Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File:                     NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier:          fzb3TLB8KGLyYGVzvTYoMy2VF+fbRACpXgwyOxBNQm8=
Subject key identifier:   88:E9:83:4D:64:C3:B1:39:05:F0:1A:CB:9B:C8:52:B3:AA:E5:4A:FB
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer:       /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial:       019FF75A02147D22DEFDD735FA27BB0AA0BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number:          19FD
Signing time:             Wed 12 Aug 2026 19:01:38 +0000
Manifest this update:     Wed 12 Aug 2026 19:01:38 +0000
Manifest next update:     Thu 13 Aug 2026 19:01:38 +0000
Files and hashes:         1: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: knrWr3Uqw/WuYQd5DOEgb5BvL9C9cMtp9FoB+ZTYwdY=)
                          2: h9csAbPkQWfATuuCxHD4BYCCVSo.roa (hash: uOXNbpvZvHEf4Spk0vf1dg88f9LIRcDmba0q2K0ziEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:5a:02:14:7d:22:de:fd:d7:35:fa:27:bb:0a:a0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
        Validity
            Not Before: Aug 12 19:01:38 2026 GMT
            Not After : Aug 13 19:01:38 2026 GMT
        Subject: CN=88e9834d64c3b13905f01acb9bc852b3aae54afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:98:3f:4d:0f:a4:de:63:3d:e3:e0:6b:62:
                    7e:e1:a9:0a:74:17:48:a9:45:db:90:d0:86:28:fe:
                    f2:de:41:52:7a:4a:64:15:80:ef:ff:05:e1:7a:cf:
                    d3:77:55:30:2a:87:dd:e4:8a:57:5f:e2:30:b8:09:
                    14:02:bf:4f:61:d0:2d:f1:c1:6c:37:67:cd:c9:8e:
                    e1:00:a5:6f:ee:31:25:dc:91:4f:e2:ab:af:d6:63:
                    2c:98:a0:17:7b:cd:e6:8a:9c:82:f5:71:7e:58:23:
                    28:11:04:79:c7:88:ae:f9:c1:a0:45:15:b7:23:05:
                    ee:33:8d:29:69:bd:78:09:b9:25:1e:9b:a2:02:3d:
                    1c:83:28:ed:81:a1:e2:50:76:a4:d8:7c:c7:99:b1:
                    b4:c2:df:2f:d3:b4:5c:dd:0a:20:76:ec:05:f4:85:
                    11:9f:4f:22:f1:ae:f8:29:c8:75:0c:c9:3a:b1:13:
                    09:0f:f4:bd:2d:d2:cc:14:8b:c8:14:20:ac:5f:cc:
                    e2:79:7c:58:a6:60:0d:30:02:c3:f0:bd:d0:7b:ee:
                    26:3b:a0:c6:ff:a3:c7:c2:24:f9:37:f4:48:45:f1:
                    a8:1b:da:c0:54:63:eb:e5:51:27:b6:b7:c0:48:ae:
                    ba:41:5a:2f:13:2d:c8:a9:eb:a8:3e:50:d3:b2:b0:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E9:83:4D:64:C3:B1:39:05:F0:1A:CB:9B:C8:52:B3:AA:E5:4A:FB
            X509v3 Authority Key Identifier:
                keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:96:09:7c:2a:ec:34:e7:9f:a2:6b:fd:d2:5c:96:d8:9c:32:
         c3:f6:98:27:3b:7c:f0:03:39:22:19:39:70:6a:70:82:75:50:
         a7:3a:e6:ce:65:fd:1b:6e:a9:25:a0:af:22:93:78:ce:81:2b:
         21:e7:0e:ee:4d:9f:c9:ca:6f:a5:92:3a:e7:f4:01:68:1e:9d:
         a8:03:b5:a6:8e:f5:01:e8:67:01:ee:84:cc:b5:ce:f7:16:14:
         0b:05:ca:03:dd:01:19:38:b8:2f:1c:48:8d:8a:69:06:53:17:
         aa:28:ec:fd:97:a1:95:46:c0:4e:cc:78:7e:e1:f0:9c:40:b5:
         bc:fc:27:24:73:95:b7:03:15:00:5e:c5:c9:cd:8c:b2:9d:31:
         cb:92:e2:ec:f8:2c:ec:dc:12:35:17:59:7d:43:ae:02:66:22:
         9f:cd:a9:5a:ad:65:2b:53:1b:f4:1b:7c:bb:f6:b7:73:3c:28:
         43:c8:28:95:10:82:55:a6:2f:a0:d8:20:4c:c0:78:af:4b:c1:
         36:e4:49:a1:d1:c9:76:46:42:eb:31:ba:e6:f9:05:7a:11:57:
         98:28:12:9b:cc:a3:dd:14:fc:6a:bd:89:8e:6b:a0:4c:a8:f7:
         b9:74:e1:c6:e9:95:28:b5:36:ad:73:c7:14:f2:5d:2b:2c:16:
         1f:56:28:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/3WgIUfSLe/dc1+ie7CqC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3
OTlmN2UwHhcNMjYwODEyMTkwMTM4WhcNMjYwODEzMTkwMTM4WjAzMTEwLwYDVQQD
Eyg4OGU5ODM0ZDY0YzNiMTM5MDVmMDFhY2I5YmM4NTJiM2FhZTU0YWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYiYP00PpN5jPePga2J+4akKdBdI
qUXbkNCGKP7y3kFSekpkFYDv/wXhes/Td1UwKofd5IpXX+IwuAkUAr9PYdAt8cFs
N2fNyY7hAKVv7jEl3JFP4quv1mMsmKAXe83mipyC9XF+WCMoEQR5x4iu+cGgRRW3
IwXuM40pab14CbklHpuiAj0cgyjtgaHiUHak2HzHmbG0wt8v07Rc3QogduwF9IUR
n08i8a74Kch1DMk6sRMJD/S9LdLMFIvIFCCsX8zieXxYpmANMALD8L3Qe+4mO6DG
/6PHwiT5N/RIRfGoG9rAVGPr5VEntrfASK66QVovEy3IqeuoPlDTsrDsgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjpg01kw7E5BfAay5vIUrOq5Ur7MB8GA1UdIwQY
MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt
NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh
LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJYJfCrs
NOefomv90lyW2Jwyw/aYJzt88AM5Ihk5cGpwgnVQpzrmzmX9G26pJaCvIpN4zoEr
IecO7k2fycpvpZI65/QBaB6dqAO1po71AehnAe6EzLXO9xYUCwXKA90BGTi4LxxI
jYppBlMXqijs/ZehlUbATsx4fuHwnEC1vPwnJHOVtwMVAF7Fyc2Msp0xy5Li7Pgs
7NwSNRdZfUOuAmYin82pWq1lK1Mb9Bt8u/a3czwoQ8golRCCVaYvoNggTMB4r0vB
NuRJodHJdkZC6zG65vkFehFXmCgSm8yj3RT8ar2JjmugTKj3uXThxumVKLU2rXPH
FPJdKywWH1Yoyg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 00:36:17 2026 by rpki-client