Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          dqYftS2xrgKCYck8f46ocPlPAidWIUmuqrbYLes7ouw=
Subject key identifier:   C4:7C:FA:06:D1:E5:8F:AC:F0:21:7A:72:0F:B1:27:15:CB:A8:EF:42
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       019F7287B83F515276B12256779A57C7147C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          0E6D
Signing time:             Sat 18 Jul 2026 00:02:04 +0000
Manifest this update:     Sat 18 Jul 2026 00:02:04 +0000
Manifest next update:     Sun 19 Jul 2026 00:02:04 +0000
Files and hashes:         1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
                          2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
                          3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
                          4: NhKIuR4OHdWiG8iLKoNcTUDlNf4.roa (hash: Ud86cYDDc2XR7qnnT5IZpUuQFid4fW0m2q3yiK3R9Lw=)
                          5: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: NRdKWABT+i4FGfS/ihe2QHFodlLSIDG1oBSLo06KmxM=)
                          6: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
                          7: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
                          8: lqu9J-KJckp6jyEEt-Zbg_-fI_E.roa (hash: HNOjtdMCjOQq5KpkxM6f9zZ++Oz9wldgsWE/zI3Ktao=)
                          9: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:87:b8:3f:51:52:76:b1:22:56:77:9a:57:c7:14:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: Jul 18 00:02:04 2026 GMT
            Not After : Jul 19 00:02:04 2026 GMT
        Subject: CN=c47cfa06d1e58facf0217a720fb12715cba8ef42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:91:17:bf:71:07:da:3d:22:b2:00:d3:a8:
                    3f:6b:58:ae:90:ec:55:9b:b7:97:53:59:41:45:a7:
                    d0:52:75:9b:22:43:da:bf:91:ee:ab:48:65:e3:a0:
                    75:7d:97:f5:00:99:7f:56:2e:e4:c0:ff:d4:a4:32:
                    01:19:23:ae:00:dd:d4:c9:32:f4:85:2d:36:9d:cf:
                    53:16:68:1d:8d:e8:f4:be:5e:6d:a3:4f:1a:25:ed:
                    25:4f:68:66:c1:19:6f:a1:c9:81:9f:a4:65:d4:23:
                    43:3f:6a:21:eb:e6:16:14:ac:f2:a0:39:ba:2b:d3:
                    eb:af:6c:e8:dc:fd:88:e0:57:9e:d9:11:ba:34:ce:
                    02:11:86:b0:96:8a:44:91:92:1a:3c:38:3f:22:c7:
                    4b:b2:1b:37:71:26:6b:fe:ce:ae:d7:03:a9:f5:dd:
                    4f:78:42:aa:ed:7e:f4:cc:fc:33:17:a1:52:69:98:
                    26:9c:0d:cf:a7:98:f8:b0:30:ab:5f:3f:d3:65:69:
                    2a:5d:96:4f:be:e1:86:06:8c:dc:12:b4:59:17:f6:
                    89:3d:27:5d:ec:98:0e:3d:8b:3a:40:eb:e9:0d:4e:
                    22:41:55:6d:04:71:d5:6a:a5:df:4d:45:a6:d3:a0:
                    85:a7:97:5a:61:30:63:83:97:45:8c:85:9e:79:60:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7C:FA:06:D1:E5:8F:AC:F0:21:7A:72:0F:B1:27:15:CB:A8:EF:42
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:15:81:7e:75:2a:c7:be:38:e0:9c:67:30:81:b9:34:92:54:
         cc:8a:0f:74:95:26:de:a7:29:52:54:9c:e4:f4:87:15:3c:80:
         94:3c:74:d0:34:be:52:f5:88:32:de:b0:5d:73:82:be:1d:53:
         b7:b3:70:b7:28:c7:b9:16:c8:c2:48:72:d3:f3:1c:7b:4c:b2:
         0b:bb:3f:04:dd:ce:39:b1:c2:58:dd:de:c9:11:cf:ad:de:ae:
         92:1d:d0:8e:e5:7d:ce:cc:d2:7e:46:65:bc:13:fd:4c:f9:ed:
         1d:b4:f0:d8:55:d2:42:37:4e:e8:d5:19:9a:34:1f:71:0a:e5:
         7c:2d:e2:50:07:94:10:c6:a3:04:bf:fd:2d:db:21:ab:3b:ba:
         46:51:43:db:a2:dc:ca:03:b4:fc:37:5d:42:83:0f:fa:ae:13:
         81:5e:f8:0f:9b:f7:2c:e8:ba:37:03:9c:13:14:e1:dc:f0:b0:
         2a:7b:8e:f2:52:a9:13:4d:4b:e4:5f:c3:92:2d:75:dc:4a:c1:
         0c:fe:08:30:22:94:d9:56:9b:24:20:7d:ee:56:dd:38:7d:a9:
         d0:be:18:72:ab:b5:45:55:4e:81:09:44:e9:94:84:96:d1:98:
         ef:4f:97:79:9b:ca:91:a2:80:28:a1:94:a3:a6:95:8e:83:0d:
         99:69:1b:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9yh7g/UVJ2sSJWd5pXxxR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjYwNzE4MDAwMjA0WhcNMjYwNzE5MDAwMjA0WjAzMTEwLwYDVQQD
EyhjNDdjZmEwNmQxZTU4ZmFjZjAyMTdhNzIwZmIxMjcxNWNiYThlZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx92RF79xB9o9IrIA06g/a1iukOxV
m7eXU1lBRafQUnWbIkPav5Huq0hl46B1fZf1AJl/Vi7kwP/UpDIBGSOuAN3UyTL0
hS02nc9TFmgdjej0vl5to08aJe0lT2hmwRlvocmBn6Rl1CNDP2oh6+YWFKzyoDm6
K9Prr2zo3P2I4Fee2RG6NM4CEYawlopEkZIaPDg/IsdLshs3cSZr/s6u1wOp9d1P
eEKq7X70zPwzF6FSaZgmnA3Pp5j4sDCrXz/TZWkqXZZPvuGGBozcErRZF/aJPSdd
7JgOPYs6QOvpDU4iQVVtBHHVaqXfTUWm06CFp5daYTBjg5dFjIWeeWAjiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMR8+gbR5Y+s8CF6cg+xJxXLqO9CMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxWBfnUq
x7444JxnMIG5NJJUzIoPdJUm3qcpUlSc5PSHFTyAlDx00DS+UvWIMt6wXXOCvh1T
t7NwtyjHuRbIwkhy0/Mce0yyC7s/BN3OObHCWN3eyRHPrd6ukh3QjuV9zszSfkZl
vBP9TPntHbTw2FXSQjdO6NUZmjQfcQrlfC3iUAeUEMajBL/9Ldshqzu6RlFD26Lc
ygO0/DddQoMP+q4TgV74D5v3LOi6NwOcExTh3PCwKnuO8lKpE01L5F/Dki113ErB
DP4IMCKU2VabJCB97lbdOH2p0L4Ycqu1RVVOgQlE6ZSEltGY70+XeZvKkaKAKKGU
o6aVjoMNmWkbmA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:16:21 2026 by rpki-client