Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
File:                     npWzJ2xWYmGPOcvBVYdAy-76GC0.mft (raw, json)
Hash identifier:          7ovNsgCp9wpbQZeG0amNEvEdB3TlKMpOIGY4pHEN5eg=
Subject key identifier:   39:26:FF:F6:2C:4D:9B:AE:C0:CF:CD:0C:D7:9C:AB:A2:19:9A:80:45
Authority key identifier: 9E:95:B3:27:6C:56:62:61:8F:39:CB:C1:55:87:40:CB:EE:FA:18:2D
Certificate issuer:       /CN=9e95b3276c5662618f39cbc1558740cbeefa182d
Certificate serial:       019D28F21E7FF5C43D2E1A7277705A44D625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 07:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:49 +0000
Files and hashes:         1: npWzJ2xWYmGPOcvBVYdAy-76GC0.crl (hash: N3mvh4+iVY9QFV26mx2A6YxuUw6LVdR85xja6Fnghhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:1e:7f:f5:c4:3d:2e:1a:72:77:70:5a:44:d6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95b3276c5662618f39cbc1558740cbeefa182d
        Validity
            Not Before: Mar 26 07:00:49 2026 GMT
            Not After : Mar 27 07:00:49 2026 GMT
        Subject: CN=3926fff62c4d9baec0cfcd0cd79caba2199a8045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:6c:f2:92:6f:49:50:93:5b:ca:94:18:a9:
                    d6:bb:5d:16:1e:14:1b:d5:de:b9:4a:a8:11:02:fb:
                    13:6d:50:15:6f:44:72:97:2a:ef:aa:77:e4:cb:61:
                    d4:6f:ab:84:1e:7e:8e:da:c6:53:21:9f:74:48:80:
                    bd:20:39:e3:5e:33:c3:91:ce:c1:c6:e2:10:36:78:
                    39:04:99:f1:d3:58:70:71:1a:cb:21:c5:99:98:fa:
                    22:f8:44:c9:61:a1:dc:59:fc:c5:78:c0:97:e6:ba:
                    da:a7:54:d6:8f:55:71:91:3d:39:b6:79:49:f1:13:
                    64:f4:b2:af:06:73:d5:a8:8e:28:e7:cf:89:43:9f:
                    e4:4a:4f:00:41:1a:d9:46:ce:2b:f6:bd:48:a7:7b:
                    04:af:67:31:f5:fd:15:6f:91:3a:df:80:33:6f:f2:
                    aa:7b:b3:53:23:cf:50:e3:24:4d:59:cf:29:f1:99:
                    d1:fb:3c:65:a6:a9:79:aa:fe:3e:fb:55:bb:1f:0f:
                    cd:99:7e:62:35:e2:50:3a:bc:f8:9c:44:ff:e6:7c:
                    2c:b6:81:24:55:64:4b:5a:11:06:aa:e0:ae:51:00:
                    f8:36:c8:cf:df:a3:b1:56:d8:2c:52:f2:21:a2:28:
                    1e:86:34:8e:50:32:81:67:7f:98:d5:1a:97:fb:fc:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:26:FF:F6:2C:4D:9B:AE:C0:CF:CD:0C:D7:9C:AB:A2:19:9A:80:45
            X509v3 Authority Key Identifier:
                keyid:9E:95:B3:27:6C:56:62:61:8F:39:CB:C1:55:87:40:CB:EE:FA:18:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4d:1a:82:1f:29:da:f1:53:7d:f2:9d:f1:ba:8b:fd:eb:56:
         e6:23:c1:3b:4d:d0:b2:9f:cc:8c:89:8e:2d:b4:ca:85:e0:55:
         13:a6:5c:6d:30:34:39:c5:17:9d:2b:91:ae:b5:bd:e6:f9:c3:
         da:02:6f:61:eb:43:a5:ae:7d:39:48:af:6a:de:a9:f9:fb:a9:
         e8:12:3f:26:80:4b:d1:89:5f:f0:3f:c5:fc:21:60:9c:a6:ae:
         89:45:2e:f3:52:92:b4:d4:92:67:d2:15:cf:34:03:03:b1:d0:
         f8:32:b4:f6:b1:00:38:f2:03:51:f9:d6:4a:4a:58:f5:4d:5f:
         0b:3f:dd:e0:71:f6:08:92:98:5d:b4:94:a1:fa:fe:52:35:1e:
         c2:92:ad:7e:37:84:7c:bf:1c:02:6e:76:45:05:43:de:2a:5e:
         c9:9c:eb:af:05:03:98:56:8b:40:4e:9e:05:61:9f:42:c9:bc:
         42:98:fb:8d:b1:46:bf:f9:b1:dc:0f:c3:9d:ee:74:7f:c2:71:
         0a:a3:43:60:fc:34:0d:59:36:fb:33:6a:29:29:fb:32:a6:83:
         52:54:3e:26:bb:1d:07:11:1c:65:82:97:51:a9:c0:bb:a6:ee:
         3f:1c:90:9f:ab:28:0b:97:59:55:f8:91:62:8f:09:71:47:fd:
         9b:35:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:23 2026 by rpki-client