Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          8uNHjh5gLfSVz2K2mD7HLDvIHuZKFpLkwJ7S+xDzh5c=
Subject key identifier:   31:D7:CD:86:B1:A0:8F:F1:EE:19:51:2E:97:6D:36:F0:D7:DA:F5:87
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       019D28BB2382A56FC4E9FC2697BB9ADD41A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          1932
Signing time:             Thu 26 Mar 2026 06:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:45 +0000
Files and hashes:         1: 82BMAWWYub9fBzrJnQqF5wO_zCI.roa (hash: 9yVCOd4C26dTbc8k/UH3xEGlu74j5hdx/tzhXDnnuiE=)
                          2: E11knFk0gckPfde_6h3IuK8P4LE.roa (hash: +B12oAANa/hqjobZjc2ZLivelQzH1SahC1DEv/hXMOc=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: 55kIOZtg6CYBuKXXqlnp+3gsNyy1+FN4dvAT5h3bdek=)
                          4: XkQFI4qvaYQwqqOvWnvK3NSdy2c.roa (hash: oVIALNo1S3tkwe3UndvMBPyLLpUsE48/0PpLT1+Rleg=)
                          5: Z1A_JqYmolj0JLCqzeQ5JvDZ3Oc.roa (hash: a1yzGj+j6ZJwqEY8Up8BtHz2I1PU+QCd41w+T8Yh8kU=)
                          6: rGNpZQpxgqumWHt9Olsd1uUCwZA.roa (hash: PC8xtk1jNLFqJgHQbK2f4AHS4YPlCUt7mnIqAqc8Ups=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:23:82:a5:6f:c4:e9:fc:26:97:bb:9a:dd:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Mar 26 06:00:45 2026 GMT
            Not After : Mar 27 06:00:45 2026 GMT
        Subject: CN=31d7cd86b1a08ff1ee19512e976d36f0d7daf587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:31:92:32:ec:39:63:0e:ab:7f:ba:2a:fb:
                    c7:fe:49:63:7f:96:cd:df:3e:97:aa:e5:01:9d:f9:
                    53:bc:1d:77:b6:57:70:5c:8f:36:d0:2d:49:1e:32:
                    aa:e6:fa:d0:d5:2f:9d:bd:f9:16:b3:1c:22:f5:5c:
                    29:73:a2:30:96:e4:d5:63:e7:07:20:c0:d0:5a:c7:
                    49:b4:d7:70:3e:82:f6:c0:6f:6d:24:21:d1:bc:c5:
                    94:0f:86:a8:04:7a:1d:bd:1f:bf:b7:88:d2:38:ad:
                    94:19:2f:0f:bd:39:16:34:7b:09:27:9d:dd:4c:f7:
                    da:ac:88:36:0b:ab:2b:6e:c4:b1:a3:97:ee:a1:ec:
                    eb:44:7c:84:52:b4:b8:ca:e9:44:24:38:64:e4:d1:
                    53:99:ae:d2:87:b3:1f:e5:4b:4b:cd:d5:3f:08:26:
                    2f:b5:56:70:67:9f:32:f6:9a:7f:18:59:7a:bc:15:
                    f4:28:da:c1:ed:95:e5:1f:04:ce:c9:e9:62:96:2c:
                    86:51:cc:16:4b:ec:8d:34:2b:87:f6:12:ab:22:0f:
                    6d:7f:58:bd:99:e2:cc:7a:0d:8f:49:eb:7d:03:55:
                    72:a9:e5:a4:11:74:d9:19:7a:f2:47:bd:a1:8c:a6:
                    c6:92:57:7a:4e:c5:f9:d1:59:32:15:a5:f9:0d:48:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D7:CD:86:B1:A0:8F:F1:EE:19:51:2E:97:6D:36:F0:D7:DA:F5:87
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:56:f7:e8:83:25:26:cd:46:b3:98:03:5c:cc:57:7d:9b:47:
         21:26:d0:40:45:79:52:d2:7c:b8:2c:a7:9c:6a:4f:12:62:5b:
         90:03:36:37:5a:61:db:8f:35:fc:09:50:ba:53:47:18:d0:00:
         8b:b3:ba:f3:b7:10:b2:56:e3:c9:87:6d:08:db:3c:e8:ae:b1:
         16:2c:e7:ac:8e:33:ac:29:7d:6a:68:2b:7f:10:d2:17:f3:0c:
         1b:a0:80:d6:00:14:a8:0d:43:f2:b2:5e:81:c1:f8:a7:8d:8b:
         38:54:75:18:78:8a:c8:44:dd:62:27:8a:3d:69:84:9d:40:b3:
         74:a1:fc:b1:a8:40:e1:bd:45:f6:dd:b5:87:8e:0f:fa:4c:52:
         90:0c:1f:8b:0a:32:a0:6d:84:b4:98:f5:c6:67:78:73:83:9f:
         6f:17:60:b1:75:c4:ff:8e:ea:46:02:2a:1f:fd:60:3f:b5:80:
         ab:3e:69:db:b1:ad:74:4a:ea:9e:3f:39:f5:62:77:9e:4e:01:
         31:ed:98:3b:84:06:2e:27:08:a1:8a:57:b7:7b:62:06:60:56:
         a2:85:3f:b0:99:6e:5c:73:04:87:24:1e:79:8e:2c:08:17:6e:
         fa:1f:99:9a:4b:6c:c5:af:86:8e:24:02:1b:6d:e9:1e:3b:23:
         3f:00:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:53 2026 by rpki-client