Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
File:                     NPWeovpHqdYxGxyMxahqW5oOR6c.mft (raw, json)
Hash identifier:          nnII0q9taBaILdGntGzd1yfpmUBl9dHPADfFU6GkPWk=
Subject key identifier:   91:47:1F:5A:27:72:EA:F0:EE:04:16:75:EC:23:C1:5B:7B:07:B8:8C
Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Certificate issuer:       /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Certificate serial:       019CABD95885FAC5F8D103EFFB62EC501045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 00:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:13 +0000
Files and hashes:         1: NPWeovpHqdYxGxyMxahqW5oOR6c.crl (hash: U52A0NL+wsZ44MfVqQweartw+X1nDDs874vKVDZ06bQ=)
                          2: hB_chSYrjrugAT_A-KrXYM2hDOo.roa (hash: bObSAygQ33RlHdWKvJJo7WM9/6CgsuzaqEedUPRm6u0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:58:85:fa:c5:f8:d1:03:ef:fb:62:ec:50:10:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
        Validity
            Not Before: Mar  2 00:01:13 2026 GMT
            Not After : Mar  3 00:01:13 2026 GMT
        Subject: CN=91471f5a2772eaf0ee041675ec23c15b7b07b88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:40:49:61:fc:b7:86:de:4e:f0:2c:6e:f1:
                    94:bc:2c:59:05:28:4f:19:25:3d:8f:f3:b9:0f:6a:
                    2e:0c:5e:a9:de:f7:95:47:8f:26:2f:d4:d5:bb:3f:
                    47:55:ad:c3:05:9b:28:e4:5d:1e:ec:ec:ce:db:ad:
                    2d:4a:df:8a:45:ab:a0:b9:e9:3a:10:d5:f5:c7:3d:
                    75:ad:e0:6f:e6:25:c1:4c:05:01:6b:6d:e8:52:70:
                    3e:fd:f4:41:ec:23:88:a7:d2:2a:73:6b:2b:7b:f0:
                    c8:84:50:6a:4c:5c:7e:d1:d6:55:ad:c9:e9:58:51:
                    0f:c5:e3:19:16:b0:85:51:6c:32:25:db:f8:9d:06:
                    67:89:74:79:ea:68:ad:e4:c1:aa:12:b9:71:e6:f8:
                    d9:fa:ed:84:0f:9b:e8:13:9b:4e:07:e7:f0:d7:a7:
                    22:d4:1c:e8:eb:7a:be:1e:7d:4d:88:35:5d:1f:60:
                    2f:f6:fd:5b:30:0e:fb:86:1b:da:7f:0d:ad:65:b2:
                    b2:e0:23:ce:5e:89:93:57:9c:2a:75:7d:d8:fb:bf:
                    1f:28:ea:4d:0b:25:70:f0:c0:cc:fb:f6:42:a5:ad:
                    72:c6:f4:08:23:b7:78:5a:81:cd:da:c4:90:cf:b0:
                    94:9d:7b:d1:6d:7d:94:a5:7d:81:40:b3:0e:c4:27:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:47:1F:5A:27:72:EA:F0:EE:04:16:75:EC:23:C1:5B:7B:07:B8:8C
            X509v3 Authority Key Identifier:
                keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:fb:46:b1:ca:52:ba:45:50:9b:3d:58:0d:69:f2:51:f5:
         28:38:a0:f3:a4:c7:a2:53:be:e9:5c:3e:72:61:fd:a6:13:35:
         27:3b:59:c5:74:31:fe:da:7f:28:69:e6:5c:bc:21:48:27:a9:
         05:52:fe:1c:76:ed:0f:69:b1:4a:9e:c1:87:38:c5:5e:f3:31:
         d5:0b:f0:17:15:76:ca:be:7c:2e:3b:f4:d6:ca:2b:14:17:1e:
         09:0e:cf:87:45:eb:8b:7c:ed:ab:af:3a:86:f0:e5:32:bf:0e:
         85:7f:31:4c:73:71:48:3d:e3:9c:96:57:c5:c4:71:6d:13:7e:
         c1:76:aa:12:8a:31:01:a0:c1:69:d8:ab:e0:7c:4e:a9:7b:7d:
         8d:2e:db:31:6e:17:f7:d9:ae:d9:f5:25:a3:31:ab:bf:1a:0e:
         ca:4f:54:db:0d:b4:c8:4e:69:08:3e:09:f7:58:da:36:76:53:
         3f:42:4e:31:2c:1a:c9:33:16:1f:37:7c:b8:af:a1:8d:da:98:
         ff:cc:2c:f1:4e:3e:10:53:d4:66:8f:74:d8:ce:6f:cc:ec:8a:
         9a:cb:60:f3:78:ba:51:38:6d:4b:c9:97:ee:2e:47:76:aa:08:
         d2:37:96:0a:d0:91:cf:ec:a7:c8:40:c3:de:a3:f3:e7:f1:24:
         06:f9:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:30 2026 by rpki-client