Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File:                     npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier:          yi81Q8Ft2a8+jeoWq4fSvzzedmzhrbSA0DgWY+6JJiA=
Subject key identifier:   34:E5:59:A1:E5:56:79:25:BF:74:88:AD:C9:EB:8F:A1:BF:3F:95:E9
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer:       /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial:       019F84C3EB2B0DF54E099B3DAC375515EC59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number:          0A7E
Signing time:             Tue 21 Jul 2026 13:00:59 +0000
Manifest this update:     Tue 21 Jul 2026 13:00:59 +0000
Manifest next update:     Wed 22 Jul 2026 13:00:59 +0000
Files and hashes:         1: npTVvz231nNNzxvmItX97i_sO48.crl (hash: Rv7jIqZn7Hk8zsok2mtCp8AkS6QaYGHn4AapIW8sIDA=)
                          2: zcxoOaYQZVz0kyNkbAvoL7_cGOo.roa (hash: cbQCnBDpdRHmtA6XlyYrBSpV92ISXXC3TjEjSfaVLUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:eb:2b:0d:f5:4e:09:9b:3d:ac:37:55:15:ec:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
        Validity
            Not Before: Jul 21 13:00:59 2026 GMT
            Not After : Jul 22 13:00:59 2026 GMT
        Subject: CN=34e559a1e5567925bf7488adc9eb8fa1bf3f95e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:90:19:c5:72:c7:02:b6:dd:6a:5c:c4:34:d0:
                    f2:c6:51:d9:9b:2b:a4:67:60:4c:9a:94:54:26:da:
                    96:b4:c4:29:47:2d:c6:e2:aa:f7:ef:32:df:64:e8:
                    a1:31:26:3b:dd:59:85:f3:88:c6:53:91:c8:c4:dd:
                    1b:1f:66:74:8a:9d:cc:81:19:15:b7:ef:53:d9:5a:
                    f2:bd:62:e6:5a:69:5b:d5:a3:a3:6f:0f:ba:d7:66:
                    2b:ed:cd:63:87:7d:dc:a6:a4:0d:d9:54:63:c6:bc:
                    be:bb:1c:4b:65:e8:60:ee:29:0c:22:ef:32:89:6e:
                    46:9e:9d:0f:80:91:ea:5d:f8:74:e7:3d:1d:4f:ae:
                    b5:7d:df:1a:ad:92:a6:cf:cc:1a:a5:bf:ee:f8:f0:
                    b7:e6:14:06:9e:a9:9e:48:d0:ad:05:39:2b:83:2b:
                    54:d9:70:a4:58:91:b3:87:f8:34:7f:25:20:5e:f0:
                    d1:84:96:0e:f0:6d:f4:5c:f0:0b:1a:fd:7d:6e:a5:
                    5e:90:cf:45:5f:ad:4f:d2:ff:6d:97:51:b4:9c:72:
                    6e:e0:2a:68:24:1b:9d:94:ea:50:de:df:6c:c6:e1:
                    99:a8:40:03:53:93:73:66:d0:5a:8c:e3:26:d7:68:
                    4c:37:1a:b6:72:6d:e1:94:78:08:9d:fd:8e:45:cd:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E5:59:A1:E5:56:79:25:BF:74:88:AD:C9:EB:8F:A1:BF:3F:95:E9
            X509v3 Authority Key Identifier:
                keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a6:09:54:cb:c9:d7:02:d6:40:f4:22:e4:4c:ed:aa:c1:5e:
         2f:da:90:fb:91:da:51:da:3b:c2:1c:d6:f3:4c:de:8f:b6:48:
         d2:21:a1:6e:c8:5a:df:43:2d:0a:0c:a5:0d:d5:76:9e:bf:f2:
         ec:b2:3f:d2:e8:f6:4b:8c:d4:1f:64:d3:23:2e:1b:bb:05:b6:
         c2:35:7c:6a:37:d7:44:dc:7c:89:7e:0a:ed:2f:45:09:b6:c7:
         be:d6:12:9f:89:54:86:55:33:0e:cc:e5:32:74:d5:ba:ea:04:
         ed:bb:72:27:99:88:e4:c5:a1:4c:4a:55:ac:cb:e1:1b:35:aa:
         cc:36:d7:92:69:dc:c2:d9:91:62:ab:1e:b1:80:05:8f:a9:0f:
         ec:c7:a2:d4:e6:76:3a:65:98:02:a4:43:aa:31:ec:54:e8:c4:
         a3:24:87:75:bd:31:55:40:02:7a:12:d8:39:3f:ef:71:b7:05:
         4e:c0:d4:8c:07:06:70:79:dd:fc:cb:1b:a9:94:51:23:1f:f6:
         bd:5e:aa:3c:66:2e:46:8d:ab:bd:2b:af:83:64:de:18:87:76:
         e6:14:03:f1:c9:fd:ab:3f:06:f6:91:58:fc:4f:cd:05:88:8f:
         77:84:c4:92:8c:ae:cf:0f:85:a8:3d:98:ba:f6:ba:6c:0e:8f:
         b6:4a:f6:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ew+srDfVOCZs9rDdVFexZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTRkNWJmM2RiN2Q2NzM0ZGNmMWJlNjIyZDVmZGVlMmZl
YzNiOGYwHhcNMjYwNzIxMTMwMDU5WhcNMjYwNzIyMTMwMDU5WjAzMTEwLwYDVQQD
EygzNGU1NTlhMWU1NTY3OTI1YmY3NDg4YWRjOWViOGZhMWJmM2Y5NWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5AZxXLHArbdalzENNDyxlHZmyuk
Z2BMmpRUJtqWtMQpRy3G4qr37zLfZOihMSY73VmF84jGU5HIxN0bH2Z0ip3MgRkV
t+9T2VryvWLmWmlb1aOjbw+612Yr7c1jh33cpqQN2VRjxry+uxxLZehg7ikMIu8y
iW5Gnp0PgJHqXfh05z0dT661fd8arZKmz8wapb/u+PC35hQGnqmeSNCtBTkrgytU
2XCkWJGzh/g0fyUgXvDRhJYO8G30XPALGv19bqVekM9FX61P0v9tl1G0nHJu4Cpo
JBudlOpQ3t9sxuGZqEADU5NzZtBajOMm12hMNxq2cm3hlHgInf2ORc2RLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTlWaHlVnklv3SIrcnrj6G/P5XpMB8GA1UdIwQY
MBaAFJ6U1b89t9ZzTc8b5iLV/e4v7DuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xMzgzYWEtMTA4Yi00NmVmLWFjOWUt
OWNlZTIzYTYwNTY2LzEvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xMzgzYWEtMTA4Yi00NmVmLWFjOWUtOWNlZTIzYTYwNTY2
LzEvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaYJVMvJ
1wLWQPQi5EztqsFeL9qQ+5HaUdo7whzW80zej7ZI0iGhbsha30MtCgylDdV2nr/y
7LI/0uj2S4zUH2TTIy4buwW2wjV8ajfXRNx8iX4K7S9FCbbHvtYSn4lUhlUzDszl
MnTVuuoE7btyJ5mI5MWhTEpVrMvhGzWqzDbXkmncwtmRYqsesYAFj6kP7Mei1OZ2
OmWYAqRDqjHsVOjEoySHdb0xVUACehLYOT/vcbcFTsDUjAcGcHnd/MsbqZRRIx/2
vV6qPGYuRo2rvSuvg2TeGId25hQD8cn9qz8G9pFY/E/NBYiPd4TEkoyuzw+FqD2Y
uva6bA6Ptkr29w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:53:40 2026 by rpki-client