Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          oNceNBlrHziZaPvA8YYOvHso8us5xB0WnCrzrw/bl/s=
Subject key identifier:   F4:A1:FF:06:97:FF:E0:F7:C2:09:30:B5:1E:BB:2D:B8:F4:CB:A8:27
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       019CABD9B469ED47E057F5C24F58D10C6652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          0A1C
Signing time:             Mon 02 Mar 2026 00:01:37 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:37 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:37 +0000
Files and hashes:         1: 1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa (hash: 3frOGkt9ftuVgtTCe7VyDncQkJsfKLeQbnXtJjtvP38=)
                          2: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: xPbhwqQVb+iH+drVdtrajiT9n6CSBBQrFl3F2mirtkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:b4:69:ed:47:e0:57:f5:c2:4f:58:d1:0c:66:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Mar  2 00:01:37 2026 GMT
            Not After : Mar  3 00:01:37 2026 GMT
        Subject: CN=f4a1ff0697ffe0f7c20930b51ebb2db8f4cba827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:f3:4c:32:ac:fb:fc:b7:63:89:8e:9d:5b:
                    5f:dc:ce:4f:d2:22:ae:7f:47:6b:2a:5a:9b:b6:2f:
                    57:41:b0:db:8b:20:32:19:b9:1e:c4:10:2c:df:5d:
                    08:ee:c1:a3:94:76:ba:b0:1e:88:2b:19:9d:da:b9:
                    36:96:31:18:b4:f3:8e:68:b0:3e:c1:56:94:63:c9:
                    1f:e4:06:e1:7c:cd:97:d7:ca:9b:01:81:14:f3:62:
                    41:43:db:74:f6:9a:1e:cc:e5:de:6d:43:ff:f5:f2:
                    3b:38:a0:1b:0f:f2:d0:79:27:4c:78:39:6c:e5:2a:
                    c1:dc:35:d6:75:f4:6a:4f:78:ae:5f:e6:b2:8f:26:
                    99:ef:eb:f1:73:96:78:d8:3c:60:33:41:25:ae:3a:
                    f9:a6:a4:ae:19:59:33:14:45:6b:20:05:10:e8:50:
                    fb:88:06:6f:8b:f1:1b:f9:5b:d0:19:fc:c1:1c:9d:
                    50:79:10:b1:ef:33:a8:07:e0:da:c5:f0:0f:a7:cb:
                    a2:4c:09:d2:5b:ac:78:39:4d:7c:0c:96:a5:c2:7c:
                    18:75:cb:d3:28:55:11:27:aa:5d:63:3f:cb:f7:8d:
                    ac:fa:d8:25:40:8c:47:b2:30:e8:a6:58:d0:7d:69:
                    f4:2f:2d:cc:47:07:6e:b7:b6:88:79:c6:e0:a0:a0:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A1:FF:06:97:FF:E0:F7:C2:09:30:B5:1E:BB:2D:B8:F4:CB:A8:27
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:dd:21:6c:b9:c5:bc:21:da:63:c9:d4:20:d0:85:7a:1f:
         f4:f7:d8:87:6f:e5:65:c7:09:e0:c1:6c:8c:ff:8f:ff:93:99:
         2c:f5:b6:ee:0f:51:bc:4f:a2:ca:5b:d4:a3:6f:2e:3a:9a:8d:
         79:f6:b8:7f:6e:8f:00:62:58:30:a1:71:9f:c4:24:0d:47:9c:
         cb:25:6b:c3:61:1e:18:99:f1:d7:a0:c4:b8:c8:f2:1c:f1:74:
         0d:63:8d:44:b6:f7:2e:a0:e1:f1:05:8c:52:86:c7:4b:be:0a:
         c5:10:59:bb:f6:dc:b4:14:30:4e:8c:d9:8d:ce:b6:e8:10:b0:
         d9:af:6f:45:c8:20:89:a3:27:72:59:42:d5:c6:a5:b9:bf:c6:
         cd:5b:7e:47:d3:d2:ad:4a:34:87:0b:12:a2:3f:97:c0:29:5f:
         0b:16:f8:92:f8:11:f1:63:75:31:58:c4:5e:f5:0f:00:c3:ce:
         ca:49:2e:08:24:27:f1:50:53:86:86:a4:e7:68:f0:93:02:29:
         70:3f:7e:3e:22:db:a7:c4:df:31:f4:aa:46:68:2a:eb:be:8d:
         79:d0:5b:e8:61:c5:0d:a3:ef:19:24:89:03:6c:b6:05:f6:ab:
         17:c3:40:c7:38:c9:83:6f:06:48:c6:66:44:97:44:2b:02:f2:
         fd:b4:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:43 2026 by rpki-client