Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File:                     NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier:          2u428BbNnjx/TTGZdrkH7FhHaKQmY1RJbDdDjVILXek=
Subject key identifier:   14:AE:68:64:57:55:03:42:AD:A5:5D:9A:1F:34:8F:F7:B4:4A:5F:3C
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer:       /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial:       019E1CEBEF0CFB2630E1B89D3B6C65F359B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number:          0F47
Signing time:             Tue 12 May 2026 16:01:24 +0000
Manifest this update:     Tue 12 May 2026 16:01:24 +0000
Manifest next update:     Wed 13 May 2026 16:01:24 +0000
Files and hashes:         1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: MFW7y04GPI/OzFnllSJmXK5lISH6Cxiek7wo3fxNXCg=)
                          2: aGJMNViunI3sW8LPBTbWuO2JMU4.asa (hash: IYFle/3hjx48l13pLg/VjqdcHmOV1LkxhQSSbNvNDQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:ef:0c:fb:26:30:e1:b8:9d:3b:6c:65:f3:59:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
        Validity
            Not Before: May 12 16:01:24 2026 GMT
            Not After : May 13 16:01:24 2026 GMT
        Subject: CN=14ae686457550342ada55d9a1f348ff7b44a5f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:f5:1a:17:81:d4:19:eb:90:23:49:a4:38:
                    15:59:15:75:d1:b9:3e:ad:60:96:a4:26:c9:00:56:
                    da:d7:84:c3:60:50:e8:62:6f:0a:00:32:fc:b6:39:
                    36:90:e2:19:32:e5:f2:53:93:a1:6e:de:99:b5:ff:
                    09:50:7b:df:00:fa:59:91:3a:7f:e4:80:9e:ba:5a:
                    1c:93:3a:d7:7d:6b:99:96:54:a4:35:19:c1:d7:a2:
                    82:d7:93:fb:98:27:b0:58:5f:46:c8:52:96:c8:1a:
                    74:dc:15:10:5e:a5:31:17:63:71:36:4f:73:9f:fd:
                    ef:dc:72:a1:55:dc:ef:34:89:52:c3:15:8b:0a:7b:
                    84:e2:62:a0:eb:fa:86:cd:bc:06:1a:3a:71:5f:bc:
                    4d:e5:f1:d4:ce:0c:9d:52:5f:f1:c6:46:62:bf:c7:
                    00:58:3d:1d:89:fd:24:a7:65:50:3c:79:2e:f0:78:
                    e4:2d:0b:d2:a3:64:5d:bb:43:fa:a3:e3:9c:72:96:
                    ab:d2:24:87:39:7c:61:2c:6a:7c:33:f7:fd:36:e3:
                    9d:7d:a5:18:fe:12:ed:27:27:7d:8e:ca:75:bd:9c:
                    5a:b7:b5:fb:c4:f5:db:58:35:eb:b9:34:30:ce:82:
                    5e:90:1c:f4:2a:31:65:e7:01:4e:e8:36:3f:dd:28:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AE:68:64:57:55:03:42:AD:A5:5D:9A:1F:34:8F:F7:B4:4A:5F:3C
            X509v3 Authority Key Identifier:
                keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c5:cf:01:ac:0a:6b:5e:42:0d:dd:8d:96:13:6f:62:f2:84:
         ee:31:52:ae:9d:a7:3b:10:cd:6d:20:93:54:a1:6e:fa:f9:5d:
         cd:13:10:c6:fa:43:94:9f:2a:c6:ab:69:63:1c:a1:b2:5b:c8:
         de:a2:b1:1d:88:e5:87:e5:fa:1e:5d:42:9a:20:80:f9:06:40:
         e9:9e:1a:45:72:15:3c:ed:6e:c2:ba:eb:61:8d:ea:a8:81:f0:
         9e:00:72:11:10:08:12:7a:ab:67:a5:1b:cf:e8:da:91:b2:74:
         8b:f0:b4:08:10:32:dc:a9:9b:c4:ae:1d:44:d9:1f:43:94:54:
         ab:83:d5:ae:9e:3a:1b:36:3e:66:af:6c:46:ee:10:eb:51:fa:
         d1:22:f1:8a:0f:97:e6:57:de:f4:2e:08:e1:38:41:fe:ab:0f:
         30:0a:c7:7a:d3:a7:e8:b1:35:df:d1:bb:9e:37:d9:77:f6:ed:
         9d:ff:91:d5:69:cc:29:ba:c9:10:00:98:b3:d3:f7:5e:bd:20:
         88:16:df:7a:30:d4:2f:44:8b:ad:24:71:f3:0d:8a:66:29:90:
         de:42:6b:02:83:65:0a:e8:7e:ff:22:df:f0:52:69:e7:b7:e2:
         ab:df:b8:9e:79:38:34:6f:82:43:d8:61:7b:57:2f:b5:7e:a1:
         1d:73:f2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6+8M+yYw4bidO2xl81mwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2M4MDJiZTZiNGM0MDEwYzc2Y2U4ZTQ4NGU0ZGU3ZjU1
NDdiMmYwHhcNMjYwNTEyMTYwMTI0WhcNMjYwNTEzMTYwMTI0WjAzMTEwLwYDVQQD
EygxNGFlNjg2NDU3NTUwMzQyYWRhNTVkOWExZjM0OGZmN2I0NGE1ZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZz1GheB1BnrkCNJpDgVWRV10bk+
rWCWpCbJAFba14TDYFDoYm8KADL8tjk2kOIZMuXyU5Ohbt6Ztf8JUHvfAPpZkTp/
5ICeulockzrXfWuZllSkNRnB16KC15P7mCewWF9GyFKWyBp03BUQXqUxF2NxNk9z
n/3v3HKhVdzvNIlSwxWLCnuE4mKg6/qGzbwGGjpxX7xN5fHUzgydUl/xxkZiv8cA
WD0dif0kp2VQPHku8HjkLQvSo2Rdu0P6o+Occpar0iSHOXxhLGp8M/f9NuOdfaUY
/hLtJyd9jsp1vZxat7X7xPXbWDXruTQwzoJekBz0KjFl5wFO6DY/3SiP9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSuaGRXVQNCraVdmh80j/e0Sl88MB8GA1UdIwQY
MBaAFDbMgCvmtMQBDHbOjkhOTef1VHsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMt
OGFiYTg1Y2JkODE4LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMtOGFiYTg1Y2JkODE4
LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsXPAawK
a15CDd2NlhNvYvKE7jFSrp2nOxDNbSCTVKFu+vldzRMQxvpDlJ8qxqtpYxyhslvI
3qKxHYjlh+X6Hl1CmiCA+QZA6Z4aRXIVPO1uwrrrYY3qqIHwngByERAIEnqrZ6Ub
z+jakbJ0i/C0CBAy3KmbxK4dRNkfQ5RUq4PVrp46GzY+Zq9sRu4Q61H60SLxig+X
5lfe9C4I4ThB/qsPMArHetOn6LE139G7njfZd/btnf+R1WnMKbrJEACYs9P3Xr0g
iBbfejDUL0SLrSRx8w2KZimQ3kJrAoNlCuh+/yLf8FJp57fiq9+4nnk4NG+CQ9hh
e1cvtX6hHXPyvQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:21 2026 by rpki-client