Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          7SA6ThUztXYq2h+rmtxRJD4GPUtISSPDHr//lJkEzpg=
Subject key identifier:   68:F2:AD:49:00:38:51:BB:E9:79:9A:01:E2:4F:2D:E6:56:55:CC:E7
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       019F9436F55E10BCD79073CBA2017E8136D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          160E
Signing time:             Fri 24 Jul 2026 13:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:57 +0000
Files and hashes:         1: 0SFsSDHYS4Gp8mYI62oKwdXXyJo.roa (hash: WkJ2KNUQsuLO69HUCr/UO91pQlE2mJKqwGtnWIGMWy4=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: 9EaEPrY+ZHmq2e6SxBT9Sesj8fH4IaiqpjPpJAbDjmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:f5:5e:10:bc:d7:90:73:cb:a2:01:7e:81:36:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Jul 24 13:00:57 2026 GMT
            Not After : Jul 25 13:00:57 2026 GMT
        Subject: CN=68f2ad49003851bbe9799a01e24f2de65655cce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:75:3b:6e:13:8b:fa:64:8c:77:fa:ad:fb:
                    cf:f2:c9:93:55:77:f3:59:42:e0:f0:93:0f:f1:a4:
                    02:3a:c5:51:47:8b:a7:9e:0b:14:18:ea:a7:d7:8c:
                    d8:c2:22:dc:fc:32:2a:04:ab:63:56:cd:c4:96:75:
                    a8:59:26:0c:9f:f0:a3:d2:18:08:cb:55:b0:ad:88:
                    67:37:6f:e0:25:5a:63:4b:fe:43:e4:f9:90:35:7d:
                    de:c4:d2:48:63:d0:de:e0:14:df:02:60:f7:01:9b:
                    51:97:5c:07:0b:59:8b:10:58:91:3d:d3:8b:c1:dc:
                    2a:18:2d:31:44:23:b3:8c:c3:6a:94:13:11:da:87:
                    bd:0e:39:c5:e2:39:ef:ad:9c:ea:3e:8d:bb:8b:c1:
                    6f:18:60:be:43:1c:dc:0b:d4:a6:f5:75:3e:89:19:
                    6a:f2:a8:7c:d3:48:c2:a3:5f:6f:56:d2:ce:5d:cd:
                    08:88:4a:6c:39:5d:88:d8:d9:1c:08:5e:8e:39:a7:
                    ea:fb:21:47:42:67:4c:fe:dd:ca:23:15:6f:dd:d2:
                    39:d7:12:1f:0e:89:93:6a:70:78:1b:f9:72:a8:89:
                    09:c7:c8:90:ae:ea:ca:03:a3:ac:1a:c5:2b:80:0d:
                    23:06:30:c2:25:ab:65:9d:bb:b0:5f:bd:2d:a3:82:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F2:AD:49:00:38:51:BB:E9:79:9A:01:E2:4F:2D:E6:56:55:CC:E7
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:84:d1:6b:68:40:d2:f8:52:55:bc:f6:c3:06:d5:95:fe:
         d8:6e:01:5d:51:1c:29:66:c6:5e:98:56:d4:0f:0a:32:2a:36:
         da:ee:c1:17:e5:ac:ab:cc:24:fd:ba:2b:0f:90:9d:df:48:09:
         6d:6a:c2:6f:15:d9:21:4c:a1:a4:d6:ee:c6:c1:dd:25:c3:4f:
         d6:bb:f2:38:57:d9:69:8b:80:be:31:a1:7a:9a:7c:af:88:44:
         93:80:c8:61:50:23:94:3a:7d:b2:bd:75:83:d1:ef:43:b6:af:
         10:57:8a:9e:f2:41:3d:82:78:25:39:93:1e:a0:5a:2d:40:ec:
         3b:69:70:11:db:99:bc:0a:d7:19:da:ff:fd:f9:ed:44:b1:09:
         6c:ec:9e:da:a0:27:c7:f3:67:a1:dc:fc:b9:d9:9d:d9:86:eb:
         b0:d9:ee:b7:7c:7c:3b:18:94:6a:f5:e0:d8:c1:94:b5:71:b9:
         17:de:23:0f:a3:35:08:af:e1:56:05:fe:31:d5:f1:c3:3c:04:
         4c:e5:5d:60:76:f0:31:87:4e:5d:a3:7c:66:32:40:73:18:9f:
         cd:65:5b:0a:8d:a5:e4:42:e8:7e:c4:ea:2b:72:19:16:54:0c:
         94:85:d5:40:c9:d6:01:9b:83:cf:37:c0:65:07:d8:5c:c1:a3:
         f9:fd:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:04 2026 by rpki-client