Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File:                     npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier:          eblwB6P4yz0n7wTZY+RXWqcMbxuLTu4Tyz4baj9st78=
Subject key identifier:   77:0B:6E:64:DB:78:C1:53:83:4F:3D:07:6F:62:DF:12:3C:D6:52:1C
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer:       /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial:       019CADC7553D83F3522F0A3B13CC3CE0EEDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number:          05F9
Signing time:             Mon 02 Mar 2026 09:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 09:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 09:00:47 +0000
Files and hashes:         1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: 8M98/TT/XL2Ieli9o/MzNuIL9Ov0j0Aw0Qx+omYK/VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:55:3d:83:f3:52:2f:0a:3b:13:cc:3c:e0:ee:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
        Validity
            Not Before: Mar  2 09:00:47 2026 GMT
            Not After : Mar  3 09:00:47 2026 GMT
        Subject: CN=770b6e64db78c153834f3d076f62df123cd6521c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:1b:bc:51:59:06:a1:af:16:77:5b:5b:86:
                    2c:5e:1b:21:10:5d:97:f6:37:10:b0:82:1c:27:a5:
                    70:a4:dc:12:3f:48:94:97:7f:a5:01:ff:af:a9:4f:
                    ab:3a:36:6b:6d:3e:4b:06:f7:a3:8a:3f:48:f6:28:
                    12:3d:47:05:be:94:0f:4e:8e:5a:41:a7:47:12:e7:
                    fc:45:fc:ff:68:29:a5:cb:34:19:79:10:43:42:d5:
                    7a:3e:45:0d:87:d0:e6:e0:cd:85:ff:c5:8f:5d:3e:
                    65:d1:64:2f:c5:10:2c:0c:15:00:0a:09:1b:36:2d:
                    de:ab:a5:8d:5b:17:fd:48:0d:c9:e8:ca:dd:7d:c5:
                    fe:37:58:b0:92:7f:8b:f9:ce:94:35:d6:23:a9:d3:
                    7a:de:82:7d:fc:0c:0a:4c:ba:fb:47:1c:85:43:d1:
                    14:4b:2c:f2:1a:0d:96:37:f8:79:3b:4d:37:1b:01:
                    d4:c5:2d:8b:0a:1b:37:bc:7c:21:36:af:d5:c6:aa:
                    55:37:b5:17:86:02:1d:b1:c4:76:fc:fb:67:f1:a3:
                    0d:38:81:44:68:7e:c7:c8:27:e3:aa:f9:68:d8:7f:
                    27:04:8a:97:18:32:55:de:9a:e5:b8:50:ef:b1:8e:
                    06:03:4f:a6:bb:43:2a:b2:84:4c:6d:a7:fd:92:5c:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0B:6E:64:DB:78:C1:53:83:4F:3D:07:6F:62:DF:12:3C:D6:52:1C
            X509v3 Authority Key Identifier:
                keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:11:52:ac:42:4c:46:be:60:71:86:2a:dd:c3:6b:b9:94:ab:
         d7:33:62:de:13:dc:4d:31:08:91:0f:d1:61:85:8f:93:ce:0a:
         2a:68:9a:c2:76:15:28:1f:56:62:f3:c8:a2:23:8d:50:34:92:
         7e:0d:5a:b1:ae:54:5e:8e:24:26:7e:97:4f:8d:6a:1b:56:f3:
         45:89:e7:43:53:c3:95:cc:2e:8c:45:a8:c5:d3:d9:e1:6f:50:
         b1:3a:b8:3d:01:4d:42:a6:a8:fc:00:84:96:d3:43:dc:c0:35:
         4c:ed:a1:d6:9c:e7:9a:2f:21:41:cd:d1:88:58:06:e3:dd:74:
         d6:1d:8a:98:bf:69:f8:57:cb:3b:f4:cd:1b:8d:4d:0c:2a:bf:
         cf:0e:ff:5f:0e:63:f3:50:9e:7a:4e:5e:18:76:7a:ba:79:43:
         9f:81:45:99:e6:4e:f8:1b:08:76:10:0a:38:e6:bd:38:f3:b1:
         8e:e0:d2:c6:5a:d1:db:fa:b7:a9:90:3b:46:80:f7:04:a8:55:
         08:59:56:89:5d:32:df:63:2f:4c:91:bd:7e:eb:b0:d2:ce:d4:
         09:4a:cc:a2:cc:22:92:e6:91:e8:f4:94:c6:cd:ff:dc:e7:1e:
         06:7d:e2:2a:77:cb:19:f0:47:77:66:46:2a:6f:6e:58:48:59:
         32:bf:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:53 2026 by rpki-client