Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          qz3UHeU3NO8dph/O9eu2rpNbAx1I9u/ei30y2pCtppU=
Subject key identifier:   DE:DA:71:A7:98:BE:6A:DF:71:00:E2:4E:D8:EE:9C:BD:68:CE:D6:2A
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       019FAED28C0472C5545C3E98DDAFCD17131F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          12B0
Signing time:             Wed 29 Jul 2026 17:01:01 +0000
Manifest this update:     Wed 29 Jul 2026 17:01:01 +0000
Manifest next update:     Thu 30 Jul 2026 17:01:01 +0000
Files and hashes:         1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
                          2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: tpRiyA3J0r4SaXnPxum5jzDnHu4WiU7SKBsqGdmjDGU=)
                          3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:d2:8c:04:72:c5:54:5c:3e:98:dd:af:cd:17:13:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: Jul 29 17:01:01 2026 GMT
            Not After : Jul 30 17:01:01 2026 GMT
        Subject: CN=deda71a798be6adf7100e24ed8ee9cbd68ced62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:20:3d:47:e7:21:5a:7a:13:88:cc:cd:44:
                    31:ac:24:e6:83:6b:89:8f:1d:39:bb:4a:1a:2e:93:
                    d9:fd:eb:9b:51:eb:c4:02:82:2c:dc:3f:32:03:93:
                    68:96:52:b2:00:26:65:31:2e:a5:cb:cc:cd:42:c7:
                    54:c6:1f:9b:47:c8:93:ec:7f:0a:7b:93:9c:e4:22:
                    90:81:d4:e5:e5:17:0b:87:d6:7b:4a:bb:20:63:74:
                    00:11:c4:7b:a7:c4:4a:00:e8:97:43:4e:40:bf:1e:
                    5c:1d:ce:6b:d2:c7:59:98:b4:23:4b:96:27:aa:d9:
                    6a:e1:25:50:a8:ef:8d:e7:f0:03:34:f3:21:75:23:
                    52:77:cf:28:ff:aa:bb:62:2e:38:d9:86:54:8c:1a:
                    a2:33:ce:47:36:12:91:ed:5b:d3:59:00:91:0d:1b:
                    b1:b4:f9:97:7e:0d:aa:00:51:60:87:8d:da:de:af:
                    16:49:01:9f:bc:4c:2a:f7:85:27:a6:f3:07:85:38:
                    cf:78:82:9a:e5:c0:12:38:2d:ee:b3:f9:56:0e:6c:
                    f7:b0:ca:06:b2:b3:f0:b4:df:b2:3b:99:73:ea:58:
                    49:1a:5a:7d:4d:b7:3a:d3:16:85:94:e8:92:f5:56:
                    20:10:90:17:d0:8f:a7:84:3b:64:a7:d3:91:dc:9b:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DA:71:A7:98:BE:6A:DF:71:00:E2:4E:D8:EE:9C:BD:68:CE:D6:2A
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:fd:cc:ea:08:fb:c3:3d:88:90:15:9c:3e:5e:a4:ad:c2:
         59:49:41:fa:14:e6:28:9d:a5:14:b6:1d:ae:d5:55:6e:b0:04:
         69:94:9d:b9:e8:6a:c9:08:f2:70:4f:20:6e:51:e1:56:79:c1:
         ab:35:05:2c:ad:33:db:52:2a:4b:05:1b:5c:ff:b4:9e:ec:57:
         54:dc:fb:a4:f0:a5:c2:3c:9a:15:49:93:1c:06:3c:5a:74:cb:
         1f:4f:0c:29:0d:cd:56:95:25:11:96:4c:13:d4:ad:03:e4:05:
         93:72:fb:03:8c:36:17:47:45:64:6d:a0:eb:ec:0a:13:46:67:
         cc:24:bc:4b:eb:df:3c:21:e4:90:e5:ea:6c:fd:ba:c6:1a:00:
         d0:8c:98:b7:84:88:2b:b4:3c:8a:be:30:ef:3d:b0:68:e6:7e:
         8a:1e:24:e7:11:9f:d6:9c:96:67:6c:5e:1a:cd:bc:d8:37:b4:
         9b:0d:ce:e2:91:72:1c:dd:2e:6e:97:e7:58:31:81:1a:f5:7e:
         bc:4d:9d:ee:46:42:50:9e:3f:2e:f6:90:0e:ae:64:e7:1e:ea:
         3e:b8:71:dc:6e:69:65:78:96:7d:a8:65:1b:ea:14:58:40:7f:
         85:0d:48:c3:fe:d0:e8:2d:0a:e0:85:ec:9c:9f:5b:3b:83:24:
         f3:52:9d:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+u0owEcsVUXD6Y3a/NFxMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzU3MTg1NDcyZjE2ZDUzZWViNjhhMTQwZTM1MTNmYTMx
YzMxZDgwHhcNMjYwNzI5MTcwMTAxWhcNMjYwNzMwMTcwMTAxWjAzMTEwLwYDVQQD
EyhkZWRhNzFhNzk4YmU2YWRmNzEwMGUyNGVkOGVlOWNiZDY4Y2VkNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUkgPUfnIVp6E4jMzUQxrCTmg2uJ
jx05u0oaLpPZ/eubUevEAoIs3D8yA5NollKyACZlMS6ly8zNQsdUxh+bR8iT7H8K
e5Oc5CKQgdTl5RcLh9Z7SrsgY3QAEcR7p8RKAOiXQ05Avx5cHc5r0sdZmLQjS5Yn
qtlq4SVQqO+N5/ADNPMhdSNSd88o/6q7Yi442YZUjBqiM85HNhKR7VvTWQCRDRux
tPmXfg2qAFFgh43a3q8WSQGfvEwq94UnpvMHhTjPeIKa5cASOC3us/lWDmz3sMoG
srPwtN+yO5lz6lhJGlp9Tbc60xaFlOiS9VYgEJAX0I+nhDtkp9OR3JsWQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7acaeYvmrfcQDiTtjunL1oztYqMB8GA1UdIwQY
MBaAFGR1cYVHLxbVPutooUDjUT+jHDHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2Yzct
ODFkMTAwNzNkZWU0LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2YzctODFkMTAwNzNkZWU0
LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFG39zOoI
+8M9iJAVnD5epK3CWUlB+hTmKJ2lFLYdrtVVbrAEaZSduehqyQjycE8gblHhVnnB
qzUFLK0z21IqSwUbXP+0nuxXVNz7pPClwjyaFUmTHAY8WnTLH08MKQ3NVpUlEZZM
E9StA+QFk3L7A4w2F0dFZG2g6+wKE0ZnzCS8S+vfPCHkkOXqbP26xhoA0IyYt4SI
K7Q8ir4w7z2waOZ+ih4k5xGf1pyWZ2xeGs282De0mw3O4pFyHN0ubpfnWDGBGvV+
vE2d7kZCUJ4/LvaQDq5k5x7qPrhx3G5pZXiWfahlG+oUWEB/hQ1Iw/7Q6C0K4IXs
nJ9bO4Mk81KdYA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:46:02 2026 by rpki-client