Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File:                     ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier:          00pcjjugZ/Lfr9nIGBXbOF92MOuvdgxNFQO6YCAiA4Q=
Subject key identifier:   0E:76:E8:A6:B4:32:38:96:A7:67:7F:93:15:82:90:A3:4F:E1:AE:D5
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer:       /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial:       019FAAF62BAB61879237EA2C51124A6D736C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number:          05CD
Signing time:             Tue 28 Jul 2026 23:01:27 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:27 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:27 +0000
Files and hashes:         1: J2KPu7SF8-IgFc_PEWtKR0GI_cU.roa (hash: VJE0x80m0wxxgNfwYsal4K/ZZSwAp/QnDuAp90J4C0U=)
                          2: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
                          3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: aB/slgh5Evge4dSSrL0l21cUeRh7EAttqgEVDng3ukQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:2b:ab:61:87:92:37:ea:2c:51:12:4a:6d:73:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
        Validity
            Not Before: Jul 28 23:01:27 2026 GMT
            Not After : Jul 29 23:01:27 2026 GMT
        Subject: CN=0e76e8a6b4323896a7677f93158290a34fe1aed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:b7:5e:50:07:30:0c:6f:8c:07:09:2e:85:
                    74:fb:ad:30:b2:97:95:e8:b5:96:7c:bd:e4:53:d6:
                    47:de:c4:df:ad:13:9e:9c:85:ab:72:ce:ca:1c:9d:
                    05:3a:10:1d:55:62:89:e1:2c:64:fb:a2:b7:83:f5:
                    ff:4b:60:68:2b:2e:20:df:63:04:2c:3a:ff:6c:55:
                    30:d4:59:8b:ef:6c:0a:4d:97:de:6c:cb:fc:f3:0f:
                    ab:6e:ad:08:7b:e1:fc:26:47:c0:4f:4f:0b:ae:0f:
                    7c:d9:26:5b:7e:c9:82:97:9b:f6:27:05:11:e1:c4:
                    3b:53:5a:21:ba:0d:22:bf:ac:8f:b4:b4:0e:36:ef:
                    20:56:c1:b0:4a:56:0c:97:a0:56:a0:5b:5c:64:9a:
                    23:0c:69:86:94:8a:00:5f:98:80:a2:59:d4:41:6b:
                    34:1f:67:3c:e0:bb:27:b0:b5:88:57:5e:3d:78:e2:
                    00:af:3f:74:b4:78:62:35:1c:0e:dd:e3:4a:42:40:
                    3c:de:a4:cc:4e:1b:9a:ca:9f:2b:0c:cd:ba:19:fe:
                    78:51:79:0d:33:33:ec:5a:f4:1a:5d:7c:f4:1a:d6:
                    d3:59:80:0b:20:8e:ce:d1:81:d4:a9:fc:c3:4a:b2:
                    e3:02:db:7a:f6:5d:74:6e:d7:32:b0:77:75:08:71:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:76:E8:A6:B4:32:38:96:A7:67:7F:93:15:82:90:A3:4F:E1:AE:D5
            X509v3 Authority Key Identifier:
                keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:56:52:3a:12:b3:5c:05:7e:1a:9f:b5:cc:8a:39:dc:16:a8:
         a3:46:d2:7c:24:79:51:ed:32:4e:0d:1c:6e:08:4c:d7:bc:c1:
         2d:70:3b:0b:c9:7e:b7:28:ab:70:a0:73:78:be:97:0c:cf:24:
         e4:8d:54:48:3d:6b:fc:cc:c3:04:19:59:ef:15:56:7f:76:e1:
         ae:1e:d7:d6:ae:0d:09:53:bb:bf:73:0f:ca:3f:3f:b8:dc:38:
         00:14:30:b0:fd:e2:c4:09:91:ab:88:62:c0:cb:3c:73:df:ed:
         77:93:9b:12:29:ac:f7:ce:8d:0b:73:6a:9d:db:ba:11:c4:e9:
         48:b0:80:86:44:8c:52:8d:56:06:97:ca:e0:12:94:79:ee:dd:
         54:a7:bd:a5:91:1e:1a:63:f1:ee:8b:c3:c9:e7:16:26:5f:fe:
         44:4a:6e:f0:f1:13:c8:fd:a6:08:1a:2d:b3:2f:4b:d2:71:a2:
         6e:75:f7:81:98:37:87:19:f8:06:8c:fd:62:0d:ad:76:31:9e:
         1f:b2:c7:56:2c:bf:cb:7b:c9:14:00:f1:48:f7:5c:a9:94:57:
         3e:eb:61:4b:27:8d:08:17:49:36:47:85:8d:aa:4f:f5:3c:d7:
         f3:81:69:81:f2:84:95:b3:78:fd:a8:7f:fa:a3:53:5c:dd:f9:
         47:3c:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:16 2026 by rpki-client