Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File:                     8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier:          NPSAP8Z45fEsJlLRjvXO+2SbursozUo+N4swsxRWkrU=
Subject key identifier:   33:74:36:66:8B:F4:24:DE:D3:F7:4D:7D:07:38:C0:81:A9:82:BA:4A
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer:       /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial:       019FAABEBD65B9A13EEB58FD0ACBA4D659E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number:          13D2
Signing time:             Tue 28 Jul 2026 22:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:54 +0000
Files and hashes:         1: 07j9_n6AVXDopfWR8BaInw48NMc.roa (hash: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM=)
                          2: 2agacPd_HSeo5iWC2CnXaC2xZe8.roa (hash: YHI/nftFWmJRoE6pDGv7uv3rVMoTsI26akPX3i6AVgc=)
                          3: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (hash: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc=)
                          4: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: H9G0ie4qSj28PQqN0263O0iHClorMqsJ8+lQQc6+Bog=)
                          5: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (hash: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c=)
                          6: eB4uOT6yIJ90-7WQMq3rRaWige0.roa (hash: 0bN90UYrI/jqLeHoVlUJEcwKG5W/ZPrQB/kL7FwjFBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:bd:65:b9:a1:3e:eb:58:fd:0a:cb:a4:d6:59:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
        Validity
            Not Before: Jul 28 22:00:54 2026 GMT
            Not After : Jul 29 22:00:54 2026 GMT
        Subject: CN=337436668bf424ded3f74d7d0738c081a982ba4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:3e:ef:e6:71:11:b2:62:67:67:35:dc:4a:
                    7f:c2:cd:b4:8f:74:0d:3d:3e:c0:b5:ed:06:84:b2:
                    f9:73:cc:14:33:7b:ec:52:d7:eb:5b:36:b6:7d:2f:
                    3b:d0:e7:f4:a1:25:78:e9:48:7b:d9:41:dd:21:ac:
                    c3:dc:b1:ac:61:57:0e:02:62:f8:33:14:c4:6a:ca:
                    3f:98:0a:9e:05:b2:c7:49:d7:fc:3d:8b:ab:24:a9:
                    dc:0b:e7:3f:92:84:81:f8:9d:d4:3c:8c:88:83:15:
                    04:df:e9:52:bb:8a:59:ca:b3:ae:bb:6c:16:1d:6c:
                    28:50:68:d9:e2:1a:c5:12:99:70:d2:ed:4f:df:c9:
                    cf:dd:d3:6a:9b:15:0d:93:98:70:b5:49:60:a3:a9:
                    a9:3d:cc:93:11:2b:29:c5:7e:66:1a:51:a7:53:a6:
                    64:6e:7a:d1:31:e8:51:d2:ca:5c:79:88:e6:3a:90:
                    99:b4:bd:71:1c:fd:9f:c3:80:a1:d0:6b:60:4c:fc:
                    f0:79:d6:06:aa:51:69:24:d5:22:18:a2:15:96:e9:
                    48:71:83:fa:52:dc:94:c2:db:7f:11:0e:d5:fa:f9:
                    f6:7e:60:29:5e:89:a7:43:18:49:b2:a2:8f:da:30:
                    2b:e9:95:9a:e5:e1:5b:0a:01:36:9f:a0:29:78:08:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:74:36:66:8B:F4:24:DE:D3:F7:4D:7D:07:38:C0:81:A9:82:BA:4A
            X509v3 Authority Key Identifier:
                keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:49:45:28:22:c6:47:8d:dc:61:8c:cd:f6:3d:12:67:3f:e0:
         ce:f1:ce:7b:4b:33:e5:81:54:c2:0b:4f:83:07:86:0d:02:0f:
         3e:f2:5b:8c:de:2a:3d:7c:3b:6a:31:8b:3c:dd:5d:6c:13:56:
         15:f7:76:db:7a:9a:1e:74:be:27:83:69:6a:62:10:c2:f9:0b:
         58:b5:c0:99:6e:00:83:63:3f:9d:9d:fc:f0:8b:e8:e6:50:14:
         68:3b:3e:dd:70:f5:f6:7b:69:a8:f6:6f:79:30:ad:f9:e9:bc:
         f3:c3:9b:08:7e:75:ce:f1:f4:8f:7f:d4:fe:46:75:10:a4:65:
         02:c1:9e:6e:1a:8b:85:7f:82:0d:b2:b4:65:e6:0b:72:cd:3f:
         a3:d5:13:26:d4:4a:77:fc:7d:b1:49:a0:bd:4e:55:2a:57:0f:
         f5:ca:6a:a3:07:4f:98:54:b0:02:be:27:c3:b1:eb:dd:4a:05:
         19:13:37:44:8a:39:b0:d5:77:79:8c:3d:00:8f:dc:6e:f5:d1:
         86:56:da:f9:2e:88:dd:b6:be:04:6c:6c:e3:c9:e9:61:e9:52:
         b4:2d:53:5a:ba:78:96:55:fc:d6:b9:6b:db:60:d5:a8:76:02:
         33:4e:87:ff:f2:6a:e7:1d:53:9b:d5:fd:34:a2:78:bb:f6:d8:
         4f:23:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:56 2026 by rpki-client