Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          +U8s8e6ZDIazWUgGNmekbLCW2N5HRHMI0tTC8EtfKmw=
Subject key identifier:   20:46:E0:C8:D8:3A:4C:EA:55:5E:0D:17:C7:7F:33:65:DA:58:22:B0
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       019D985094C8F29225A5DB72B6AA605D676B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          1507
Signing time:             Thu 16 Apr 2026 22:01:50 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:50 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:50 +0000
Files and hashes:         1: 0SFsSDHYS4Gp8mYI62oKwdXXyJo.roa (hash: WkJ2KNUQsuLO69HUCr/UO91pQlE2mJKqwGtnWIGMWy4=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: OhxyDTW8Dog22DI7x5y53zMkQbDyTYoRdvTa3Xyxtu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:94:c8:f2:92:25:a5:db:72:b6:aa:60:5d:67:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Apr 16 22:01:50 2026 GMT
            Not After : Apr 17 22:01:50 2026 GMT
        Subject: CN=2046e0c8d83a4cea555e0d17c77f3365da5822b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:d8:8e:ba:14:b8:e5:dc:9e:b7:ab:00:7c:
                    0f:01:2d:d8:7f:72:d3:f3:46:21:94:92:98:99:66:
                    c8:9b:db:2a:b2:87:36:46:d1:e7:fe:d0:d4:ad:cb:
                    76:67:6b:c7:22:be:a6:28:bd:fb:03:f8:8e:1d:18:
                    e2:67:70:ae:31:4d:2e:99:c5:73:dc:6f:05:80:8c:
                    dd:75:40:9a:18:43:67:f0:d2:ec:8d:45:7e:83:d5:
                    ac:98:89:e7:95:87:c1:2f:97:6a:66:f7:4c:10:0e:
                    96:de:e6:42:9b:77:11:f3:cf:1e:de:53:96:71:93:
                    9b:3f:71:f7:c5:4f:08:9f:6e:6e:5d:01:66:98:d4:
                    15:82:2d:90:d8:65:30:02:a1:6e:6b:6a:a9:c5:34:
                    22:e5:06:7f:3e:d9:c7:b6:77:34:aa:a4:4a:4d:75:
                    f6:1b:d3:c4:d3:02:2c:4c:f9:f2:80:b2:81:f6:67:
                    27:b0:d4:d4:83:a8:ba:b2:41:2d:bf:c6:49:d6:5f:
                    ac:57:5e:b7:9b:b3:ab:fc:72:e0:b1:95:73:3b:6f:
                    76:7c:36:97:c6:b2:e5:6b:78:95:79:d7:be:fd:4f:
                    c3:62:68:21:a2:03:42:1e:35:43:13:79:4b:da:a2:
                    3e:24:83:bb:4a:9a:ff:e0:c1:41:f9:90:8c:05:a0:
                    78:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:46:E0:C8:D8:3A:4C:EA:55:5E:0D:17:C7:7F:33:65:DA:58:22:B0
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b3:9d:a2:fe:4d:2c:01:e0:90:f4:73:4f:03:f7:45:66:df:
         05:e2:53:5a:3c:12:48:29:6a:cd:e0:d5:8b:1f:46:c8:d9:8e:
         fc:6a:b8:60:b3:7a:6c:a6:c8:b2:77:c1:a1:8b:8a:6b:ee:5d:
         fe:4e:c8:99:ee:c7:90:0d:81:2a:7b:44:88:6d:bb:5a:09:84:
         f4:c6:28:89:15:9b:c4:1b:17:94:1d:9f:0c:3d:02:55:6d:98:
         58:c2:22:93:95:64:4d:75:0f:3d:88:32:b3:c8:39:66:a9:19:
         b5:bf:55:b5:c7:3b:38:ff:5c:95:3f:1d:58:b1:b8:01:4a:e0:
         7b:b4:16:f9:19:67:08:08:90:cb:29:02:da:95:05:33:40:7a:
         2c:0b:e9:e5:25:fe:a5:1a:d3:81:c3:99:33:ef:f6:df:50:01:
         25:cf:ba:b2:0a:84:77:d8:7f:a2:30:cf:73:62:42:88:62:12:
         b7:8f:94:30:8b:cd:fe:4e:6a:98:4d:df:4c:09:8a:be:37:19:
         2a:2e:4a:3f:56:ab:1c:6f:92:60:9b:22:46:26:bb:63:30:66:
         43:be:54:ac:67:ca:02:79:45:89:02:c4:3f:1c:8d:04:7c:b1:
         11:76:da:eb:06:f1:e0:d9:31:15:bd:ab:87:0f:8e:1a:3c:de:
         56:ef:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:17 2026 by rpki-client