Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File:                     NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier:          TqLs5Vtnf4ZYhHmBtlJKs2PeWNRlzkgiOo2nlbNcQNA=
Subject key identifier:   55:50:AF:17:94:5F:2E:B9:24:60:35:2B:BB:8B:49:FF:94:DD:D3:6E
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer:       /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial:       019FA3E1141D1DCEF4AF5DD29FFEAEBDC5FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number:          14CC
Signing time:             Mon 27 Jul 2026 14:01:04 +0000
Manifest this update:     Mon 27 Jul 2026 14:01:04 +0000
Manifest next update:     Tue 28 Jul 2026 14:01:04 +0000
Files and hashes:         1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: 8K4j6flI8cIH+pIsAzmwcZHovyXAmNN/Xf8nq29+yRo=)
                          2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:e1:14:1d:1d:ce:f4:af:5d:d2:9f:fe:ae:bd:c5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
        Validity
            Not Before: Jul 27 14:01:04 2026 GMT
            Not After : Jul 28 14:01:04 2026 GMT
        Subject: CN=5550af17945f2eb92460352bbb8b49ff94ddd36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:64:53:13:4e:5a:0d:80:d4:02:82:7e:92:
                    ca:ae:38:55:f8:6a:6c:c1:fd:79:d6:e5:b5:9d:90:
                    0e:47:95:ff:34:cf:f2:35:80:f6:d3:33:e8:ad:12:
                    01:24:f5:dd:e5:3c:6f:cd:4c:35:5d:3b:fe:90:54:
                    82:9f:60:62:cc:ce:22:91:e3:e3:eb:73:5b:35:fc:
                    6b:0f:ed:d9:d8:e1:29:d4:ac:d5:9a:c8:02:71:88:
                    4f:2a:3b:fe:b0:06:bf:03:55:91:a3:1c:60:22:86:
                    8e:08:ef:91:28:c1:a4:ea:e9:62:ec:56:e6:d0:90:
                    5e:a7:51:f7:be:b2:80:42:b7:de:bb:f6:aa:fd:db:
                    85:be:3d:eb:9e:d6:28:da:92:ae:e9:15:99:67:ec:
                    f3:a1:27:71:d9:3e:d7:2c:d2:d3:93:1d:a2:f5:cc:
                    32:90:72:b5:a6:e3:ee:fc:56:63:19:b3:31:ad:9e:
                    11:f1:76:e0:ca:a9:fc:95:67:bb:5e:bc:6b:08:6e:
                    b4:cf:f3:44:dc:2f:6d:6f:74:d9:bb:0c:12:f2:a6:
                    24:c0:a4:4f:c2:b0:49:72:8d:b1:3b:f7:38:2c:40:
                    a6:95:05:b2:63:5f:04:29:35:b3:29:25:e9:70:90:
                    7c:55:20:72:bd:17:b8:9a:b1:50:8e:93:9a:c7:ba:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:50:AF:17:94:5F:2E:B9:24:60:35:2B:BB:8B:49:FF:94:DD:D3:6E
            X509v3 Authority Key Identifier:
                keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b3:99:65:12:28:8f:92:f0:be:32:a7:6f:a9:3c:a8:69:d5:
         96:22:20:e3:17:fd:90:be:7f:aa:88:ff:a3:96:95:bd:70:97:
         77:53:34:8d:64:14:61:bb:4f:f8:42:d5:7d:b9:17:ec:f2:69:
         d3:fa:f6:f0:04:4a:39:d6:9a:47:0b:2d:6c:fb:15:83:d7:75:
         50:33:58:fe:91:bd:d0:41:9e:69:1e:4e:b4:62:37:61:94:34:
         09:2a:de:3b:0f:fd:d1:70:5e:49:b3:d3:27:b8:34:75:c3:70:
         64:e3:06:6d:10:da:10:55:a6:ab:0b:2f:40:c0:6a:04:9b:49:
         05:54:16:44:14:ee:62:95:8e:13:6a:66:48:76:8d:ef:34:e5:
         72:c4:64:d3:a2:02:88:07:65:cf:84:ea:9e:6a:8e:88:38:8f:
         cd:a8:4a:2e:a7:b4:1b:c3:a6:82:49:49:c0:fc:6f:a3:8c:80:
         c2:86:42:e0:79:8a:e7:cb:aa:51:b6:d0:97:f3:2e:9e:e5:55:
         2d:46:97:93:f1:aa:94:66:4d:cf:43:52:25:e2:f9:f3:0d:22:
         5b:af:f6:b6:35:06:1a:af:47:8a:08:b5:8a:78:ad:98:0a:a7:
         a4:60:c9:08:34:94:ac:3e:c0:b0:aa:d8:86:f4:54:85:f7:43:
         2d:0d:f5:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+j4RQdHc70r13Sn/6uvcX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz
NGRiZTgwHhcNMjYwNzI3MTQwMTA0WhcNMjYwNzI4MTQwMTA0WjAzMTEwLwYDVQQD
Eyg1NTUwYWYxNzk0NWYyZWI5MjQ2MDM1MmJiYjhiNDlmZjk0ZGRkMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9lkUxNOWg2A1AKCfpLKrjhV+Gps
wf151uW1nZAOR5X/NM/yNYD20zPorRIBJPXd5TxvzUw1XTv+kFSCn2BizM4ikePj
63NbNfxrD+3Z2OEp1KzVmsgCcYhPKjv+sAa/A1WRoxxgIoaOCO+RKMGk6uli7Fbm
0JBep1H3vrKAQrfeu/aq/duFvj3rntYo2pKu6RWZZ+zzoSdx2T7XLNLTkx2i9cwy
kHK1puPu/FZjGbMxrZ4R8Xbgyqn8lWe7XrxrCG60z/NE3C9tb3TZuwwS8qYkwKRP
wrBJco2xO/c4LECmlQWyY18EKTWzKSXpcJB8VSByvRe4mrFQjpOax7qn+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVQrxeUXy65JGA1K7uLSf+U3dNuMB8GA1UdIwQY
MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt
NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy
LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLOZZRIo
j5LwvjKnb6k8qGnVliIg4xf9kL5/qoj/o5aVvXCXd1M0jWQUYbtP+ELVfbkX7PJp
0/r28ARKOdaaRwstbPsVg9d1UDNY/pG90EGeaR5OtGI3YZQ0CSreOw/90XBeSbPT
J7g0dcNwZOMGbRDaEFWmqwsvQMBqBJtJBVQWRBTuYpWOE2pmSHaN7zTlcsRk06IC
iAdlz4TqnmqOiDiPzahKLqe0G8OmgklJwPxvo4yAwoZC4HmK58uqUbbQl/MunuVV
LUaXk/GqlGZNz0NSJeL58w0iW6/2tjUGGq9Higi1initmAqnpGDJCDSUrD7AsKrY
hvRUhfdDLQ31rw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:20 2026 by rpki-client