Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File:                     ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier:          p7q3bN5GFsaKYN9W6BGqhL9mks+x4msUakskh6LCBDk=
Subject key identifier:   13:1F:FA:D6:85:62:49:02:B4:C4:8F:6F:A8:45:76:60:67:03:9E:7C
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer:       /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial:       019FAB637D424CD7212D2D526A8C7B11CE6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number:          019B
Signing time:             Wed 29 Jul 2026 01:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:51 +0000
Files and hashes:         1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
                          2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: noFo8sgEqfn/8gVRB0bF0TDkKrrW6AZRCKi42+w912w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:7d:42:4c:d7:21:2d:2d:52:6a:8c:7b:11:ce:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
        Validity
            Not Before: Jul 29 01:00:51 2026 GMT
            Not After : Jul 30 01:00:51 2026 GMT
        Subject: CN=131ffad685624902b4c48f6fa845766067039e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:98:62:19:5c:27:27:0a:0a:00:14:d5:a4:
                    1d:6d:d6:fc:1c:ef:9b:a9:ec:c4:bf:dd:26:74:2c:
                    61:c3:13:29:a7:e6:24:40:81:69:5b:06:0c:a1:9e:
                    32:dc:f8:8a:e4:58:8c:6e:ac:19:4f:77:25:fe:8e:
                    b3:a2:fd:78:40:db:2b:90:9e:08:ac:e2:1e:fe:94:
                    3c:36:ee:89:8f:3d:0c:ba:3f:39:1d:d2:88:b8:a3:
                    50:44:9a:a6:b3:c6:d0:f6:80:e1:e1:08:c5:b3:23:
                    21:6a:5e:bb:6e:79:0b:c3:7a:cb:b4:43:ca:c2:45:
                    c1:14:ae:1b:ce:95:c6:f2:d2:3f:1e:f3:2f:69:7f:
                    0d:1f:ed:c6:26:9e:f5:74:c3:cd:36:59:02:5d:6a:
                    b8:85:d4:b2:85:2a:3a:a0:ea:e3:96:a9:83:45:a6:
                    02:1c:b7:a9:cc:6b:e0:24:57:65:c3:ec:fa:e0:18:
                    5a:68:73:ec:80:b5:ec:97:0a:53:32:16:c9:44:64:
                    05:89:13:83:63:17:2a:d9:8b:ab:8a:05:8c:58:06:
                    67:d3:9f:91:20:f0:d3:e9:a4:c7:90:ab:77:14:4b:
                    90:66:07:8e:ff:3f:7c:a5:ad:35:b9:1a:21:66:c1:
                    73:8f:6f:b4:6d:73:d7:8e:54:a1:35:05:11:6d:aa:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1F:FA:D6:85:62:49:02:B4:C4:8F:6F:A8:45:76:60:67:03:9E:7C
            X509v3 Authority Key Identifier:
                keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4c:0e:af:6e:20:4f:54:fd:38:39:a5:ef:5a:8d:4e:b8:93:
         e7:ea:e8:bb:10:4d:fb:64:77:ab:99:30:e0:e7:a5:0c:fe:39:
         da:09:ce:41:45:fa:4a:16:a7:45:96:b8:47:1a:9d:32:34:bb:
         6e:66:05:78:c4:9f:44:6e:f8:94:b4:bf:db:c7:8c:76:e9:1e:
         61:f0:b5:2c:41:f7:03:56:0a:2f:e6:d0:3e:f5:69:d6:bf:98:
         f3:3c:5c:0d:17:30:b1:e7:c3:d8:d3:94:45:d0:c8:11:3f:77:
         b1:3f:45:cf:42:2f:3b:19:4b:a9:38:22:21:c9:a2:63:59:3c:
         ad:0e:a8:1b:6c:f3:8c:ab:2a:8e:a1:9d:ce:b1:8a:9e:c1:90:
         8b:10:26:cf:9a:d3:a8:fa:90:73:2f:bb:4a:be:ea:ca:b1:0f:
         91:41:75:de:67:ce:50:2f:f2:38:18:9f:2d:2a:ce:6d:12:14:
         e2:b0:f3:0a:2b:ea:37:85:c2:f7:81:8c:42:7f:1b:11:33:2a:
         0b:d5:47:2b:2c:b4:c6:e0:39:69:0c:0a:29:3d:4b:6d:e1:37:
         d3:3f:1f:0c:0a:2f:cb:db:3e:8f:70:48:85:ba:76:3d:6c:bf:
         83:eb:46:f9:51:d0:b5:4c:ee:cf:7b:08:ab:dc:fb:a9:d4:d1:
         b5:3c:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:25 2026 by rpki-client