Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          6ZZ6fN8ToMx9S5DyAKb5tPlyzGU/ZiZ3DcLAGQbswAs=
Subject key identifier:   76:79:A2:0A:EC:86:3B:B4:1D:19:D7:76:2B:F4:12:20:20:F7:16:B6
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       01A0005D10A78A8A349B05DDAC981184C870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 13:01:33 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:33 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:33 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: nHy2VD94nHfGL4+fVaKTEMO75PvpfvHsPySnKOmvL3A=)
                          2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:10:a7:8a:8a:34:9b:05:dd:ac:98:11:84:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Aug 14 13:01:33 2026 GMT
            Not After : Aug 15 13:01:33 2026 GMT
        Subject: CN=7679a20aec863bb41d19d7762bf4122020f716b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:aa:e0:8c:fe:7a:f9:95:b7:50:7a:49:06:
                    6e:fd:60:fd:b9:85:62:fd:40:87:ba:a5:83:5b:f4:
                    f1:7c:1b:1c:27:c7:19:44:1d:3d:d4:b7:be:b3:b8:
                    4d:1e:c1:6c:fa:ec:79:c3:e2:82:ae:d3:0e:27:5e:
                    77:70:d5:0a:67:be:05:b1:b4:c0:a5:80:3f:8b:b2:
                    c7:24:9b:28:03:c8:58:64:a7:54:ba:02:6d:91:62:
                    80:fe:b5:2a:8a:84:61:85:aa:12:81:7d:fd:87:6e:
                    94:4d:8f:20:e5:57:36:39:6f:b8:df:c7:d5:c5:96:
                    24:79:6b:d6:98:d8:31:56:8b:96:98:6a:c5:ed:fe:
                    0f:24:76:6f:ce:d9:24:48:dd:e0:f2:f5:b7:81:52:
                    b7:c4:d9:76:3d:dc:5b:7f:cd:92:05:3d:95:22:17:
                    db:b1:9b:02:81:4e:28:fb:2d:e1:d0:ce:70:a4:7b:
                    93:25:39:98:90:5d:81:26:ec:bc:4e:03:13:ae:c3:
                    00:5d:23:42:25:49:5e:09:49:30:34:99:48:de:82:
                    79:b5:42:4d:13:dc:67:17:65:25:d9:26:fa:3a:d6:
                    2c:09:32:e7:6b:84:ad:54:9a:0a:4a:76:e7:2b:db:
                    dd:13:cf:53:3a:e4:ed:5a:8b:70:2c:68:30:2f:b7:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:A2:0A:EC:86:3B:B4:1D:19:D7:76:2B:F4:12:20:20:F7:16:B6
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:88:62:3d:b9:02:41:55:00:f2:af:6c:64:35:04:97:29:b1:
         20:da:30:40:f8:54:e0:20:3f:73:26:22:2f:97:38:70:bf:1e:
         e4:90:6f:3c:33:ba:23:f3:cc:2c:7e:34:c8:67:09:26:23:dc:
         7c:c5:4c:aa:c7:3f:d9:40:f7:d9:38:68:87:b3:b3:84:14:90:
         f9:06:83:d9:46:cc:46:62:b8:54:8d:75:c2:fe:ce:c6:a1:f0:
         c3:55:66:f1:1d:15:32:6a:6f:64:d9:04:01:f7:2d:a9:d4:b6:
         6a:e9:60:bd:3d:79:de:0e:38:60:45:71:d7:d7:d4:82:23:38:
         6f:da:b9:02:00:bc:d3:73:11:a1:69:7f:63:3e:8a:df:ab:5a:
         17:43:18:34:00:1c:75:f4:03:79:87:69:e4:b7:8b:c6:ca:bc:
         68:c4:ee:61:08:c3:5f:56:3d:c6:48:9b:39:6e:3b:5d:3d:92:
         18:a5:77:23:bf:2a:aa:af:2d:fd:2e:1b:ec:29:ab:bf:20:5f:
         e7:2a:ff:8f:df:d4:d8:e6:73:a0:20:00:45:ed:80:ce:c4:18:
         17:2a:be:25:4f:1f:6e:87:a3:c5:a3:e6:bf:91:b3:ea:ae:f5:
         9d:22:6b:ed:c2:58:26:14:6b:93:cf:28:11:5b:7d:90:fb:fb:
         94:83:28:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXRCnioo0mwXdrJgRhMhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYjM1OTU2YTQwMzhhMDkzOGNjZGE4NTU5MmFkNTMxZTRh
ODgzYWQwHhcNMjYwODE0MTMwMTMzWhcNMjYwODE1MTMwMTMzWjAzMTEwLwYDVQQD
Eyg3Njc5YTIwYWVjODYzYmI0MWQxOWQ3NzYyYmY0MTIyMDIwZjcxNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkiq4Iz+evmVt1B6SQZu/WD9uYVi
/UCHuqWDW/TxfBscJ8cZRB091Le+s7hNHsFs+ux5w+KCrtMOJ153cNUKZ74FsbTA
pYA/i7LHJJsoA8hYZKdUugJtkWKA/rUqioRhhaoSgX39h26UTY8g5Vc2OW+438fV
xZYkeWvWmNgxVouWmGrF7f4PJHZvztkkSN3g8vW3gVK3xNl2Pdxbf82SBT2VIhfb
sZsCgU4o+y3h0M5wpHuTJTmYkF2BJuy8TgMTrsMAXSNCJUleCUkwNJlI3oJ5tUJN
E9xnF2Ul2Sb6OtYsCTLna4StVJoKSnbnK9vdE89TOuTtWotwLGgwL7erGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ5ogrshju0HRnXdiv0EiAg9xa2MB8GA1UdIwQY
MBaAFOOzWVakA4oJOMzahVkq1THkqIOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmIt
MDdhZTY4MmMxMjYyLzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmItMDdhZTY4MmMxMjYy
LzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIhiPbkC
QVUA8q9sZDUElymxINowQPhU4CA/cyYiL5c4cL8e5JBvPDO6I/PMLH40yGcJJiPc
fMVMqsc/2UD32Thoh7OzhBSQ+QaD2UbMRmK4VI11wv7OxqHww1Vm8R0VMmpvZNkE
AfctqdS2aulgvT153g44YEVx19fUgiM4b9q5AgC803MRoWl/Yz6K36taF0MYNAAc
dfQDeYdp5LeLxsq8aMTuYQjDX1Y9xkibOW47XT2SGKV3I78qqq8t/S4b7CmrvyBf
5yr/j9/U2OZzoCAARe2AzsQYFyq+JU8fboejxaPmv5Gz6q71nSJr7cJYJhRrk88o
EVt9kPv7lIMoFw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:32 2026 by rpki-client