Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          xBtw1vybt45qBV+NWkSnj4ZU/7JI13XEiNWYd/zeRoo=
Subject key identifier:   08:03:2D:25:E7:F7:47:B5:3F:E9:1B:B6:2E:2B:A7:BC:8C:1A:EA:70
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       019F90C829F5846A9A77B652EEF8E5DA4032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          19D5
Signing time:             Thu 23 Jul 2026 21:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:04 +0000
Files and hashes:         1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=)
                          2: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=)
                          3: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=)
                          4: ZTlU03e2qt__TpF-io4-AEKUOrU.roa (hash: Zw2bD+qyXYZT0vDGotQc/HMnILry5JdGYie/nLyOu5Q=)
                          5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 9Vj2hKutfoB4alHe6b0NX9bbE4HohGvEfiubCjEzPHU=)
                          6: q22VxMdSRIy60hnXGH9ZkvEl-VU.roa (hash: zg/MJ8qfVOHy4J7FHOIGJgHJYpom3/1tICP7KNToxU8=)
                          7: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:29:f5:84:6a:9a:77:b6:52:ee:f8:e5:da:40:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: Jul 23 21:01:04 2026 GMT
            Not After : Jul 24 21:01:04 2026 GMT
        Subject: CN=08032d25e7f747b53fe91bb62e2ba7bc8c1aea70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:b4:e6:64:64:ac:0b:38:17:32:ad:c0:ff:
                    7a:af:03:17:2a:08:b9:d7:c1:07:6b:64:c7:ec:46:
                    2d:f7:e5:0e:43:e6:9b:0f:88:43:ba:32:66:b5:ed:
                    bc:5d:9a:1d:08:4f:8b:80:b7:14:cc:52:74:e8:13:
                    42:d5:09:2e:3f:c6:e7:3b:73:26:d9:d6:5b:da:9d:
                    3c:b2:b0:80:da:ce:0d:9d:e1:00:f0:94:59:7c:85:
                    6c:8d:2e:5a:1d:f7:29:94:c4:0f:e4:d9:90:e0:67:
                    98:c3:38:09:24:ea:7d:3e:26:6c:34:d2:d8:4a:75:
                    86:ad:6c:b8:ef:33:e8:9a:28:69:be:78:d7:ef:78:
                    b1:48:e1:9f:a8:f4:59:4b:b2:be:29:35:b9:33:aa:
                    bf:7a:29:52:22:ee:61:34:4a:31:ff:ac:6a:16:41:
                    b0:01:1d:8d:d4:c1:46:97:9b:f1:44:2d:74:05:d0:
                    65:33:11:42:76:75:57:92:3a:6e:4b:fa:3a:f6:36:
                    27:01:24:20:06:5a:58:a6:8d:00:ff:0e:30:f8:29:
                    a1:9b:f5:c3:cc:f1:97:96:bf:8a:9d:6f:0e:3a:74:
                    7f:9c:46:32:f6:77:e8:f3:c6:77:c0:c6:1a:9b:43:
                    b5:18:46:69:16:b8:58:f5:b9:b3:7a:39:51:da:3b:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:03:2D:25:E7:F7:47:B5:3F:E9:1B:B6:2E:2B:A7:BC:8C:1A:EA:70
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8c:cd:43:cf:3c:34:57:0c:0b:34:30:c7:c2:99:c9:42:ec:
         89:0b:2b:45:53:9f:16:16:62:31:e0:d4:f1:1b:05:cc:1d:6f:
         b6:03:80:0c:eb:9c:31:77:a5:41:17:6d:98:b4:de:90:21:e0:
         05:b1:d3:60:06:08:1a:49:e2:86:c0:49:5b:71:0e:67:4a:84:
         93:6b:37:6e:18:e4:e9:ad:f5:08:74:da:de:b5:f5:7b:0d:c5:
         64:53:b2:ca:eb:00:b7:5f:ee:b8:29:db:38:61:76:fc:9a:38:
         1f:62:bf:45:d0:ff:f1:88:28:88:d0:26:13:13:5b:82:3f:d9:
         4a:50:26:02:48:ed:d9:03:5f:07:4e:62:04:70:c3:c8:a9:cd:
         cf:d4:de:dc:3a:a5:52:ef:80:30:66:9b:4d:c2:c8:65:65:7c:
         fd:ea:84:da:36:1e:7a:a7:af:d1:b2:d8:08:2a:2b:23:48:ca:
         f6:8b:9d:aa:af:5f:8a:45:6f:d0:cb:e3:6a:db:38:7f:67:80:
         b7:0c:49:75:df:a3:3a:12:60:57:96:29:75:81:32:11:30:e6:
         97:c6:1d:ce:c4:26:6f:4a:e4:45:2b:82:5f:dd:db:40:31:7f:
         04:8a:36:cc:95:dd:dc:7b:af:63:db:8b:f8:03:98:60:9f:86:
         ca:ab:f9:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyCn1hGqad7ZS7vjl2kAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjYwNzIzMjEwMTA0WhcNMjYwNzI0MjEwMTA0WjAzMTEwLwYDVQQD
EygwODAzMmQyNWU3Zjc0N2I1M2ZlOTFiYjYyZTJiYTdiYzhjMWFlYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/e05mRkrAs4FzKtwP96rwMXKgi5
18EHa2TH7EYt9+UOQ+abD4hDujJmte28XZodCE+LgLcUzFJ06BNC1QkuP8bnO3Mm
2dZb2p08srCA2s4NneEA8JRZfIVsjS5aHfcplMQP5NmQ4GeYwzgJJOp9PiZsNNLY
SnWGrWy47zPomihpvnjX73ixSOGfqPRZS7K+KTW5M6q/eilSIu5hNEox/6xqFkGw
AR2N1MFGl5vxRC10BdBlMxFCdnVXkjpuS/o69jYnASQgBlpYpo0A/w4w+Cmhm/XD
zPGXlr+KnW8OOnR/nEYy9nfo88Z3wMYam0O1GEZpFrhY9bmzejlR2jvRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgDLSXn90e1P+kbti4rp7yMGupwMB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYzNQ888
NFcMCzQwx8KZyULsiQsrRVOfFhZiMeDU8RsFzB1vtgOADOucMXelQRdtmLTekCHg
BbHTYAYIGknihsBJW3EOZ0qEk2s3bhjk6a31CHTa3rX1ew3FZFOyyusAt1/uuCnb
OGF2/Jo4H2K/RdD/8YgoiNAmExNbgj/ZSlAmAkjt2QNfB05iBHDDyKnNz9Te3Dql
Uu+AMGabTcLIZWV8/eqE2jYeeqev0bLYCCorI0jK9oudqq9fikVv0Mvjats4f2eA
twxJdd+jOhJgV5YpdYEyETDml8YdzsQmb0rkRSuCX93bQDF/BIo2zJXd3HuvY9uL
+AOYYJ+Gyqv5fQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:25 2026 by rpki-client