Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File:                     xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier:          gJn5gYbzK7YH2VSHPbktG+cxddwd0VdBLJNDPuLwcRs=
Subject key identifier:   DA:F0:B7:A7:99:C5:E7:72:5C:82:62:98:FF:06:20:24:6A:4F:05:26
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer:       /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial:       019F9248052B552242ACDFAD7E8EAC8017E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number:          0555
Signing time:             Fri 24 Jul 2026 04:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:21 +0000
Files and hashes:         1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=)
                          2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: buZBzPBLXU9aLGF8FURJsnWJYQbgbpvbRDtrOR6SCPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:05:2b:55:22:42:ac:df:ad:7e:8e:ac:80:17:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
        Validity
            Not Before: Jul 24 04:00:21 2026 GMT
            Not After : Jul 25 04:00:21 2026 GMT
        Subject: CN=daf0b7a799c5e7725c826298ff0620246a4f0526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:da:2b:5c:bd:ca:fe:91:d3:fd:0f:7b:07:
                    40:40:b5:36:d7:3b:01:db:eb:82:5c:e2:31:57:51:
                    a7:bc:4b:5f:2e:bb:ea:09:0a:9b:b2:1a:e2:a3:13:
                    d2:3e:ec:45:9e:b5:da:54:75:e3:50:0e:41:77:10:
                    09:34:0e:cd:df:81:31:b6:ad:37:a3:c4:0a:3b:ca:
                    84:c6:76:a0:dd:d5:86:53:07:2d:40:e0:f1:1f:01:
                    6d:71:9d:57:dd:b5:43:ae:f5:5f:20:5f:20:f3:78:
                    99:9a:8b:a4:69:23:73:d4:91:0b:18:01:fc:cd:b0:
                    2c:88:97:df:fe:d9:0c:5f:b5:97:4f:30:c9:94:58:
                    ac:ef:08:da:98:e4:19:ba:e9:2e:76:99:8d:0e:58:
                    58:27:25:24:56:9a:f8:11:de:86:5c:34:ea:45:3b:
                    8f:a8:e8:db:6e:1b:3e:0f:f2:50:30:29:f8:a0:22:
                    b3:a9:f8:63:a4:75:ab:85:bf:b4:50:ad:a4:e9:d9:
                    92:fe:11:a4:e4:b5:20:80:d5:f9:84:e3:a9:4e:02:
                    98:98:03:ef:88:82:1e:5b:13:66:04:7b:93:e8:2e:
                    5c:13:45:8b:99:91:a4:2a:a0:9f:9e:11:1e:2f:c6:
                    92:a8:f2:30:e1:46:3b:ba:9c:69:01:08:55:03:20:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F0:B7:A7:99:C5:E7:72:5C:82:62:98:FF:06:20:24:6A:4F:05:26
            X509v3 Authority Key Identifier:
                keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:38:5f:f5:88:bd:d7:e6:1a:ac:99:6b:a6:4f:8e:f8:3c:44:
         07:76:19:be:fc:6d:f3:42:c1:88:54:bf:14:b2:c1:fd:fe:27:
         12:66:ec:0a:f3:7a:25:af:de:2b:63:80:6b:2b:f0:d8:00:72:
         59:82:09:8c:04:de:0c:7d:3a:6c:41:c0:8a:6d:a2:14:70:dd:
         69:2e:96:a4:3c:bc:ab:08:7f:aa:df:97:90:2a:d6:ad:f6:4e:
         71:49:d9:26:69:66:21:5d:b2:30:c9:08:db:10:39:19:9e:1e:
         9b:fe:da:ef:7e:e4:6f:07:c7:bf:81:6d:f6:c5:f4:3f:b3:75:
         ca:77:0d:51:c6:82:26:e5:64:d7:d0:d7:66:18:5b:9e:ca:44:
         11:1a:04:44:c7:5e:b5:de:ed:fb:85:b9:26:4f:db:ab:f0:74:
         bb:05:40:54:da:d1:41:3f:fe:52:0c:98:1d:8e:39:b5:45:3b:
         07:e8:4e:c9:20:23:c6:42:54:5f:21:5c:fb:16:d2:10:f0:77:
         f2:cd:29:ac:d5:ea:86:95:5a:b9:01:d3:10:07:f4:3e:dc:9a:
         50:73:12:43:5a:c1:6b:26:10:6f:df:cf:24:45:5b:aa:38:55:
         4a:ba:17:84:80:64:72:97:99:bd:cc:ca:4d:a8:24:4f:13:57:
         23:0d:10:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSAUrVSJCrN+tfo6sgBfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm
YWZlMGMwHhcNMjYwNzI0MDQwMDIxWhcNMjYwNzI1MDQwMDIxWjAzMTEwLwYDVQQD
EyhkYWYwYjdhNzk5YzVlNzcyNWM4MjYyOThmZjA2MjAyNDZhNGYwNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X3aK1y9yv6R0/0PewdAQLU21zsB
2+uCXOIxV1GnvEtfLrvqCQqbshrioxPSPuxFnrXaVHXjUA5BdxAJNA7N34Extq03
o8QKO8qExnag3dWGUwctQODxHwFtcZ1X3bVDrvVfIF8g83iZmoukaSNz1JELGAH8
zbAsiJff/tkMX7WXTzDJlFis7wjamOQZuukudpmNDlhYJyUkVpr4Ed6GXDTqRTuP
qOjbbhs+D/JQMCn4oCKzqfhjpHWrhb+0UK2k6dmS/hGk5LUggNX5hOOpTgKYmAPv
iIIeWxNmBHuT6C5cE0WLmZGkKqCfnhEeL8aSqPIw4UY7upxpAQhVAyBOCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrwt6eZxedyXIJimP8GICRqTwUmMB8GA1UdIwQY
MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt
ZGJkYmUxOTNjOTc0LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0
LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDhf9Yi9
1+YarJlrpk+O+DxEB3YZvvxt80LBiFS/FLLB/f4nEmbsCvN6Ja/eK2OAayvw2ABy
WYIJjATeDH06bEHAim2iFHDdaS6WpDy8qwh/qt+XkCrWrfZOcUnZJmlmIV2yMMkI
2xA5GZ4em/7a737kbwfHv4Ft9sX0P7N1yncNUcaCJuVk19DXZhhbnspEERoERMde
td7t+4W5Jk/bq/B0uwVAVNrRQT/+UgyYHY45tUU7B+hOySAjxkJUXyFc+xbSEPB3
8s0prNXqhpVauQHTEAf0PtyaUHMSQ1rBayYQb9/PJEVbqjhVSroXhIBkcpeZvczK
TagkTxNXIw0Q4w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:23 2026 by rpki-client