Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          xLwfpCO43hEOMfvXwbXs4YhnXL18or/eVqk6WWodFG0=
Subject key identifier:   A3:7D:04:37:53:A4:A2:C6:0D:7C:EA:75:BF:0C:08:AF:86:3A:27:64
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       019E1DFE886E5775B9BA33A62BC6C9B1F9AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          19B1
Signing time:             Tue 12 May 2026 21:01:20 +0000
Manifest this update:     Tue 12 May 2026 21:01:20 +0000
Manifest next update:     Wed 13 May 2026 21:01:20 +0000
Files and hashes:         1: 82BMAWWYub9fBzrJnQqF5wO_zCI.roa (hash: 9yVCOd4C26dTbc8k/UH3xEGlu74j5hdx/tzhXDnnuiE=)
                          2: E11knFk0gckPfde_6h3IuK8P4LE.roa (hash: +B12oAANa/hqjobZjc2ZLivelQzH1SahC1DEv/hXMOc=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: mzVm8KK0EXgyyzUdhzrfMWfAqUKrwd8gFGUUDSz13qA=)
                          4: XkQFI4qvaYQwqqOvWnvK3NSdy2c.roa (hash: oVIALNo1S3tkwe3UndvMBPyLLpUsE48/0PpLT1+Rleg=)
                          5: Z1A_JqYmolj0JLCqzeQ5JvDZ3Oc.roa (hash: a1yzGj+j6ZJwqEY8Up8BtHz2I1PU+QCd41w+T8Yh8kU=)
                          6: rGNpZQpxgqumWHt9Olsd1uUCwZA.roa (hash: PC8xtk1jNLFqJgHQbK2f4AHS4YPlCUt7mnIqAqc8Ups=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:88:6e:57:75:b9:ba:33:a6:2b:c6:c9:b1:f9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: May 12 21:01:20 2026 GMT
            Not After : May 13 21:01:20 2026 GMT
        Subject: CN=a37d043753a4a2c60d7cea75bf0c08af863a2764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:42:09:0f:e2:2c:d4:77:66:cf:df:56:96:ab:
                    af:be:89:0f:cc:a7:e9:14:94:dd:c9:83:49:c5:04:
                    96:29:44:99:e9:37:62:8c:29:03:1b:db:65:ca:0d:
                    0d:73:a6:ca:65:58:e8:16:3a:c2:b6:26:a0:16:ac:
                    ec:cd:b9:bb:8d:8e:5d:c4:be:c3:b6:f0:42:97:10:
                    29:68:3d:9d:01:81:5b:99:1b:6c:d6:44:46:0a:ee:
                    14:f0:1c:33:7a:dc:80:4b:67:60:0f:09:f6:15:74:
                    fa:86:05:f0:60:25:c9:b7:77:26:52:6d:93:8e:3c:
                    fa:3f:7f:d5:9d:c5:52:a5:07:17:b3:c5:59:bc:ea:
                    19:2b:b0:46:07:fe:96:8e:45:2c:c2:02:12:46:58:
                    fe:40:75:2f:a1:4c:31:d0:27:33:0c:72:e5:ac:59:
                    ea:30:3f:75:10:f5:fe:62:4c:37:48:13:93:c0:e2:
                    10:06:0e:52:da:ba:a1:41:d7:da:ca:98:97:0d:f7:
                    4f:ed:c3:77:5b:1c:41:27:45:71:07:68:9e:a8:f3:
                    89:91:d7:b5:ea:8d:b1:b0:6a:c6:01:34:b8:ec:06:
                    55:0f:76:c6:f6:68:88:70:ae:48:8a:56:52:1c:44:
                    2b:94:f8:24:92:c0:c4:62:a5:04:93:b4:05:29:6e:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:04:37:53:A4:A2:C6:0D:7C:EA:75:BF:0C:08:AF:86:3A:27:64
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ac:c5:3c:c3:63:64:a8:84:91:07:a7:ba:a0:3a:1c:43:d6:
         23:3d:b9:c6:f2:6d:3f:06:2c:99:60:87:c6:28:1c:e7:3f:79:
         02:0a:34:67:35:d8:43:8c:15:e4:9c:55:45:57:c7:87:ba:01:
         f7:77:63:ab:cc:1d:ed:46:85:a7:8d:fc:b6:4c:87:8d:13:e8:
         74:06:6f:74:3e:af:aa:79:90:d8:b7:1b:18:bf:7d:13:13:c8:
         4d:05:22:6b:e4:8b:ac:24:25:48:17:d3:67:af:b7:dd:45:d8:
         34:f4:68:47:41:77:82:e8:7a:55:4f:ab:09:c2:fe:26:19:1a:
         8f:fc:f0:30:df:31:02:98:f8:ad:c1:fa:2f:04:bc:39:f2:0c:
         bc:a1:71:f7:5e:88:45:41:57:00:0e:72:7a:06:cf:cf:ae:1b:
         58:91:1d:8b:32:10:e5:e8:82:a4:5d:3e:05:cb:cf:f5:71:50:
         15:8e:cc:e7:51:61:90:b5:7a:39:94:11:ce:b8:cb:af:f4:b6:
         f5:33:65:37:a7:ae:35:21:17:fe:ad:f0:4f:4c:50:e4:7b:0a:
         d3:79:ff:a9:7c:6c:32:c8:9d:6c:ca:21:ea:e9:91:a5:4c:09:
         ee:a6:2a:00:c0:21:e1:65:08:ea:ff:6a:a4:46:7a:de:26:d6:
         b2:4e:6e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:44 2026 by rpki-client