Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          Spy0R/YVbTsunu/uEiMIiNB2a0j5BBb1Tcryxs5U/bE=
Subject key identifier:   A0:5F:69:17:89:48:44:B9:7E:A5:04:13:17:88:49:48:BB:5C:F0:DF
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       019D98BD82F7D50E079F93F846A2556DA4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          196C
Signing time:             Fri 17 Apr 2026 00:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:49 +0000
Files and hashes:         1: 82BMAWWYub9fBzrJnQqF5wO_zCI.roa (hash: 9yVCOd4C26dTbc8k/UH3xEGlu74j5hdx/tzhXDnnuiE=)
                          2: E11knFk0gckPfde_6h3IuK8P4LE.roa (hash: +B12oAANa/hqjobZjc2ZLivelQzH1SahC1DEv/hXMOc=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: tkAtK12bnuY/NprEqVHor4Eo2qEomC2Oxui+zwhLFzE=)
                          4: XkQFI4qvaYQwqqOvWnvK3NSdy2c.roa (hash: oVIALNo1S3tkwe3UndvMBPyLLpUsE48/0PpLT1+Rleg=)
                          5: Z1A_JqYmolj0JLCqzeQ5JvDZ3Oc.roa (hash: a1yzGj+j6ZJwqEY8Up8BtHz2I1PU+QCd41w+T8Yh8kU=)
                          6: rGNpZQpxgqumWHt9Olsd1uUCwZA.roa (hash: PC8xtk1jNLFqJgHQbK2f4AHS4YPlCUt7mnIqAqc8Ups=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:82:f7:d5:0e:07:9f:93:f8:46:a2:55:6d:a4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Apr 17 00:00:49 2026 GMT
            Not After : Apr 18 00:00:49 2026 GMT
        Subject: CN=a05f6917894844b97ea5041317884948bb5cf0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:cb:93:36:a2:43:31:fc:a0:5f:f1:5c:c1:
                    61:9f:b5:dd:ec:9b:15:75:ee:42:e2:2a:bf:68:69:
                    17:5a:d9:c8:87:4c:20:48:98:91:13:5b:a6:7c:ae:
                    8d:3b:2b:42:7e:ed:50:25:24:a8:45:ed:c1:c3:94:
                    90:6d:02:5a:c7:3a:11:1a:13:d6:df:ac:92:7f:81:
                    ef:01:f5:fa:20:18:c6:43:39:c7:90:02:29:d0:f8:
                    45:8b:c2:fa:12:07:b2:42:d0:94:00:20:dc:3e:15:
                    04:92:48:fd:2c:e3:5d:83:0a:50:b8:01:f9:70:63:
                    d8:1e:2f:50:64:78:bc:42:9c:4d:0d:ea:c0:89:55:
                    df:31:f6:d3:53:bc:39:75:33:21:8a:1a:03:2a:3d:
                    27:9f:60:88:8a:92:1e:68:e8:83:b0:5a:46:a4:ae:
                    ce:1a:50:e5:e7:c9:b2:d9:89:00:70:db:07:5f:8b:
                    a3:2d:d5:6a:93:f1:1f:7f:6a:6a:b4:f5:03:55:5a:
                    26:04:91:92:4f:dd:c7:f7:9d:8d:28:ca:fe:0e:03:
                    a6:01:5d:fe:50:83:f6:19:62:28:da:47:17:08:6b:
                    8e:c8:da:b2:c6:4c:6f:c4:83:36:c6:7f:2a:b5:69:
                    db:b8:e5:ed:8d:73:26:96:64:60:66:a8:d6:36:0c:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5F:69:17:89:48:44:B9:7E:A5:04:13:17:88:49:48:BB:5C:F0:DF
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:59:6d:8a:ca:86:75:44:73:5d:87:29:4d:e7:ac:92:25:61:
         18:e9:a8:da:e5:c8:80:0f:6b:3a:a6:91:64:a5:36:9f:6a:9c:
         32:98:ba:c1:43:a6:c8:54:17:9c:a4:06:0b:ce:ac:1b:6b:99:
         f7:9e:53:0b:3f:28:68:48:06:70:fb:80:c0:1d:85:62:16:89:
         bc:de:32:bd:4c:0e:d6:d4:9e:59:13:b9:0c:bf:a0:df:6e:33:
         52:61:30:3e:91:bb:93:13:fb:18:29:65:f0:99:b2:0e:fd:b5:
         ab:72:32:63:b5:3c:9d:2d:69:7e:4d:92:ae:f8:dd:f5:45:00:
         b5:23:c9:ae:55:53:89:39:a4:af:4c:48:d2:af:ad:a0:22:13:
         3f:dd:c6:34:8d:9d:07:2e:d2:03:ed:53:9c:af:c8:47:5c:fc:
         08:30:74:f1:9f:69:df:95:1a:dc:04:26:c1:47:8f:18:44:5f:
         15:97:7f:85:2d:1f:11:10:73:99:eb:54:52:e5:20:93:e6:ba:
         45:b1:7e:a3:e1:b7:23:bd:4e:4d:f9:cf:ad:0c:87:a0:f4:a1:
         f6:60:68:af:e0:c4:51:ba:66:90:35:e1:bb:23:e9:06:ac:90:
         8b:82:ac:58:28:c5:aa:34:da:a0:10:a0:af:20:5a:3f:6b:fa:
         c9:44:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:15:10 2026 by rpki-client