Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          UEPBQL0wnT5b5vGI2hglwOlAiUDk5I8DJsnSMp4U7SM=
Subject key identifier:   E8:8D:E5:51:EE:2C:6D:4D:0B:B5:82:D5:6E:4A:AF:AD:4A:7C:71:B5
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       019FABD0E15580C27FAB55B6828A7310A798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          133D
Signing time:             Wed 29 Jul 2026 03:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:20 +0000
Files and hashes:         1: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: 9YGEF8EAdHU+W5wtXHmVFshy1clLwSNbOL7aOGTqTSM=)
                          2: __i6sIYUIBe7mo2fXsSB58_KDR8.roa (hash: xm+A31I7Z/MMOUkoqOHD6xRyGTCyQb2nbbsP/I4N0LQ=)
                          3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:e1:55:80:c2:7f:ab:55:b6:82:8a:73:10:a7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: Jul 29 03:00:20 2026 GMT
            Not After : Jul 30 03:00:20 2026 GMT
        Subject: CN=e88de551ee2c6d4d0bb582d56e4aafad4a7c71b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:07:4b:58:51:f3:de:a8:a6:fa:ed:99:43:
                    9e:dc:28:06:3d:e4:6d:2b:6d:af:fa:0e:3c:ec:08:
                    3c:47:79:18:47:b5:ef:6f:74:16:02:66:b2:74:d1:
                    da:a0:1c:e9:ed:ac:ff:19:51:22:d6:37:ec:61:42:
                    d2:fd:f6:f6:b1:67:9a:cc:4b:12:f2:89:b0:77:7d:
                    4d:79:be:2d:88:20:c1:ad:d8:75:b0:90:55:7c:11:
                    74:dc:8b:fa:07:d7:6c:6c:58:e3:8f:fe:83:89:7d:
                    1c:ea:a1:7e:be:09:3c:c9:8c:c5:50:ae:55:8a:b2:
                    39:39:b5:ae:77:f0:39:cd:1b:af:37:ec:4a:f3:03:
                    54:f6:c4:14:d5:ad:d0:15:79:47:bc:7f:25:68:96:
                    8f:fc:28:64:6d:45:37:3f:cf:34:58:33:d1:fb:8b:
                    4c:89:7d:51:b1:bb:be:ce:31:14:b4:1b:e0:4e:95:
                    c4:d7:31:99:ed:3f:d7:1a:de:4e:10:89:cc:86:aa:
                    c3:ab:35:e4:67:2e:67:9e:df:c4:af:a7:e0:8d:61:
                    41:e0:f6:56:59:81:25:f1:16:2c:8b:c6:34:64:3d:
                    28:ef:1f:48:03:82:00:1d:96:74:a1:58:b4:9e:47:
                    74:6d:66:4b:2d:ee:52:35:f3:02:b0:cf:88:1d:b6:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8D:E5:51:EE:2C:6D:4D:0B:B5:82:D5:6E:4A:AF:AD:4A:7C:71:B5
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4f:8c:de:db:9f:cb:44:84:bf:c7:0e:f8:30:82:82:a1:4a:
         98:c0:a7:0f:d0:74:56:d2:8d:41:77:c6:af:e9:33:3c:5d:fb:
         aa:9c:b6:0e:62:d2:1e:80:bd:98:df:0a:f6:44:b4:ec:08:be:
         43:6c:54:d7:27:63:e0:be:41:92:30:df:90:df:46:3a:db:a1:
         23:4b:f7:aa:9d:3c:36:33:4c:c3:3b:e7:22:c9:87:74:66:5b:
         36:77:02:15:56:75:a5:5a:e3:71:39:cd:45:7f:d0:ed:d6:34:
         40:14:74:64:12:f7:fd:ec:7b:03:2c:42:ab:20:05:ee:d9:df:
         ab:12:62:bf:32:08:e8:e1:7b:eb:06:d8:7e:e8:1f:12:cf:2d:
         bc:66:0c:50:c4:38:79:f9:c1:88:cc:12:34:43:84:14:05:ac:
         f6:55:2f:b6:91:69:22:0e:d2:04:59:38:d9:d0:aa:66:ef:b8:
         4d:1f:c9:79:3e:20:01:5c:61:78:86:e7:84:bc:75:b0:1d:3e:
         65:2f:7d:10:7d:dc:b5:de:6c:ad:87:a7:c3:35:6b:37:e1:9e:
         06:a8:5b:ba:19:11:9e:38:ab:f7:23:83:fe:10:0a:35:6c:cb:
         63:ad:3a:a3:28:99:35:7b:6b:75:67:74:29:b6:d2:04:da:01:
         27:06:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:35 2026 by rpki-client