Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File:                     np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier:          wuv0t3VBIbO7r+Y1KjTRIRHRNNkYEvQ+HaSawaM6bV0=
Subject key identifier:   8E:63:1F:E5:12:50:8D:CD:7D:70:39:BA:09:AB:B7:CF:A2:3B:84:F7
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       019E209154B2B10E569A5D5CABA126B95943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number:          14BE
Signing time:             Wed 13 May 2026 09:00:55 +0000
Manifest this update:     Wed 13 May 2026 09:00:55 +0000
Manifest next update:     Thu 14 May 2026 09:00:55 +0000
Files and hashes:         1: 7rKcQQXxl0Wqi99lSzLSIA_PGiE.roa (hash: 6yLayhUVccwVTayfXedjC+AWPa6ZfJFk+hN+rmaMZyA=)
                          2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: XriaS9QVMwP4WpVdTJ7aaxn5rqb4UoueH5k6X7e3iH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:54:b2:b1:0e:56:9a:5d:5c:ab:a1:26:b9:59:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: May 13 09:00:55 2026 GMT
            Not After : May 14 09:00:55 2026 GMT
        Subject: CN=8e631fe512508dcd7d7039ba09abb7cfa23b84f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:56:49:ec:f6:18:23:09:48:f9:bd:0a:de:83:
                    a3:77:4b:fd:61:d6:10:30:df:d6:10:4b:cb:d1:f9:
                    54:06:71:26:93:4b:c0:41:2e:5b:5a:61:59:a2:b5:
                    ea:08:7e:41:14:48:c0:1c:f2:e4:c9:f2:a4:c5:b2:
                    88:7d:a4:c9:3f:39:9e:b8:69:4a:7b:44:f4:c6:ba:
                    e8:89:e8:2b:fa:62:df:15:2a:9d:db:e0:c4:cb:ec:
                    c3:9f:fb:22:f1:99:6c:e5:95:81:2a:99:02:cd:f4:
                    e5:4a:4d:65:1f:b7:f5:6b:66:6f:d6:0c:4a:16:07:
                    9a:29:39:3c:b5:46:c8:82:49:98:1e:a7:0a:f0:ce:
                    76:85:e6:96:0e:a3:b7:db:88:83:3b:61:34:1e:fd:
                    e8:bb:43:fa:52:cf:e8:da:1b:a3:73:68:8f:08:0c:
                    e1:1f:d2:78:51:10:ec:b0:b7:c0:70:1b:5e:d1:a7:
                    a3:11:a9:91:9b:c6:16:c6:78:bb:f9:a6:b1:b7:cd:
                    3c:c9:2d:df:ab:67:3f:67:c8:3c:ee:5c:9f:b6:1c:
                    c5:91:6d:ef:04:4b:73:47:b0:9a:2b:d0:27:a8:88:
                    5c:97:78:50:e7:02:fe:8e:e6:f7:ee:86:1a:bc:2f:
                    ca:26:74:e1:80:40:52:e3:68:e4:a8:67:25:7b:67:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:63:1F:E5:12:50:8D:CD:7D:70:39:BA:09:AB:B7:CF:A2:3B:84:F7
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:07:be:bc:bb:e6:df:22:33:7a:83:8b:17:4b:7f:24:32:26:
         29:d2:09:a6:9e:6e:07:b2:e9:ff:bb:cb:14:6c:8c:ea:9d:50:
         3c:ef:b1:be:36:4f:97:a4:65:c3:ac:5a:5f:91:18:4e:02:aa:
         8f:d7:02:94:33:a0:50:86:03:7a:69:04:9c:ec:2c:76:22:f0:
         7c:46:6e:22:1a:56:5f:e8:92:99:59:b7:10:ed:e9:59:c0:92:
         a2:96:27:dc:b9:68:73:ab:11:95:dd:57:46:da:2a:bc:08:d7:
         a7:ab:34:69:2a:0b:e4:52:ee:bb:7b:e6:f4:5e:07:6e:1f:04:
         0d:58:66:2e:a4:ed:71:c3:25:2d:82:a6:9d:b1:26:90:b6:06:
         55:d6:1f:34:bd:48:0b:27:f8:1c:54:aa:f8:77:a2:63:f0:7d:
         cd:2c:a8:d9:4d:9f:c6:26:82:f1:ca:97:cb:7e:8f:ed:a7:d1:
         be:98:4b:78:1c:8c:e0:e8:5f:03:6e:d6:bc:59:a4:5e:18:6b:
         e3:a3:49:bf:13:20:54:ac:9e:f0:71:33:60:56:a1:49:cb:96:
         9e:19:33:ad:52:cc:35:be:ce:42:ec:39:1e:98:5f:2a:d6:e9:
         4a:9e:f8:7b:49:c6:a3:98:80:22:b9:9f:4d:b0:9d:f4:e6:9c:
         51:3d:ab:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkVSysQ5Wml1cq6EmuVlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOWU2ODg3ZWE3NTcyYTY0MTEzMDZjODdiMGNjMDg5Mzk3
YTYzNTQwHhcNMjYwNTEzMDkwMDU1WhcNMjYwNTE0MDkwMDU1WjAzMTEwLwYDVQQD
Eyg4ZTYzMWZlNTEyNTA4ZGNkN2Q3MDM5YmEwOWFiYjdjZmEyM2I4NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lZJ7PYYIwlI+b0K3oOjd0v9YdYQ
MN/WEEvL0flUBnEmk0vAQS5bWmFZorXqCH5BFEjAHPLkyfKkxbKIfaTJPzmeuGlK
e0T0xrroiegr+mLfFSqd2+DEy+zDn/si8Zls5ZWBKpkCzfTlSk1lH7f1a2Zv1gxK
FgeaKTk8tUbIgkmYHqcK8M52heaWDqO324iDO2E0Hv3ou0P6Us/o2hujc2iPCAzh
H9J4URDssLfAcBte0aejEamRm8YWxni7+aaxt808yS3fq2c/Z8g87lyfthzFkW3v
BEtzR7CaK9AnqIhcl3hQ5wL+jub37oYavC/KJnThgEBS42jkqGcle2cugwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5jH+USUI3NfXA5ugmrt8+iO4T3MB8GA1UdIwQY
MBaAFJ6eaIfqdXKmQRMGyHsMwIk5emNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lMmFiYWQtNThmYS00Y2VkLTg2NTAt
ZWM1MDhkZWM3NzkzLzEvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lMmFiYWQtNThmYS00Y2VkLTg2NTAtZWM1MDhkZWM3Nzkz
LzEvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAge+vLvm
3yIzeoOLF0t/JDImKdIJpp5uB7Lp/7vLFGyM6p1QPO+xvjZPl6Rlw6xaX5EYTgKq
j9cClDOgUIYDemkEnOwsdiLwfEZuIhpWX+iSmVm3EO3pWcCSopYn3Lloc6sRld1X
RtoqvAjXp6s0aSoL5FLuu3vm9F4Hbh8EDVhmLqTtccMlLYKmnbEmkLYGVdYfNL1I
Cyf4HFSq+HeiY/B9zSyo2U2fxiaC8cqXy36P7afRvphLeByM4OhfA27WvFmkXhhr
46NJvxMgVKye8HEzYFahScuWnhkzrVLMNb7OQuw5HphfKtbpSp74e0nGo5iAIrmf
TbCd9OacUT2rcw==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:42 2026 by rpki-client