Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File:                     NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier:          WxGfV3j0mwcyHWrj7BTFIG2f2fSkxJ4rG8r+YQ+KrsY=
Subject key identifier:   14:7B:EB:93:19:09:70:3C:61:76:D4:23:52:1D:41:50:DB:2B:29:47
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer:       /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial:       01A0CE9161B6A28C3751034A925A46C08D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number:          17D5
Signing time:             Wed 23 Sep 2026 14:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:29 +0000
Files and hashes:         1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
                          2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
                          3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: J/c1umSo3dxvZuGlNnsfG6Nz2OBaXgckpcHabnGXeGI=)
                          4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:61:b6:a2:8c:37:51:03:4a:92:5a:46:c0:8d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
        Validity
            Not Before: Sep 23 14:00:29 2026 GMT
            Not After : Sep 24 14:00:29 2026 GMT
        Subject: CN=147beb931909703c6176d423521d4150db2b2947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:23:48:86:a5:43:7d:01:93:7a:7b:27:72:41:
                    f0:8c:bb:23:be:b7:9a:16:97:fd:0d:d0:15:e5:f6:
                    5b:e0:f3:80:d1:78:e9:ff:b5:c4:bb:01:0d:ea:79:
                    5a:89:42:63:e6:76:69:8b:20:f6:10:77:23:02:2a:
                    66:a7:0b:1d:2f:3e:7a:a7:31:3b:31:17:45:1c:12:
                    b4:47:6b:5d:bd:02:a7:42:99:94:87:7e:9c:37:eb:
                    38:bc:e8:16:a7:fb:d5:f2:a9:9c:7c:4c:2b:e7:d4:
                    73:74:03:b2:1b:55:5c:f1:a2:fb:54:05:ec:fd:2e:
                    6b:94:28:79:fe:e4:da:33:94:15:56:a2:a3:96:01:
                    15:ef:96:fe:d6:68:d1:4c:aa:04:3d:47:b7:2c:0b:
                    90:c9:c0:87:7d:da:74:ed:50:4c:66:ef:58:3d:50:
                    d0:3e:cd:25:fc:86:9d:c3:23:14:1f:51:30:80:86:
                    2d:0e:40:bd:7e:60:3e:a9:34:a1:aa:41:13:1a:5b:
                    47:9a:02:8d:ca:56:02:b7:a0:03:88:01:f4:90:b3:
                    33:6e:16:bb:a1:a8:a6:89:c7:30:99:4b:19:34:b6:
                    61:5d:92:25:a4:4a:6f:2b:cf:2b:64:5a:32:e1:71:
                    db:aa:59:e8:a7:a5:2e:92:65:19:98:65:1f:f2:a0:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7B:EB:93:19:09:70:3C:61:76:D4:23:52:1D:41:50:DB:2B:29:47
            X509v3 Authority Key Identifier:
                keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:d6:98:a9:35:fd:c0:41:6a:ad:88:d8:e6:89:8f:7b:8e:
         10:ca:11:c2:d9:2f:17:67:f0:b9:f0:4f:2f:bb:b6:de:83:f6:
         84:f8:8b:a9:83:93:17:dc:04:37:8d:11:88:4c:8b:3b:5a:86:
         67:bf:1d:e7:4e:1e:3e:d5:0b:be:d2:5b:ea:13:73:23:0e:e6:
         33:c7:63:15:b2:d6:a6:22:0e:e3:4a:a7:c7:03:76:77:ae:62:
         61:19:3f:88:98:a0:24:30:9c:8a:9d:d6:8d:39:00:37:c6:64:
         77:38:83:5a:30:35:e7:1d:6f:93:59:88:c6:56:bf:3f:64:24:
         e2:30:86:46:93:fa:2a:10:3d:6c:08:5b:bb:74:93:74:70:e2:
         35:c5:02:20:bc:20:96:7e:3d:58:10:4a:c4:ba:04:38:99:a9:
         de:0d:0d:8f:7b:26:a4:82:19:20:db:d7:54:40:1d:72:05:ba:
         5d:6a:b8:1c:2b:49:fc:f4:b0:a0:54:a9:12:3f:c4:aa:54:5b:
         c2:72:8a:15:2f:2b:cb:3f:16:4c:71:ef:2a:01:73:c7:6e:f3:
         e2:59:82:c3:72:e1:10:2e:8a:5d:99:a0:85:33:5f:86:ea:5c:
         f3:03:6d:2e:f0:41:86:fa:5f:bf:90:8d:21:8e:5d:d1:3f:d0:
         d5:02:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:57:00 2026 by rpki-client