Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          I/i+tUE5YGzG12sUqhPqApVQvALl1yPoEISXTYrNrVc=
Subject key identifier:   87:FB:8E:CA:E4:5F:14:B8:97:C6:27:D9:D2:9F:05:E9:AF:26:97:84
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       019D2772E5A685E72439FA6AC9DD80A242CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          0A5C
Signing time:             Thu 26 Mar 2026 00:02:14 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:14 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:14 +0000
Files and hashes:         1: 1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa (hash: 3frOGkt9ftuVgtTCe7VyDncQkJsfKLeQbnXtJjtvP38=)
                          2: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: 3mp4Pc9ybtFRxYinuqJpnOKWxWrSr8Y2dGXGk4wf56I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:e5:a6:85:e7:24:39:fa:6a:c9:dd:80:a2:42:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Mar 26 00:02:14 2026 GMT
            Not After : Mar 27 00:02:14 2026 GMT
        Subject: CN=87fb8ecae45f14b897c627d9d29f05e9af269784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:0d:14:f7:2e:a5:3a:0e:c2:96:2e:ff:70:
                    77:ec:ee:75:32:af:02:c9:39:b8:ea:83:2f:d2:a8:
                    0c:4b:fa:df:ba:4f:c8:70:c1:6c:0a:0d:bf:fb:71:
                    42:d7:36:42:59:1b:00:79:4f:5b:de:ea:99:8b:e1:
                    00:0e:fa:ee:13:e3:31:10:2c:39:21:ae:da:57:91:
                    76:0a:22:55:04:8c:1b:70:72:d3:5b:77:09:d1:54:
                    b4:64:89:c3:bd:c5:9c:9e:df:76:0c:81:9c:a5:06:
                    dc:3f:97:c0:60:e5:82:bc:51:91:35:fe:dc:d9:ea:
                    4c:6c:7e:01:0d:b8:4d:e6:c3:7f:c4:09:04:87:6e:
                    51:c4:3a:72:d9:b5:b5:b6:21:0c:aa:4b:87:68:3c:
                    fc:c1:e5:e4:bf:08:66:2c:f8:f8:49:a5:4c:1e:a0:
                    23:1a:4d:4d:af:3a:72:78:f0:cb:3d:77:6c:14:0f:
                    1f:a6:75:a7:fe:f9:d0:70:b1:ea:c7:db:e2:ae:fb:
                    c8:fd:41:c2:01:f7:c4:f7:a1:6f:a3:48:b3:42:fd:
                    9f:e8:d2:8a:7b:20:4e:a6:67:ff:0c:de:09:88:7d:
                    3b:18:b6:12:70:34:97:51:d1:b8:e4:f2:7e:73:d2:
                    b0:fb:a4:ba:dc:22:76:88:8d:58:bb:b2:96:0d:9a:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FB:8E:CA:E4:5F:14:B8:97:C6:27:D9:D2:9F:05:E9:AF:26:97:84
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:f8:3b:fe:93:b0:67:0e:6f:35:59:b2:1c:9d:f4:e1:f1:
         5d:3a:f2:b6:c9:ce:15:5e:88:90:4e:25:38:be:04:77:c5:4a:
         f0:76:a9:bf:52:94:25:9a:06:44:e4:60:7f:07:6c:f7:2e:06:
         74:5e:67:97:32:1a:b8:ee:5d:97:08:31:df:1d:33:1b:a0:10:
         d1:31:ad:e6:01:7e:34:e6:54:0d:1c:6e:6e:df:88:ee:b6:97:
         40:7e:e5:c3:f4:68:90:41:81:79:81:12:0d:fe:39:26:4b:c0:
         9c:0a:df:fe:2e:ce:97:8f:ec:99:5e:51:06:bf:8c:61:29:4d:
         c8:a1:d1:de:ce:e0:d5:78:13:5c:5f:ab:e9:e7:c4:1a:6e:24:
         47:cb:f3:39:48:5b:1d:e4:95:d8:69:9e:1e:0d:4f:dd:5d:b5:
         c3:d1:89:7c:b5:3f:67:e6:d3:2c:d2:eb:36:12:47:32:82:d5:
         c4:d7:11:0f:00:b6:7b:fe:1c:ee:82:da:f5:59:61:49:53:8d:
         08:d6:9d:3f:7c:11:f0:77:cb:49:dd:ff:d2:2f:6f:0d:7e:0d:
         04:78:70:31:4c:60:59:d5:e9:e8:e2:e8:de:d0:92:6d:aa:bc:
         b9:df:f1:80:5b:b5:77:4d:4a:db:ce:c3:ae:f7:9d:5a:72:3a:
         79:b7:b1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:11 2026 by rpki-client