Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
File:                     N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json)
Hash identifier:          9MjNpiNVLpkx/pK6pUcXE6rUkW5Nsrz2Grcu8SXHvfc=
Subject key identifier:   12:AE:D7:73:E3:B6:F7:3D:1F:59:57:14:94:AC:36:90:C9:4D:0D:90
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Certificate issuer:       /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial:       01A039A742AF4333D6C4370334D18F301694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
Manifest number:          08A7
Signing time:             Tue 25 Aug 2026 16:00:57 +0000
Manifest this update:     Tue 25 Aug 2026 16:00:57 +0000
Manifest next update:     Wed 26 Aug 2026 16:00:57 +0000
Files and hashes:         1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: JWeVQpvZmtSmhD7/wa5PHts4t6m2CVLtR3NOH4SMj2c=)
                          2: gxurOL6_de2_mazC998VnEdoW-c.asa (hash: 2Hwp7taF7eT6V2zHQw0CdelKTgmnz+OKDxvcdMkfdP0=)
                          3: nE4BIyT7Hzt-8_AbWkweiKyHyPc.asa (hash: 7PkWdlc/z9MEKZ2al4HQq8xTSzcpAQSGf61N6r1GcZA=)
                          4: ptyQIs6zOdQaePAf0264xdbfsHE.roa (hash: zeWTG0uQV8YLaSyS7vNW/ey9XtXZbEHMRMH0ynFCKsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 14:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:39:a7:42:af:43:33:d6:c4:37:03:34:d1:8f:30:16:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
        Validity
            Not Before: Aug 25 16:00:57 2026 GMT
            Not After : Aug 26 16:00:57 2026 GMT
        Subject: CN=12aed773e3b6f73d1f59571494ac3690c94d0d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:23:89:ca:1a:51:e4:03:96:37:d8:c4:a0:
                    71:da:f5:99:b9:37:bd:78:fb:46:e8:0c:e6:6d:34:
                    94:74:55:61:f2:a2:b7:b5:23:a7:98:a4:8c:7a:d1:
                    80:40:29:6b:aa:41:49:6d:ef:34:b6:d5:af:b9:e4:
                    60:43:4d:c5:9f:fa:9e:a0:0e:94:9a:e8:9e:00:ec:
                    21:55:5f:32:d2:d7:42:37:5a:58:c8:0d:0a:77:c7:
                    28:83:78:62:42:48:a2:a0:9d:83:6f:95:25:87:94:
                    1e:89:4e:d3:98:24:3b:a7:b2:c2:42:e7:3b:d2:ba:
                    99:b1:c7:ba:dc:8f:52:ec:a7:9e:a1:d3:8d:04:48:
                    1b:50:9e:fe:15:08:f3:54:3b:20:e4:40:56:5f:8f:
                    22:b8:2a:90:9e:48:a3:62:e9:74:8a:77:0d:fd:52:
                    6f:64:05:bb:46:b4:88:2f:19:ca:c4:ef:f2:e5:78:
                    e9:a1:4b:9a:4c:88:01:9b:9f:23:ab:d5:c4:82:5c:
                    8d:13:d2:3b:d1:3e:6b:1a:49:6f:82:a6:84:36:48:
                    de:82:75:f9:d3:ec:4d:87:04:b7:14:ba:d9:77:ad:
                    64:16:47:b4:66:e1:33:76:8f:36:87:85:37:35:3b:
                    61:fd:87:95:81:02:98:28:63:09:0c:06:e7:21:4c:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:D7:73:E3:B6:F7:3D:1F:59:57:14:94:AC:36:90:C9:4D:0D:90
            X509v3 Authority Key Identifier:
                keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:e7:19:fe:46:56:50:0c:6b:28:d2:69:1e:a9:1a:ae:d4:
         02:d6:83:14:92:f2:b2:b5:d2:ef:3e:fc:4a:bf:7f:e2:66:02:
         10:91:4a:9f:1b:c2:b3:fd:1d:cb:0c:23:8f:86:48:74:b1:d3:
         06:85:a1:11:74:21:d9:38:38:93:be:ab:0c:d2:c0:cf:0b:33:
         04:3f:da:d9:e8:f3:ce:7d:bc:4c:15:48:4c:d5:73:c2:38:83:
         77:27:93:3b:ec:fc:be:40:d3:db:4f:db:11:13:95:c8:8b:0e:
         de:32:53:31:bb:20:a1:e1:3d:81:e0:13:59:0a:eb:93:bc:20:
         c7:3c:ec:92:f5:79:e8:6f:18:2c:ca:f3:d1:b1:ef:63:d7:14:
         a6:b3:c9:bd:0e:a9:ea:c0:57:d0:3b:32:26:dd:ed:b1:41:aa:
         01:90:76:51:36:49:bb:81:03:5e:e4:d9:36:71:87:28:30:86:
         7c:cb:14:14:fd:a2:f4:7c:a6:46:dc:a6:d4:05:4e:3d:6b:0b:
         c5:a8:2f:c8:5d:fb:d8:06:a9:79:98:cc:70:ce:06:af:f8:9b:
         be:d1:ee:29:9c:3e:33:05:e5:8f:e4:06:38:43:69:49:01:26:
         ba:41:99:90:36:31:e9:8e:c5:b6:fe:30:c4:47:86:bc:52:7c:
         c6:bb:98:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA5p0KvQzPWxDcDNNGPMBaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2
ZWNhMTkwHhcNMjYwODI1MTYwMDU3WhcNMjYwODI2MTYwMDU3WjAzMTEwLwYDVQQD
EygxMmFlZDc3M2UzYjZmNzNkMWY1OTU3MTQ5NGFjMzY5MGM5NGQwZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC4jicoaUeQDljfYxKBx2vWZuTe9
ePtG6AzmbTSUdFVh8qK3tSOnmKSMetGAQClrqkFJbe80ttWvueRgQ03Fn/qeoA6U
muieAOwhVV8y0tdCN1pYyA0Kd8cog3hiQkiioJ2Db5Ulh5QeiU7TmCQ7p7LCQuc7
0rqZsce63I9S7KeeodONBEgbUJ7+FQjzVDsg5EBWX48iuCqQnkijYul0incN/VJv
ZAW7RrSILxnKxO/y5XjpoUuaTIgBm58jq9XEglyNE9I70T5rGklvgqaENkjegnX5
0+xNhwS3FLrZd61kFke0ZuEzdo82h4U3NTth/YeVgQKYKGMJDAbnIUxTrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKu13Pjtvc9H1lXFJSsNpDJTQ2QMB8GA1UdIwQY
MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt
ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh
LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXPnGf5G
VlAMayjSaR6pGq7UAtaDFJLysrXS7z78Sr9/4mYCEJFKnxvCs/0dywwjj4ZIdLHT
BoWhEXQh2Tg4k76rDNLAzwszBD/a2ejzzn28TBVITNVzwjiDdyeTO+z8vkDT20/b
EROVyIsO3jJTMbsgoeE9geATWQrrk7wgxzzskvV56G8YLMrz0bHvY9cUprPJvQ6p
6sBX0DsyJt3tsUGqAZB2UTZJu4EDXuTZNnGHKDCGfMsUFP2i9HymRtym1AVOPWsL
xagvyF372AapeZjMcM4Gr/ibvtHuKZw+MwXlj+QGOENpSQEmukGZkDYx6Y7Ftv4w
xEeGvFJ8xruYMQ==
-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:37 2026 by rpki-client