Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          li/EttDmdD219i3SCImz8rx7FCtCVEf2TMSOVcGTq6o=
Subject key identifier:   47:5A:BC:F1:60:9A:CE:34:7A:8F:3E:44:3A:67:31:34:FF:67:45:00
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       019FAA50EF2624FE6B086B01D4A9D1D7BA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          19FE
Signing time:             Tue 28 Jul 2026 20:00:58 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:58 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:58 +0000
Files and hashes:         1: AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa (hash: 0umZskah+CEr8ip186+RE27wIFvtLRl5c7E3qXa1bJA=)
                          2: C2VLEg7n0tawM_YjuKM0EwCOIdU.roa (hash: YkJt5/I0ermqnHQNrdy2/02bafN5wEDvzpqYuCqnw2s=)
                          3: ED4SThrzQXYcrC-AEArSen9tJXk.roa (hash: 7Cm2n+7edQ/TSDNLB06WjyawgEuLOZa4VST/mcq8bUM=)
                          4: c39N67bVxmJiemTHJXkT_8LO_Jc.roa (hash: aB4P6VURUO7PJEhrDe97gwqnhvifkhr4AJMJpATFX6E=)
                          5: xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa (hash: Pww3BJWwUmNPj1/iW/aWXYB7NNqY6jVB3VyHrlLqwhA=)
                          6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: En5SQPK5EgTZsoF0tX+lSqpCkSJGWQ3xXhzM/4x6ykY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:ef:26:24:fe:6b:08:6b:01:d4:a9:d1:d7:ba:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: Jul 28 20:00:58 2026 GMT
            Not After : Jul 29 20:00:58 2026 GMT
        Subject: CN=475abcf1609ace347a8f3e443a673134ff674500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:05:03:63:d1:84:fe:93:95:48:b1:29:17:
                    a2:fe:b0:c5:b3:c9:fd:c2:63:07:ee:f2:26:dd:00:
                    79:fc:62:48:66:01:b7:ab:7e:10:ed:83:32:d1:0b:
                    ab:ee:bd:d8:e8:a1:1c:82:28:be:21:07:da:18:51:
                    8d:21:9c:37:41:b2:41:41:69:69:be:b4:c2:10:da:
                    e9:6a:8b:7e:ed:a1:7f:d8:a7:d1:71:bc:64:e4:c6:
                    42:63:22:e2:a1:97:1c:5a:71:04:ca:89:51:49:85:
                    a8:71:8d:a7:c9:0d:ce:e9:91:e4:bf:5c:d8:09:10:
                    41:ac:32:d9:e3:6e:b6:3c:72:25:b4:36:66:c8:1c:
                    94:cf:a8:8e:d6:56:b5:97:64:4f:a9:c1:42:63:48:
                    ce:42:9b:49:ca:63:60:0c:70:78:b5:dc:7f:56:be:
                    41:1a:ef:05:41:60:ad:65:38:19:59:94:81:3c:6b:
                    f5:b8:a1:d9:5c:0c:52:78:3b:cf:38:97:63:f9:17:
                    07:c4:b4:97:6c:ff:3e:88:78:60:fd:14:89:03:38:
                    df:c7:31:eb:d3:a2:58:f2:32:50:47:83:23:f1:40:
                    6e:11:87:d9:12:8b:51:a2:f6:2f:7e:4e:9e:cf:7b:
                    1f:39:15:ff:88:50:2e:4c:8b:6a:36:49:5c:aa:78:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5A:BC:F1:60:9A:CE:34:7A:8F:3E:44:3A:67:31:34:FF:67:45:00
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:d0:52:c5:df:65:6b:59:a5:84:d4:27:ad:c1:72:b4:45:
         27:76:d3:55:fd:6d:2b:c1:cd:98:0d:99:52:7f:8a:14:32:56:
         93:0d:72:0e:92:90:87:45:04:9f:b6:cf:9a:c4:7e:c6:26:77:
         d8:67:48:e9:5b:41:a7:db:65:74:c3:bd:45:1f:57:a2:a2:bf:
         6d:34:2c:23:1c:6f:b0:c4:46:0b:7b:ef:a5:a8:e3:a4:0b:78:
         70:18:42:16:63:de:ef:dc:c5:89:e5:f7:ff:dc:dd:e3:48:e1:
         86:c5:b3:b1:e2:b6:37:78:a5:9a:0f:2d:9a:52:91:f3:20:67:
         fb:20:0f:07:5b:a7:86:3a:7a:f4:c7:7a:20:d6:b8:21:c1:0c:
         30:e1:ed:f7:3d:bf:56:6b:78:93:32:92:e0:89:cb:1c:d5:9a:
         3b:9e:0c:d9:db:d0:7c:bc:7e:11:6a:d7:76:8c:2f:0c:15:6a:
         ca:a3:9f:3e:1e:c9:dc:78:26:c1:f1:72:7e:dc:08:65:95:59:
         d1:ce:68:70:9d:36:a6:a3:9d:2d:a9:5f:6d:80:72:17:0d:61:
         8a:ba:fb:0d:d0:c0:d7:0e:a5:24:d1:c8:65:2e:e4:44:48:53:
         5b:2a:c8:5f:d5:6a:3e:e8:14:11:a9:6d:00:73:8f:ab:09:e6:
         16:51:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:23:36 2026 by rpki-client