Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File:                     N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier:          UXyqGDT1jZH2VUrLr8V23G1KxK3r+Jx+gzbjOfIqiuw=
Subject key identifier:   E0:89:C4:56:7D:81:8B:CA:08:5E:22:21:BA:CF:19:2C:26:BA:52:CD
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer:       /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial:       019FAB6369003B246C7EC4E0F44316205FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number:          0994
Signing time:             Wed 29 Jul 2026 01:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:46 +0000
Files and hashes:         1: MwkMvskaQKovGIGmNj_lfd4XdPQ.roa (hash: gLPPmCzBA8LuL7uxWhDAFr4CxN8OOAgFXJiuqMmefYs=)
                          2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: DJ4robW6nz7O4kzuIC5HEOQ2M1DXgBABSw3WFym3HXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:69:00:3b:24:6c:7e:c4:e0:f4:43:16:20:5f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
        Validity
            Not Before: Jul 29 01:00:46 2026 GMT
            Not After : Jul 30 01:00:46 2026 GMT
        Subject: CN=e089c4567d818bca085e2221bacf192c26ba52cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:76:72:8c:4f:c2:06:96:d4:6c:43:52:57:
                    fb:13:0e:1c:9b:3d:bc:29:05:74:81:e2:bd:01:1d:
                    a4:9e:14:98:14:c0:71:52:3e:a0:68:ba:55:29:47:
                    d6:ec:fc:b3:73:fa:c1:02:ae:8d:99:ed:6d:0e:73:
                    f9:f6:88:65:10:af:70:00:1f:6e:47:e4:a7:b7:06:
                    c3:d7:71:22:24:38:00:27:7d:86:50:db:9b:7f:46:
                    79:ac:3d:a0:b3:31:e3:c6:eb:45:89:f3:a3:20:3c:
                    8b:a5:5e:67:47:3b:86:ad:2d:4c:e4:79:e9:d8:92:
                    d6:c5:99:87:c8:8d:c2:67:60:a8:fc:e7:6e:72:27:
                    b0:30:cf:8e:5a:18:a5:50:ba:bc:d6:f4:1d:14:b3:
                    6d:2a:ca:31:27:17:76:b8:31:76:78:36:76:b4:0f:
                    49:c8:c4:9b:bf:51:6c:74:5f:e5:22:53:de:72:de:
                    8b:ba:b8:55:d7:56:ec:12:31:e8:8b:0d:e8:70:cc:
                    ed:da:e6:c2:ae:97:4e:bd:75:4c:35:c3:0b:ad:e5:
                    9d:a1:7b:dd:61:de:d9:59:07:f9:d6:b1:28:57:e5:
                    0f:ea:be:44:a7:f9:22:64:30:95:6c:cc:b9:95:a5:
                    14:1b:b0:aa:95:d1:1f:3d:1c:c0:4e:04:d2:e7:36:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:89:C4:56:7D:81:8B:CA:08:5E:22:21:BA:CF:19:2C:26:BA:52:CD
            X509v3 Authority Key Identifier:
                keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4a:b6:d9:34:5f:5b:6b:08:56:d8:1a:96:9a:06:c9:6d:ad:
         40:8a:5e:bb:29:a4:8d:08:46:64:53:73:b1:a2:94:58:27:df:
         ac:79:bf:d8:4a:bc:1a:2c:04:da:0f:d3:fe:48:31:73:b8:05:
         15:87:6c:8f:45:55:fc:9a:65:a2:c8:4d:9c:29:1c:ed:b2:c7:
         94:a8:8b:08:8a:56:c3:f9:7e:ad:28:32:4e:69:cc:ec:67:ea:
         91:17:3e:b5:f5:a5:8e:80:79:42:ff:8b:a8:88:e8:99:a1:05:
         5e:65:04:20:a7:62:fd:c4:62:85:32:27:37:a2:c2:f9:4d:db:
         6c:d0:48:cc:9f:02:46:70:39:93:71:2d:2e:33:25:52:15:7d:
         e7:33:da:3b:6f:af:9e:d7:9b:16:2f:ce:17:5c:47:4d:da:21:
         49:40:0e:da:35:52:cf:6b:03:4f:c9:c9:01:02:94:2b:d8:47:
         75:54:e0:b8:ce:38:55:e0:fb:7a:10:c3:dd:62:4a:6e:49:ff:
         bb:88:1e:69:cb:86:70:0e:7f:4e:f0:26:8a:4a:67:86:15:61:
         b2:33:3d:c1:1f:b5:70:a2:d4:7d:cb:86:11:92:b7:7c:a6:d4:
         78:3e:6f:67:c1:94:71:ec:ea:36:97:2b:4e:8a:21:6f:bf:94:
         6d:9d:43:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY2kAOyRsfsTg9EMWIF+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGNjMmZmZDc2OWMxOGU1ZTZmMGRmYzlhMGVhNzRmYjNm
OGMxMDgwHhcNMjYwNzI5MDEwMDQ2WhcNMjYwNzMwMDEwMDQ2WjAzMTEwLwYDVQQD
EyhlMDg5YzQ1NjdkODE4YmNhMDg1ZTIyMjFiYWNmMTkyYzI2YmE1MmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLJ2coxPwgaW1GxDUlf7Ew4cmz28
KQV0geK9AR2knhSYFMBxUj6gaLpVKUfW7Pyzc/rBAq6Nme1tDnP59ohlEK9wAB9u
R+SntwbD13EiJDgAJ32GUNubf0Z5rD2gszHjxutFifOjIDyLpV5nRzuGrS1M5Hnp
2JLWxZmHyI3CZ2Co/OduciewMM+OWhilULq81vQdFLNtKsoxJxd2uDF2eDZ2tA9J
yMSbv1FsdF/lIlPect6LurhV11bsEjHoiw3ocMzt2ubCrpdOvXVMNcMLreWdoXvd
Yd7ZWQf51rEoV+UP6r5Ep/kiZDCVbMy5laUUG7CqldEfPRzATgTS5zZRDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCJxFZ9gYvKCF4iIbrPGSwmulLNMB8GA1UdIwQY
MBaAFDdMwv/XacGOXm8N/JoOp0+z+MEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUt
MjY4MDZlYzM1YzIwLzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUtMjY4MDZlYzM1YzIw
LzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkq22TRf
W2sIVtgalpoGyW2tQIpeuymkjQhGZFNzsaKUWCffrHm/2Eq8GiwE2g/T/kgxc7gF
FYdsj0VV/JploshNnCkc7bLHlKiLCIpWw/l+rSgyTmnM7GfqkRc+tfWljoB5Qv+L
qIjomaEFXmUEIKdi/cRihTInN6LC+U3bbNBIzJ8CRnA5k3EtLjMlUhV95zPaO2+v
ntebFi/OF1xHTdohSUAO2jVSz2sDT8nJAQKUK9hHdVTguM44VeD7ehDD3WJKbkn/
u4geacuGcA5/TvAmikpnhhVhsjM9wR+1cKLUfcuGEZK3fKbUeD5vZ8GUcezqNpcr
Toohb7+UbZ1DVg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:46 2026 by rpki-client