Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          ZJV6c2yGKUgqgVv63aMN6tgYowu36A6KWrp0woRgnlE=
Subject key identifier:   E8:A0:9C:C8:70:1A:98:6C:61:F2:50:24:40:7F:82:66:04:CE:16:74
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       019D99631A73B576DC943D2A016C550CA6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          0A97
Signing time:             Fri 17 Apr 2026 03:01:41 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:41 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:41 +0000
Files and hashes:         1: 1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa (hash: 3frOGkt9ftuVgtTCe7VyDncQkJsfKLeQbnXtJjtvP38=)
                          2: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: tUbmnEPGyPKCk0P2u3TiVnSEtuEIAK8m17E0bfT3LH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:1a:73:b5:76:dc:94:3d:2a:01:6c:55:0c:a6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Apr 17 03:01:41 2026 GMT
            Not After : Apr 18 03:01:41 2026 GMT
        Subject: CN=e8a09cc8701a986c61f25024407f826604ce1674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:33:52:23:54:86:01:57:33:06:78:e0:a5:
                    b7:a8:44:3d:84:ee:91:72:bc:93:f0:61:32:35:88:
                    49:0f:21:8f:dd:bd:7f:4d:9b:2d:ba:95:56:17:3b:
                    55:30:e4:7c:2c:53:80:fe:f8:fc:a3:f5:b4:4d:8d:
                    58:41:53:39:fb:3b:18:44:b6:0f:dc:a4:ab:1f:11:
                    09:b1:6c:05:dd:17:bc:19:6b:21:7b:4d:80:52:7c:
                    41:3f:75:03:89:c8:e3:bd:be:79:e0:95:98:4c:94:
                    3a:4a:fa:c2:9b:57:3d:93:19:79:1e:c2:60:83:16:
                    bd:92:22:5e:00:2f:e0:21:83:11:88:cd:db:b8:49:
                    72:7c:6e:ea:be:b8:90:d2:d6:81:ba:14:b8:43:b6:
                    ba:e2:b1:b5:8c:5a:dc:b7:cb:79:06:45:29:18:19:
                    79:7f:67:c1:5b:37:4b:bd:6f:b8:c5:63:09:cf:de:
                    a8:d4:30:92:c7:6b:7e:cc:03:b0:f4:7b:d9:47:d6:
                    51:e2:db:10:96:41:2c:b0:f8:9e:b8:0d:9a:5a:33:
                    f7:f3:e0:4e:43:af:a6:cd:a6:e5:b8:6e:37:2e:ea:
                    52:35:0b:ea:bf:5f:66:29:a5:fd:a5:24:ad:3a:d5:
                    26:d0:79:b9:13:a1:09:60:57:93:66:62:c0:1b:ae:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A0:9C:C8:70:1A:98:6C:61:F2:50:24:40:7F:82:66:04:CE:16:74
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:74:e3:f0:8d:6f:78:34:83:19:8c:9a:4d:ea:c9:19:f2:eb:
         d3:61:18:db:33:fa:58:ab:84:cf:29:69:92:46:05:b0:d8:7e:
         d3:91:72:e3:a0:96:d0:d2:2f:b7:73:7c:91:4c:36:fc:5b:8c:
         5c:ac:9d:d3:ee:e1:97:50:3d:e2:67:79:3c:5f:a5:61:fc:94:
         aa:fa:00:b6:89:81:14:5f:20:42:f2:f7:be:b0:83:19:1b:1b:
         ed:b8:14:3a:73:84:0a:86:3c:8d:2e:b7:b2:26:ec:d9:86:8e:
         18:2d:a4:3a:b4:07:99:85:0f:b0:d9:7c:4f:d6:d8:b3:d5:94:
         ae:3e:b9:f4:04:ad:bd:6b:66:24:65:16:89:4c:73:9c:9c:a2:
         6d:6d:ff:8e:f4:a3:6f:37:85:22:34:c7:e8:35:6e:45:ad:18:
         df:52:72:19:0b:eb:c1:4d:20:f5:db:17:a1:31:d9:2f:fd:61:
         84:c5:b1:fe:76:2f:82:e3:e3:28:6d:24:f9:93:f6:70:df:59:
         50:c1:a8:da:61:c8:5f:3f:5f:1a:2a:e3:d9:b0:d3:2b:db:b9:
         ea:36:5e:56:c9:60:48:9d:2d:a3:4d:ee:f3:0b:a3:bf:e6:bc:
         7f:51:d5:ec:ab:4e:f8:b1:a5:80:12:64:1f:94:fd:73:d6:e9:
         6a:8b:61:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYxpztXbclD0qAWxVDKbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTMzZjJjZTU3Yzc0Y2JmOWZmYTUwOTY4NWQ2YWNiZDhj
NTM5OTgwHhcNMjYwNDE3MDMwMTQxWhcNMjYwNDE4MDMwMTQxWjAzMTEwLwYDVQQD
EyhlOGEwOWNjODcwMWE5ODZjNjFmMjUwMjQ0MDdmODI2NjA0Y2UxNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyUzUiNUhgFXMwZ44KW3qEQ9hO6R
cryT8GEyNYhJDyGP3b1/TZstupVWFztVMOR8LFOA/vj8o/W0TY1YQVM5+zsYRLYP
3KSrHxEJsWwF3Re8GWshe02AUnxBP3UDicjjvb554JWYTJQ6SvrCm1c9kxl5HsJg
gxa9kiJeAC/gIYMRiM3buElyfG7qvriQ0taBuhS4Q7a64rG1jFrct8t5BkUpGBl5
f2fBWzdLvW+4xWMJz96o1DCSx2t+zAOw9HvZR9ZR4tsQlkEssPieuA2aWjP38+BO
Q6+mzabluG43LupSNQvqv19mKaX9pSStOtUm0Hm5E6EJYFeTZmLAG655WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOignMhwGphsYfJQJEB/gmYEzhZ0MB8GA1UdIwQY
MBaAFJ6TPyzlfHTL+f+lCWhdasvYxTmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDkt
ODI1OTgwNWM2NDRjLzEvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDktODI1OTgwNWM2NDRj
LzEvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHTj8I1v
eDSDGYyaTerJGfLr02EY2zP6WKuEzylpkkYFsNh+05Fy46CW0NIvt3N8kUw2/FuM
XKyd0+7hl1A94md5PF+lYfyUqvoAtomBFF8gQvL3vrCDGRsb7bgUOnOECoY8jS63
sibs2YaOGC2kOrQHmYUPsNl8T9bYs9WUrj659AStvWtmJGUWiUxznJyibW3/jvSj
bzeFIjTH6DVuRa0Y31JyGQvrwU0g9dsXoTHZL/1hhMWx/nYvguPjKG0k+ZP2cN9Z
UMGo2mHIXz9fGirj2bDTK9u56jZeVslgSJ0to03u8wujv+a8f1HV7KtO+LGlgBJk
H5T9c9bpaothBw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:55 2026 by rpki-client