01:21 2026 GMT
        Subject: CN=a73b83623c700918451ab4c973e1d035015875d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:bb:dd:55:82:d1:d1:51:bd:a6:67:c8:33:
                    f0:cc:fd:56:d2:08:57:73:28:60:ae:7a:77:f1:6f:
                    d2:a7:60:aa:2e:3f:8e:2a:7b:9f:7f:02:de:63:0b:
                    4a:07:e5:a4:b7:e3:9d:c3:88:9e:d8:a2:bd:24:e2:
                    9c:03:c9:ab:2d:8a:29:18:f0:5b:a8:72:8c:b3:59:
                    aa:ca:7b:8d:76:72:03:c7:bc:ab:55:31:04:ec:ac:
                    2e:d4:13:e6:27:a0:ce:f9:85:0c:fa:7b:ef:e4:f7:
                    87:cc:6a:12:29:76:ea:3d:0b:18:79:0c:bc:30:bc:
                    e9:97:f5:3f:cf:72:bc:f1:47:0e:5d:2c:f7:b0:a1:
                    c1:10:fc:0a:e3:f6:cd:a9:ad:0f:71:d6:58:eb:97:
                    84:aa:bf:c4:60:65:31:82:75:37:c9:e9:88:40:89:
                    f3:53:95:ae:b0:c3:05:47:93:a8:95:50:c4:67:c0:
                    09:6a:0b:25:fa:70:f4:e0:d2:c8:bc:13:f1:1d:30:
                    ad:37:ba:26:21:cf:f8:2f:70:77:f6:77:99:2f:81:
                    95:71:76:43:0e:09:b5:c4:4a:75:24:83:5f:29:8d:
                    b0:46:55:34:97:87:86:67:1d:b0:76:7b:70:a4:25:
                    e2:46:cd:ab:06:2e:8f:03:87:04:47:7d:55:2f:dc:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3B:83:62:3C:70:09:18:45:1A:B4:C9:73:E1:D0:35:01:58:75:D6
            X509v3 Authority Key Identifier:
                keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:50:f1:62:08:28:b4:53:12:89:2c:93:c6:fb:d2:7f:3e:16:
         3c:8b:93:3a:7a:64:91:68:cd:de:2c:e9:8d:15:ce:c1:df:15:
         c1:55:40:45:98:d0:b8:0d:d9:1c:b4:e1:bc:fe:25:77:d9:e6:
         3f:76:0e:0f:bd:9e:54:4e:fd:15:13:3c:36:cb:24:f4:a3:2c:
         4c:cc:57:37:59:ae:6e:fc:d1:0e:00:1a:6a:d3:f4:b4:5c:ae:
         54:d2:23:a5:de:03:7f:29:ba:5d:5a:dc:f3:94:bd:49:be:7a:
         6b:dc:19:68:29:39:12:b2:5f:a8:dd:60:8a:a8:88:bb:b4:1b:
         a6:19:96:49:6f:5e:e7:1b:a2:88:fd:bd:8f:a3:9f:e0:dd:47:
         d4:96:47:14:c3:42:8c:61:bd:9b:c3:b4:fd:19:a0:06:a0:b4:
         a4:a2:f5:35:77:06:7e:8e:58:b0:0c:86:e0:7a:d8:3b:60:f6:
         53:64:3f:f6:0e:1d:e6:33:45:3a:86:df:ce:de:21:69:f3:2f:
         c9:df:38:ff:27:57:49:18:46:fc:78:b4:2f:29:b6:b4:9d:55:
         26:97:cf:14:10:3a:e5:43:e0:f5:ab:79:a4:e5:26:9b:9f:14:
         f0:6d:c2:87:55:63:68:35:f1:73:67:e9:cc:24:4f:3a:25:81:
         f1:0d:9d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:31:31 2026 by rpki-client