Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
File:                     NPWeovpHqdYxGxyMxahqW5oOR6c.mft (raw, json)
Hash identifier:          66Q8kjYz9WDjOFdZwyACl9sIMZTc3tM5g7NVBvezW7c=
Subject key identifier:   B7:4E:35:B0:46:5D:AC:89:B7:34:3D:DB:30:E7:08:72:C3:9B:B2:86
Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Certificate issuer:       /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Certificate serial:       019D9962B7D4C723EC3F9BE2FB32ECC6BCC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 03:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:16 +0000
Files and hashes:         1: NPWeovpHqdYxGxyMxahqW5oOR6c.crl (hash: TARWIGICVla8XPKKHkuw7zFAGtvGfK4q0MsErJnFgag=)
                          2: hB_chSYrjrugAT_A-KrXYM2hDOo.roa (hash: bObSAygQ33RlHdWKvJJo7WM9/6CgsuzaqEedUPRm6u0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:b7:d4:c7:23:ec:3f:9b:e2:fb:32:ec:c6:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
        Validity
            Not Before: Apr 17 03:01:16 2026 GMT
            Not After : Apr 18 03:01:16 2026 GMT
        Subject: CN=b74e35b0465dac89b7343ddb30e70872c39bb286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:31:96:e6:cb:52:0e:9d:31:34:b1:37:d3:
                    d0:29:13:4e:4b:e2:06:ce:f0:92:a5:85:e8:e5:64:
                    49:96:ed:81:f1:4b:a7:51:66:a4:73:da:55:40:c9:
                    b0:0c:c8:64:60:86:e2:f2:10:6f:b1:e9:26:96:6c:
                    42:dd:0f:ba:23:3f:02:00:d3:bf:c7:79:cc:4d:6f:
                    94:9d:f1:a7:41:f0:cf:2d:5e:10:04:9c:5f:f0:fd:
                    c2:55:9b:03:c3:54:45:89:4f:54:12:84:fa:e3:d0:
                    5a:f0:a5:c8:40:1b:43:9e:5b:54:24:66:c6:96:1e:
                    3a:2f:6f:c5:73:47:d6:aa:6f:49:b3:59:b7:13:ef:
                    96:43:0f:af:2b:ff:8a:2b:b5:b1:26:8c:74:29:47:
                    f2:0c:ec:59:96:3f:af:2c:86:20:f4:c7:a8:b3:42:
                    59:0d:5c:22:7f:d5:54:93:fe:78:43:c0:54:98:ca:
                    a6:28:f0:ab:39:8b:f4:14:51:d0:7f:bf:1c:4f:fb:
                    1a:91:3a:41:ba:3d:91:d8:18:18:19:4d:8e:01:29:
                    45:c8:34:27:b5:f9:74:d8:b8:a3:78:81:ac:9a:24:
                    f3:56:f2:7b:7e:9a:95:f8:c2:c3:8d:60:69:26:1b:
                    8d:21:f6:3a:32:8c:8d:59:24:1f:6e:9b:85:b7:0a:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4E:35:B0:46:5D:AC:89:B7:34:3D:DB:30:E7:08:72:C3:9B:B2:86
            X509v3 Authority Key Identifier:
                keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:08:54:0d:22:0f:0d:30:16:79:df:59:e2:27:51:a1:94:df:
         d2:7b:00:2a:22:e6:4b:5d:31:22:ce:0b:4d:94:16:0f:05:3d:
         25:2e:30:c1:0c:1f:ce:36:db:37:ae:ed:c7:4c:5c:78:74:bc:
         64:54:92:3a:a4:58:84:96:4c:e7:bf:60:18:b0:cf:25:f9:fd:
         82:55:65:10:8a:5a:02:0d:d7:ed:07:a8:ae:13:68:18:02:11:
         50:19:86:96:ec:e7:73:d5:13:a7:97:e2:40:db:66:83:fd:9e:
         e9:43:9a:00:a2:2c:9e:60:02:74:66:a6:4a:c4:6b:43:a3:32:
         02:99:09:b2:e4:0b:30:16:d9:5e:0d:09:5a:9b:9d:2d:53:1e:
         64:43:0f:d3:77:b2:87:e8:0c:dc:f8:96:b7:fc:30:41:8f:91:
         00:ba:bc:32:ec:94:c1:48:9b:a1:9c:bc:9b:1b:36:8f:4a:a1:
         5e:ea:ef:04:fa:10:8f:08:87:d3:a3:a8:f9:d6:d9:86:28:de:
         42:0a:e6:3f:50:a5:d4:16:a4:4c:05:a4:f9:fd:94:d3:ac:23:
         03:19:fb:6f:29:74:b7:46:44:46:a7:83:d8:6e:13:de:90:b6:
         a4:70:9e:82:80:76:ae:8f:5f:4d:ab:c7:d9:1d:c2:8c:14:cc:
         cd:43:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:06 2026 by rpki-client