Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File:                     Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier:          1sI/bLZ84OarShLJfVpkuSaHK4fuCj7U5xMhkYNcsgw=
Subject key identifier:   51:76:64:F7:5D:5A:23:A6:D0:08:18:5D:08:AD:89:97:1A:70:99:BD
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer:       /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial:       019FAC0861945107B20DBF2EDA7FE4AAEFF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number:          0930
Signing time:             Wed 29 Jul 2026 04:00:58 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:58 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:58 +0000
Files and hashes:         1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: OXG1W7rx4yIU1lZi0knnr9mZsB8E9ROSLqVkztEsWRA=)
                          2: lD0Wwhw0gpihU_arbUQK_IQqs4c.roa (hash: 6HIhfJOZXKPxqB9WM2oez5Dgrzz0kzJpo4+10uPExmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:61:94:51:07:b2:0d:bf:2e:da:7f:e4:aa:ef:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
        Validity
            Not Before: Jul 29 04:00:58 2026 GMT
            Not After : Jul 30 04:00:58 2026 GMT
        Subject: CN=517664f75d5a23a6d008185d08ad89971a7099bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:8c:8a:ac:88:f8:89:79:10:12:1e:8e:53:
                    ce:5e:16:40:36:48:62:d9:c0:c6:d3:b1:19:c2:93:
                    5f:6c:b8:b8:6d:e4:79:c1:22:58:5c:26:4c:2c:7f:
                    78:bb:22:e7:28:18:6f:97:43:2a:3b:4a:48:68:7a:
                    88:fa:26:57:9c:ee:76:3e:21:02:ce:3e:8e:e4:8a:
                    53:1c:7b:fa:83:1c:a3:3a:6f:87:4d:b8:a4:92:5b:
                    c1:b0:52:05:1e:17:43:53:43:3a:c6:13:82:35:73:
                    78:74:c5:29:90:b1:a9:c0:4e:01:ef:76:7f:22:18:
                    8e:a9:e5:77:c7:1f:af:c2:4e:d7:02:49:b3:dd:e4:
                    4f:a0:67:d8:93:47:7a:1f:56:a4:a2:88:b0:b2:9d:
                    4e:ac:0d:d3:c0:47:e1:42:56:14:12:34:40:26:02:
                    13:f7:2c:d7:66:59:d0:02:b8:b5:9c:53:18:13:b7:
                    94:a1:a5:6c:ba:db:68:93:bb:67:f4:5a:6a:94:f4:
                    71:d2:f3:24:de:06:98:ed:ac:5d:11:24:c1:e0:fe:
                    c5:2e:90:27:2f:99:19:ac:0c:9b:94:08:83:1d:95:
                    72:6a:fa:83:df:5e:aa:f5:e2:2c:54:c1:bc:2c:5f:
                    69:32:28:55:fa:72:7e:61:9e:22:ff:0a:6d:95:9c:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:76:64:F7:5D:5A:23:A6:D0:08:18:5D:08:AD:89:97:1A:70:99:BD
            X509v3 Authority Key Identifier:
                keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:60:d0:dd:06:91:79:59:05:07:32:06:b3:42:9e:06:cb:67:
         8a:80:02:86:2e:ea:0f:05:74:c0:89:b4:b0:93:03:af:cf:36:
         2c:4d:51:fc:ae:ac:84:01:09:f3:c6:2a:be:25:b9:19:7b:0a:
         b5:cf:38:e0:e1:c9:51:e9:45:aa:a9:06:5d:a8:1a:56:b3:9e:
         cf:3a:60:3f:b3:97:7b:f6:0a:7f:f4:66:11:53:67:4c:82:79:
         42:c3:6d:01:e4:56:65:f2:49:ef:75:ec:5f:08:0b:b2:3e:14:
         2a:ab:c3:f2:22:8c:98:06:ec:dd:c1:41:a3:17:ab:a4:ab:22:
         b5:9c:ea:fc:26:1d:f1:25:50:88:13:3b:aa:ab:77:7f:7e:5b:
         b0:76:96:24:c7:9e:e2:4c:0e:f4:4a:8b:94:f2:ee:5c:85:31:
         70:0a:1d:99:7a:ee:22:83:ad:78:04:f1:07:e8:ce:7a:b8:cb:
         34:9b:a8:66:cc:5b:0d:b0:ba:23:8f:5c:b4:95:f1:af:0a:1f:
         6f:f4:a3:35:29:3f:8d:a9:b8:23:ba:ee:cb:74:ca:a9:51:34:
         b0:c0:b2:fa:45:0a:8e:f4:6b:39:f3:2a:a5:53:59:8a:fc:bc:
         cf:1f:60:75:18:ca:01:7d:a3:25:dd:e9:7f:08:ae:3d:f2:e5:
         b8:87:58:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCGGUUQeyDb8u2n/kqu/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NGM1MDdhMGNkYjUzMTM3NDQzN2ViZjQ2ZGQ1OWE2YmQw
NzQ4NmMwHhcNMjYwNzI5MDQwMDU4WhcNMjYwNzMwMDQwMDU4WjAzMTEwLwYDVQQD
Eyg1MTc2NjRmNzVkNWEyM2E2ZDAwODE4NWQwOGFkODk5NzFhNzA5OWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqqMiqyI+Il5EBIejlPOXhZANkhi
2cDG07EZwpNfbLi4beR5wSJYXCZMLH94uyLnKBhvl0MqO0pIaHqI+iZXnO52PiEC
zj6O5IpTHHv6gxyjOm+HTbikklvBsFIFHhdDU0M6xhOCNXN4dMUpkLGpwE4B73Z/
IhiOqeV3xx+vwk7XAkmz3eRPoGfYk0d6H1akooiwsp1OrA3TwEfhQlYUEjRAJgIT
9yzXZlnQAri1nFMYE7eUoaVsuttok7tn9FpqlPRx0vMk3gaY7axdESTB4P7FLpAn
L5kZrAyblAiDHZVyavqD316q9eIsVMG8LF9pMihV+nJ+YZ4i/wptlZzSZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF2ZPddWiOm0AgYXQitiZcacJm9MB8GA1UdIwQY
MBaAFGdMUHoM21MTdEN+v0bdWaa9B0hsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2Ut
NGIzNWFkNzBjYzFhLzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2UtNGIzNWFkNzBjYzFh
LzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWDQ3QaR
eVkFBzIGs0KeBstnioAChi7qDwV0wIm0sJMDr882LE1R/K6shAEJ88YqviW5GXsK
tc844OHJUelFqqkGXagaVrOezzpgP7OXe/YKf/RmEVNnTIJ5QsNtAeRWZfJJ73Xs
XwgLsj4UKqvD8iKMmAbs3cFBoxerpKsitZzq/CYd8SVQiBM7qqt3f35bsHaWJMee
4kwO9EqLlPLuXIUxcAodmXruIoOteATxB+jOerjLNJuoZsxbDbC6I49ctJXxrwof
b/SjNSk/jam4I7ruy3TKqVE0sMCy+kUKjvRrOfMqpVNZivy8zx9gdRjKAX2jJd3p
fwiuPfLluIdYYQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:59:48 2026 by rpki-client