Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File:                     NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier:          tC00bUvwL00L8xHLh9D0LQA6Ny10TiWK0ifBUrOTIdI=
Subject key identifier:   18:79:62:83:91:75:BF:86:42:21:4E:10:0B:2D:27:18:D5:C1:42:A7
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer:       /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial:       019E1E6C7BCDBF963A70194CB91175E37E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number:          1474
Signing time:             Tue 12 May 2026 23:01:26 +0000
Manifest this update:     Tue 12 May 2026 23:01:26 +0000
Manifest next update:     Wed 13 May 2026 23:01:26 +0000
Files and hashes:         1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
                          2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: mM82JmRv1zZLVCwyzzX84T6OA+6+REuddcl2IwGuwR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:7b:cd:bf:96:3a:70:19:4c:b9:11:75:e3:7e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
        Validity
            Not Before: May 12 23:01:26 2026 GMT
            Not After : May 13 23:01:26 2026 GMT
        Subject: CN=187962839175bf8642214e100b2d2718d5c142a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:ed:73:40:00:9b:29:33:ca:bb:2b:c3:4f:
                    88:0e:c4:a0:b0:a3:15:30:d3:2a:62:cf:b7:83:5a:
                    97:f6:9a:a4:95:2a:f8:89:71:32:a9:06:28:b1:40:
                    da:85:86:71:02:dc:fc:f8:33:ab:ec:6c:bd:ac:74:
                    24:8f:d2:ad:87:7f:69:b9:72:cd:05:ad:25:bb:e7:
                    21:e2:fc:7b:09:46:dc:ee:44:a3:bf:2c:95:47:39:
                    e5:73:ce:e6:9d:bd:3d:4a:f7:04:76:54:a9:5a:50:
                    a9:2b:b2:ab:0a:a7:47:37:36:a6:05:c5:cd:25:50:
                    e2:01:09:c6:30:16:05:2a:20:93:38:05:c1:b0:13:
                    59:4a:2b:76:27:e4:fc:cc:5d:73:7f:ff:01:d5:3e:
                    60:d7:c7:ba:52:81:6c:98:fb:90:e6:ef:af:6f:3e:
                    de:75:c5:57:ea:57:cf:7c:ce:59:ce:c6:e4:38:06:
                    03:ab:ad:42:be:5e:f9:29:2f:f7:f2:58:bc:6c:c2:
                    5e:ea:06:bf:92:69:28:b1:81:46:82:75:58:10:1e:
                    5a:5e:8f:4c:48:35:25:80:db:c6:e1:5d:58:6f:92:
                    af:f6:dc:74:e8:0b:a7:13:01:7d:05:3d:a9:1b:b3:
                    f2:ab:5e:e1:07:28:b9:96:96:59:5b:3c:2d:2a:52:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:79:62:83:91:75:BF:86:42:21:4E:10:0B:2D:27:18:D5:C1:42:A7
            X509v3 Authority Key Identifier:
                keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:35:44:7f:6f:ec:05:fe:0c:92:d9:9e:50:16:58:b7:07:d9:
         e8:53:e6:f0:54:c2:fb:42:67:da:09:49:14:e6:60:88:d5:6f:
         93:27:74:0f:ad:a7:70:97:ec:27:61:5f:fa:64:ce:6a:29:d0:
         6f:83:a9:14:0a:80:76:85:94:b7:a6:59:eb:5d:07:67:90:be:
         24:03:8d:54:a0:6c:91:8c:36:b8:db:d1:9b:f9:b2:c5:ec:df:
         51:dc:14:fa:c6:56:dd:28:b0:c3:35:60:61:75:a1:71:e6:69:
         e3:d5:10:88:61:b1:44:e7:79:e5:39:28:e6:f5:29:bf:2d:09:
         38:ee:bb:25:17:fe:c3:f6:9a:76:1e:9f:e4:15:29:e2:f2:34:
         3b:4c:6f:66:81:1c:6f:94:eb:e4:70:c1:92:6e:98:8c:b2:fc:
         a2:d5:3a:25:9c:a7:f1:26:80:ab:40:5c:d2:76:3e:3e:d1:2a:
         45:29:10:19:ed:dd:7f:6a:6f:97:c2:50:8d:71:b4:90:62:f5:
         f4:19:80:9d:99:37:e9:22:20:73:c3:0d:f8:1c:18:08:ab:39:
         98:78:8c:67:2e:3b:c0:9f:84:4f:9a:d5:28:4a:ab:f6:d6:e4:
         26:fe:f8:ce:4b:03:41:fa:1a:cd:8a:31:40:c3:ab:82:f0:95:
         d7:40:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:28 2026 by rpki-client