Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File:                     ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier:          JYOZJJb7l1y7zUPmp/ju7kQf98LdW3LTR6/mTJwrOnc=
Subject key identifier:   DA:F7:D6:D3:7C:D2:0D:6F:8B:22:3A:2C:A4:D9:91:D2:E9:10:B8:F1
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer:       /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial:       019D984FEA12C771C052BD599817477635A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number:          1561
Signing time:             Thu 16 Apr 2026 22:01:07 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:07 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:07 +0000
Files and hashes:         1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: IFd1W/NT7Sgpi3GFnRvX7bbjc+m7QOefI6pzfe3i7IQ=)
                          2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:ea:12:c7:71:c0:52:bd:59:98:17:47:76:35:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
        Validity
            Not Before: Apr 16 22:01:07 2026 GMT
            Not After : Apr 17 22:01:07 2026 GMT
        Subject: CN=daf7d6d37cd20d6f8b223a2ca4d991d2e910b8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:ae:84:8b:d8:cc:09:c2:9b:62:e1:b5:92:
                    7f:32:ff:81:50:da:00:9f:ba:76:3b:e8:b2:c8:5c:
                    09:0f:5f:b9:57:ec:7f:ce:00:6f:71:54:d4:cf:c2:
                    f9:f0:4f:fa:62:e5:30:2e:69:1c:e7:bf:af:e9:5b:
                    95:10:9c:2c:4f:2a:57:4c:50:1f:cc:6d:7f:2d:fe:
                    10:ba:22:a4:f3:cc:a1:40:ac:88:12:b3:24:12:d3:
                    8e:94:81:25:6c:7c:67:ef:6d:19:62:dc:08:b5:f9:
                    b2:c9:40:85:99:90:7d:64:1b:8a:90:c9:b6:d9:a4:
                    14:61:08:33:3b:78:74:99:6f:55:bc:fd:bd:e6:93:
                    4b:ff:18:ec:72:69:c6:4e:ec:a8:f1:55:3d:6d:02:
                    02:5b:1d:8b:99:89:b6:4a:f1:db:db:b5:58:e2:c4:
                    1e:1e:9e:e9:64:f0:9a:8b:91:23:5f:4d:b1:8d:f4:
                    18:0d:ec:60:6b:50:6d:b9:5f:2a:f3:ba:48:74:fd:
                    1c:f9:76:28:c7:73:0c:4b:30:31:a9:58:75:ad:ca:
                    1d:4d:65:40:3a:57:69:c5:d4:b2:f9:96:64:db:48:
                    f9:f9:03:26:1d:33:8d:d0:d6:59:18:78:90:60:4b:
                    18:ff:38:44:09:9f:63:53:e6:6d:06:ee:1b:cb:b4:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:D6:D3:7C:D2:0D:6F:8B:22:3A:2C:A4:D9:91:D2:E9:10:B8:F1
            X509v3 Authority Key Identifier:
                keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2f:00:37:88:6a:99:2a:3a:7c:f9:be:51:80:89:3e:98:b2:
         f2:06:ff:15:e2:fd:74:6a:35:bd:a2:32:c8:e0:a2:f1:cc:00:
         95:32:1f:52:7f:3a:1f:b3:e7:43:4b:1c:d5:34:cc:e9:c7:c3:
         b0:6e:52:b8:bb:69:b3:a2:47:0b:9b:4b:65:4a:f2:32:d9:4f:
         67:20:e7:4f:cb:55:2a:f3:40:bc:d2:a2:7d:2b:3f:ea:78:be:
         85:0c:c8:1b:89:6c:31:ff:3e:bf:09:60:e4:dc:c8:23:09:d9:
         24:91:60:53:ff:b6:c2:5d:55:ed:ee:56:a0:53:78:7a:ac:d6:
         a3:6d:00:58:0c:cd:a4:54:08:c8:46:37:1b:0f:1b:99:e0:f6:
         49:b1:df:6d:0f:f6:12:01:43:05:33:87:f1:b2:45:1f:18:94:
         82:ad:1b:da:a0:be:0d:66:7d:c2:44:63:40:af:25:d6:cd:8b:
         2a:70:0d:c1:e3:75:d2:4c:26:c6:34:f2:39:c7:be:e8:96:9d:
         23:9d:cb:88:3c:0a:d2:13:9c:b2:e1:cb:03:08:6b:50:fd:72:
         54:a0:e4:a7:9f:b3:52:95:46:dd:59:28:45:4f:56:89:80:75:
         31:9e:eb:ba:10:d7:8e:f8:93:df:d4:dd:52:2a:2c:b0:51:b2:
         a9:51:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:40 2026 by rpki-client