Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          unifooEHvEBCxSqkSCmVJxH3VhqBOigAJbzEV4ueTZ8=
Subject key identifier:   A4:A3:C7:6F:10:65:BA:21:B4:69:11:C4:E5:FA:A9:70:EE:48:F1:23
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       019E1D90E37DB6A3E570B29CB5CEB5833BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          154C
Signing time:             Tue 12 May 2026 19:01:35 +0000
Manifest this update:     Tue 12 May 2026 19:01:35 +0000
Manifest next update:     Wed 13 May 2026 19:01:35 +0000
Files and hashes:         1: 0SFsSDHYS4Gp8mYI62oKwdXXyJo.roa (hash: WkJ2KNUQsuLO69HUCr/UO91pQlE2mJKqwGtnWIGMWy4=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: UZV0Afr7MhqI1crLHI+LuXwLZedcgzL2P0BBV5kzszY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:e3:7d:b6:a3:e5:70:b2:9c:b5:ce:b5:83:3b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: May 12 19:01:35 2026 GMT
            Not After : May 13 19:01:35 2026 GMT
        Subject: CN=a4a3c76f1065ba21b46911c4e5faa970ee48f123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:7e:7b:c9:48:fc:2f:5c:6d:ef:78:e6:c0:
                    96:51:60:9f:6b:b8:fb:48:4e:e3:9f:5f:e3:fb:20:
                    3d:97:3d:72:1e:13:da:51:5b:7a:dc:46:ec:67:ad:
                    e5:60:34:d4:c6:99:d6:32:72:f1:21:70:59:5d:fa:
                    2a:0d:16:77:3b:ff:53:bf:3e:38:15:af:0d:02:38:
                    3f:65:24:38:ca:52:f9:f5:42:28:3e:73:f6:22:2f:
                    a3:01:58:41:f0:1f:9b:44:97:1c:be:63:d4:7e:ca:
                    2b:8f:64:e7:06:3f:eb:e2:43:c1:6e:9e:7a:27:98:
                    eb:ba:0f:b2:f6:58:f5:81:13:1e:d9:72:a8:e4:1e:
                    ff:67:b8:ee:a5:17:62:70:1a:c7:8d:83:95:81:1f:
                    c7:fd:46:f1:33:13:ed:bf:1f:7a:e0:81:49:5b:3c:
                    b3:0b:8a:13:30:72:fd:03:fb:c8:ed:80:d9:1a:90:
                    1b:39:ba:cc:82:d5:f4:04:0f:a2:c1:69:3a:fc:8e:
                    0b:3e:f6:b9:77:ca:da:2e:95:e5:ed:07:16:80:83:
                    46:0f:87:77:c4:3e:16:76:1c:e4:71:30:e2:e6:64:
                    59:4a:a8:5a:b1:77:34:24:fc:4b:7b:26:5f:65:0c:
                    69:70:53:b7:69:3a:e8:8c:0b:f7:e3:3a:67:f0:d3:
                    97:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A3:C7:6F:10:65:BA:21:B4:69:11:C4:E5:FA:A9:70:EE:48:F1:23
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:e7:23:38:9b:d0:b9:30:69:41:c3:0c:84:57:b4:07:9a:
         ca:97:a1:3f:77:d8:e6:8a:a6:36:46:8b:dc:19:dd:02:2a:00:
         2a:b8:08:5f:a6:d2:ef:24:27:46:6d:06:fb:84:6f:0c:e2:62:
         5d:72:ee:79:55:e6:3b:00:33:1a:e9:bf:8d:8d:0a:1f:36:05:
         1e:02:d3:eb:07:79:a7:a5:f7:b9:b5:3d:25:08:39:cc:27:81:
         aa:8f:e1:f2:b0:c0:fc:af:21:4c:65:79:32:7f:82:7b:da:9c:
         40:00:1c:3c:c9:dd:bd:f0:d2:ce:78:54:19:b2:8f:a3:92:fb:
         e0:c3:bb:5b:a6:68:ca:c8:b3:7a:6a:55:46:6f:82:7e:3e:83:
         e4:25:49:1c:f4:46:f1:8f:81:0d:5b:9b:02:b8:9f:83:d1:bc:
         a8:b8:7b:ad:1e:a6:1a:8e:d1:d1:e8:59:eb:8d:e1:61:b9:e0:
         b1:43:c0:31:56:ec:c2:13:d5:d3:5a:47:6a:ce:b4:f5:a5:f2:
         9a:6a:5b:26:4a:be:0d:a1:a0:48:ad:7d:0d:5f:c5:27:96:69:
         fb:83:6a:c3:89:76:9d:31:d5:04:2a:5d:68:a8:00:cf:53:c6:
         57:e9:c6:bb:da:89:bb:9b:cd:e1:ab:10:08:0a:95:4e:2c:c6:
         69:ce:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:39 2026 by rpki-client