Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          /hYq0NngwAqz1EWOTqu0ECZ6iaAxskZwyFdB7Nv2uuE=
Subject key identifier:   21:1D:7B:A9:42:AA:8B:E5:FD:C6:42:F5:C3:80:C8:80:68:01:16:8D
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019FAAF58AF125C822944BE9460393697213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          0A02
Signing time:             Tue 28 Jul 2026 23:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:46 +0000
Files and hashes:         1: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          2: Otz-lRLGypvf7TIwVms5jHBwxYQ.roa (hash: DTvEpHl+5nUpwx5mYYuodxVy4t8FUL7YR0GMpNyL6AA=)
                          3: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          4: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: uVJDiF/DHKVG58MXcShCcmSYFcYnkMogtg327VGZxLk=)
                          5: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:8a:f1:25:c8:22:94:4b:e9:46:03:93:69:72:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Jul 28 23:00:46 2026 GMT
            Not After : Jul 29 23:00:46 2026 GMT
        Subject: CN=211d7ba942aa8be5fdc642f5c380c8806801168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:2d:f4:b2:f2:18:b0:88:cc:fc:32:4a:1c:
                    00:e7:01:a7:bf:e0:72:6d:dd:c8:54:eb:90:cb:8f:
                    1d:5e:33:05:72:f4:0f:72:2d:2a:5f:47:56:cd:58:
                    89:5a:e6:19:6c:fa:d6:cf:bd:8a:3a:20:8f:2a:71:
                    fb:35:e6:64:7f:e8:a6:80:ed:5a:f7:f2:cf:68:35:
                    14:a6:69:72:3f:1f:f6:2d:7d:25:75:23:87:c0:b5:
                    6f:3e:30:b8:0c:74:19:5f:28:b3:d4:89:42:88:9f:
                    82:0e:97:6c:2e:5f:bc:e1:2c:6d:17:3e:fa:33:50:
                    2e:af:8c:e1:28:ba:08:3b:68:5a:f8:51:53:2d:2c:
                    99:95:97:1e:43:77:9f:a7:02:08:2a:40:de:a5:5c:
                    38:06:54:16:93:6e:25:d2:45:af:fe:f6:a7:9b:22:
                    ed:3d:f2:e3:31:f9:28:58:58:68:13:84:ad:89:31:
                    f6:46:52:63:e4:04:9e:b3:3b:f1:fa:37:29:4d:5e:
                    69:14:83:79:46:12:60:ca:60:b1:33:5f:84:01:e4:
                    0f:41:a2:be:b7:c2:12:c7:13:16:61:dc:19:85:94:
                    c1:95:b9:98:c2:8f:01:2f:f8:0e:5c:9c:7c:79:7a:
                    fe:06:76:6f:89:dd:bf:d4:55:5f:b0:54:b1:91:d3:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:7B:A9:42:AA:8B:E5:FD:C6:42:F5:C3:80:C8:80:68:01:16:8D
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:99:39:75:48:44:6f:0d:c2:96:27:06:cd:22:f6:ca:4c:46:
         a1:52:8d:8a:9b:5a:30:5a:f4:7c:d2:e4:f3:8a:74:fe:09:d6:
         ee:36:3f:3a:f4:4c:a3:99:1a:f5:c6:4a:95:f3:e1:69:45:1c:
         aa:43:60:b1:7f:3a:b0:ef:9d:26:ec:d5:76:c1:0b:5c:af:6d:
         89:e7:7b:0e:d2:14:23:cd:9a:90:56:5b:1e:c4:bd:e2:59:e0:
         d6:59:d3:2a:b9:a4:bb:f5:e1:7e:c6:23:53:b0:1e:09:ca:d5:
         29:60:18:0c:91:28:bc:1a:43:13:36:cb:79:ae:82:b0:19:1f:
         a3:15:b4:a2:ce:af:e2:65:6e:3a:c8:b0:73:62:f7:ef:57:e9:
         87:88:41:d5:22:a9:87:57:95:3c:16:65:c6:3f:fa:ce:be:47:
         41:19:b4:1a:c4:9e:76:d7:f5:5c:54:e0:67:d6:d1:3a:d7:e8:
         01:66:13:c8:45:1b:f8:d1:e3:95:8d:5f:6e:6b:a9:ba:d1:9b:
         df:4e:90:00:6d:cb:9b:a4:94:21:e8:77:35:88:7c:b2:eb:04:
         85:83:37:10:f9:17:ca:11:d9:d3:ba:69:39:5c:04:f3:5c:2e:
         c9:c4:53:89:81:71:57:60:7f:30:67:b6:b2:53:a4:5f:24:af:
         c5:30:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:52:51 2026 by rpki-client