Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          RtVZ7PwQPxmGtk5d164Si69MZJQ82+yTaOkkP16s7+s=
Subject key identifier:   1C:90:00:77:17:AB:33:AF:E3:10:06:AE:ED:64:E1:9E:CB:27:94:4E
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       01A0E73F822ACF8486A23C7C343EB00100FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          0C4D
Signing time:             Mon 28 Sep 2026 09:01:33 +0000
Manifest this update:     Mon 28 Sep 2026 09:01:33 +0000
Manifest next update:     Tue 29 Sep 2026 09:01:33 +0000
Files and hashes:         1: 1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa (hash: 3frOGkt9ftuVgtTCe7VyDncQkJsfKLeQbnXtJjtvP38=)
                          2: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: nfAulkg6ubqaWpVZ4MmQLNeKsyrNKfh6z8iP4wacqFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:82:2a:cf:84:86:a2:3c:7c:34:3e:b0:01:00:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Sep 28 09:01:33 2026 GMT
            Not After : Sep 29 09:01:33 2026 GMT
        Subject: CN=1c90007717ab33afe31006aeed64e19ecb27944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:09:16:5a:0c:6c:4f:69:89:5d:86:17:5f:6d:
                    29:b3:1f:73:2a:13:a9:61:8b:21:43:a7:a9:c7:8b:
                    ad:0c:2b:9c:63:3a:3e:d9:d3:e9:94:1a:c8:81:64:
                    74:03:78:2e:8e:bc:50:5e:ac:b5:f1:1c:97:fa:e2:
                    a3:9d:22:82:94:91:51:5b:3b:2a:a3:85:6d:91:c5:
                    6e:a9:e2:3e:9e:46:71:ff:a3:26:23:16:f1:c7:7d:
                    a4:4e:7d:05:a7:99:e4:b6:4e:90:07:47:bb:13:79:
                    39:65:47:5c:9f:f7:a0:89:6b:a5:dd:58:51:83:88:
                    c6:a6:41:b1:0f:79:aa:36:87:28:a1:26:ed:28:76:
                    cd:21:6c:67:ea:d8:01:c9:93:5b:75:5c:db:fb:7f:
                    2b:8e:aa:52:38:91:ca:ac:c6:a7:d6:c4:2f:9e:b2:
                    67:68:ed:27:74:b8:fe:89:33:dd:50:2e:0a:ee:a0:
                    47:be:7b:2c:7c:ba:e6:a8:62:f2:34:a2:e6:0e:be:
                    ae:1c:ba:08:46:91:cc:b1:6c:36:26:de:10:cc:f7:
                    5c:db:1b:0c:1b:0d:39:56:30:69:f2:c3:58:be:24:
                    29:6c:b9:54:22:e9:8d:4c:b1:aa:dc:24:94:fd:7f:
                    74:71:d9:10:fa:56:48:f6:ae:f7:c2:06:17:f5:08:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:90:00:77:17:AB:33:AF:E3:10:06:AE:ED:64:E1:9E:CB:27:94:4E
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:c8:d5:d3:bc:5d:f0:4d:75:44:dd:93:52:3d:62:8a:3e:
         e7:8b:51:ab:be:b4:73:6f:f8:58:ff:f3:74:4d:7c:7e:ab:8a:
         ea:af:87:64:eb:73:28:6c:a2:ac:ce:39:88:21:bc:c7:1c:01:
         c8:73:3b:5a:19:9b:de:da:10:b9:42:89:5c:4f:f7:b1:09:49:
         ea:20:34:2f:62:7d:b5:0b:c5:e7:98:b4:29:45:ec:3c:e8:be:
         04:c7:b0:13:4d:82:9d:73:db:ed:1c:b6:a6:d3:4b:a1:5a:cd:
         52:c1:66:c6:72:01:34:d3:24:4e:b2:0e:55:dc:62:f0:d7:37:
         bf:ca:92:32:7b:b9:f6:dc:a0:c3:ab:e8:85:fd:96:ce:48:06:
         ce:f3:f7:c6:bb:9b:d0:42:eb:b9:a7:ab:84:ae:4b:e7:de:ca:
         87:9b:e4:59:63:98:71:fd:c8:3e:5a:f1:70:85:fc:05:4f:89:
         73:8b:a3:58:17:4d:e3:3f:14:fc:e0:0a:81:c7:6f:e9:c2:b7:
         f1:f5:63:30:17:6c:43:5f:41:3d:81:23:ca:62:6d:06:4a:86:
         d5:43:a6:c5:6b:cd:f0:aa:78:75:82:cd:2c:ce:2e:52:fb:20:
         74:43:6b:da:3c:b6:6e:98:a6:8c:ed:43:41:ee:af:9f:90:f4:
         8f:52:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:45:58 2026 by rpki-client