Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File:                     ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier:          S2I2b6riY8xsEWuw/u22z7WkfdqjoF+8cVfwy6FENFQ=
Subject key identifier:   42:F9:03:C1:EC:CD:37:DF:E1:E4:0E:BE:8E:EC:C4:05:18:CD:7E:EF
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer:       /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial:       019D284E2EB45A92F48953BA8E3E6F325954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number:          1527
Signing time:             Thu 26 Mar 2026 04:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:45 +0000
Files and hashes:         1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: Qjq22pDiH5bX7fVVQYz2yqCvyBY3PpXS6gCQa4GyIgg=)
                          2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:2e:b4:5a:92:f4:89:53:ba:8e:3e:6f:32:59:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
        Validity
            Not Before: Mar 26 04:01:45 2026 GMT
            Not After : Mar 27 04:01:45 2026 GMT
        Subject: CN=42f903c1eccd37dfe1e40ebe8eecc40518cd7eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:b6:9b:52:f1:4f:18:84:53:b7:15:87:91:
                    ba:e3:0d:36:25:10:39:c9:1f:79:2f:9b:ab:e9:c9:
                    9f:5d:2d:51:50:89:b6:13:63:f9:69:8c:07:73:73:
                    a7:54:21:ba:6c:36:36:45:61:bf:ac:d8:11:96:ab:
                    a1:6a:f0:24:a0:26:00:97:ab:c8:5b:55:e3:d3:80:
                    06:ae:a0:d8:bf:22:8b:d9:e4:fc:29:06:f8:64:ed:
                    75:5d:64:e6:e7:16:70:1d:ad:f3:d1:91:83:a2:56:
                    57:71:f2:fc:7c:e6:03:4d:ee:04:1a:e3:e4:b5:43:
                    12:ed:73:73:05:53:ba:f7:01:b2:53:ff:4b:18:9f:
                    82:83:30:0b:f8:c0:42:97:1f:48:f2:a0:ee:2d:62:
                    33:4b:b9:b2:69:59:1b:c3:3d:c2:2e:32:ac:4e:83:
                    4b:fd:24:4b:b4:09:f5:19:ae:a0:15:af:7c:99:c7:
                    ab:d3:d2:d7:39:90:8d:c2:ea:13:39:60:91:7a:14:
                    68:0d:61:e4:ac:a2:f0:95:26:d0:c0:a8:88:d9:06:
                    59:af:c3:73:58:30:83:31:ba:e0:db:54:26:c7:15:
                    58:a4:85:b7:cb:f3:41:6f:b3:75:ec:14:39:92:4e:
                    6f:63:ac:2f:ef:70:e6:6b:94:af:a2:c7:84:fc:c2:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F9:03:C1:EC:CD:37:DF:E1:E4:0E:BE:8E:EC:C4:05:18:CD:7E:EF
            X509v3 Authority Key Identifier:
                keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:69:39:12:3a:74:c1:c0:f3:58:22:f7:be:fe:8a:85:46:
         12:c1:da:56:ea:b6:8e:91:13:6a:c6:a8:9d:53:00:44:0e:f6:
         e3:ec:24:d8:ff:72:92:d8:c2:14:9d:e4:aa:9b:0d:20:bc:56:
         73:ec:f3:55:70:aa:48:1e:86:32:bf:89:e8:b0:3a:43:1e:f5:
         71:9b:7f:18:73:bb:4c:4f:4b:c7:15:49:e5:93:10:40:d1:c2:
         b3:08:df:c0:49:14:07:0a:ee:7f:3c:b5:f5:aa:e3:99:c4:fe:
         1b:44:c7:04:e1:d8:b0:aa:87:36:f6:ba:ec:3c:2f:11:7e:72:
         69:b6:11:4f:6c:bd:38:ec:15:9e:12:04:00:72:72:59:0c:fa:
         0a:f0:93:96:09:ac:6a:24:27:b1:4e:0e:21:96:08:7e:2a:b9:
         a3:0f:73:d1:f8:af:89:9c:01:30:31:22:4c:db:78:13:a3:33:
         78:60:f1:87:c7:78:ef:bf:ff:22:64:c7:2f:ea:cd:b5:6b:6f:
         cd:7f:b8:2b:8c:7d:ed:87:7f:e6:11:92:dc:04:b9:75:08:aa:
         59:a7:59:e2:fa:4e:15:4e:2f:79:3c:11:05:13:0d:67:22:6f:
         30:a3:04:84:e2:9b:1b:ea:83:6f:cd:88:0d:36:2e:f0:ef:8d:
         12:36:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:17 2026 by rpki-client