Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          lz82wDkRmYWkXOIpp44SeAgmia5jjkjryfFXWk8jBcc=
Subject key identifier:   04:F8:46:1D:97:6F:93:3D:2B:B7:82:96:6D:47:33:49:11:8D:D6:1C
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       019FAB2C5E9562DBBD67A0B2032FACBCDAEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 00:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:39 +0000
Files and hashes:         1: Jn62z3mXSy1gXL7OU0u8UHUvETk.roa (hash: kRvtxB45lBHtSWkwsN/FFj92E84r6pWGnn92gwu5MRk=)
                          2: ZZTFmfbdMQ6snkjprGV8Heyn37E.roa (hash: lKKyBMRX1vPM6siDs8lqYfEIzSGcaMWz+LcZio2IfVk=)
                          3: ni888ovsC-BTLPerI4QeQ0fgZFE.roa (hash: 7VDMLDKY6Y0XMf/x1rrlPpTjJxlLSO2U8m99nvv5wFc=)
                          4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: l0l+CeOsKk/hn+bGx8Vc/Vmtr/6Am34J1vbZjhxQONc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:5e:95:62:db:bd:67:a0:b2:03:2f:ac:bc:da:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: Jul 29 00:00:39 2026 GMT
            Not After : Jul 30 00:00:39 2026 GMT
        Subject: CN=04f8461d976f933d2bb782966d473349118dd61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:96:ac:53:b9:f7:c1:13:c6:69:0d:aa:5b:
                    fb:1f:cd:55:0c:4a:fb:bf:15:38:68:75:99:22:67:
                    84:f1:64:58:2d:43:00:b7:92:03:29:ac:19:68:69:
                    f2:7f:fa:c7:cb:a6:58:2a:9c:56:75:50:50:ef:65:
                    1d:e5:58:ab:87:e4:5d:4d:af:b6:80:8e:0c:2a:3e:
                    67:f4:e0:51:f5:45:bd:9e:15:36:05:80:c0:37:91:
                    c7:74:38:5c:c4:6b:b2:9a:cd:67:95:78:09:89:87:
                    6d:64:0c:43:09:25:69:26:f5:ea:c9:ec:b5:36:58:
                    79:e1:cd:84:f6:b7:de:b3:2a:b8:f8:d8:aa:9d:d0:
                    d1:75:ac:f1:10:b4:15:5f:e6:8c:23:6a:60:44:03:
                    49:c0:e8:57:ac:d0:d2:fd:fe:cc:56:bd:6e:13:8a:
                    94:8a:e3:40:d6:e5:72:8c:2b:09:15:97:a5:14:4e:
                    69:d9:62:75:0a:2e:3a:b3:e6:e1:a6:96:fb:ed:58:
                    20:b1:2e:a3:55:e8:c0:13:ba:30:b2:2c:48:ae:ed:
                    a6:08:09:25:13:f3:d9:4a:a8:ce:f3:92:27:9f:4c:
                    e8:d0:2a:d6:f4:c1:f6:56:f6:e8:0c:c9:f1:52:80:
                    94:2f:34:a6:3d:9b:37:7f:1b:69:1d:85:ad:c2:62:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:46:1D:97:6F:93:3D:2B:B7:82:96:6D:47:33:49:11:8D:D6:1C
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:26:31:cb:aa:a1:11:4c:af:24:b2:3e:c0:7c:72:6b:b8:
         db:9b:bd:ee:29:b1:29:58:87:59:bb:29:75:96:91:52:89:29:
         f1:58:e9:f9:0d:a5:6d:da:f1:04:2b:41:9f:82:a1:50:03:b0:
         8b:2d:91:63:2d:56:20:b7:10:4c:2e:4f:18:5b:41:a2:ae:66:
         f0:f4:56:c5:94:08:e2:fa:7f:79:1f:f5:57:cd:cf:b6:61:4b:
         27:9c:7c:0a:9a:1f:71:84:88:dc:5c:2e:f9:26:d4:d8:d1:1f:
         81:ab:f2:46:0f:06:99:05:9a:57:b8:8a:67:3d:32:31:82:51:
         43:20:cc:39:df:1f:72:fe:89:fb:69:af:87:33:67:1b:98:fa:
         2e:14:7c:9a:68:7b:e0:04:9f:fd:d9:fd:2f:ba:58:22:76:63:
         54:ec:79:fc:73:5d:20:cc:85:1b:8c:fb:99:82:fc:22:ff:8e:
         26:9d:8c:81:29:4e:20:fb:c8:9b:df:cc:0e:1a:bd:db:a6:ca:
         ee:92:48:b5:5e:bd:a9:37:e1:7a:57:0d:05:a4:73:53:1b:4c:
         a7:68:4a:f0:6b:d0:40:5b:50:1a:f2:85:88:c9:ec:14:e0:47:
         f5:e9:a0:71:5b:f9:25:f9:bf:ea:1e:67:05:34:9b:21:38:88:
         9d:dd:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:42 2026 by rpki-client