Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File:                     1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier:          1KByvXEZyoYxZbWDLA3r0MEnwiiME1KYWzm5LhHbva8=
Subject key identifier:   51:AB:A7:9E:D0:39:CE:ED:C5:12:19:75:CB:99:F7:A9:55:12:D4:DE
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer:       /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial:       019FAA87F05C242AAA36B1617CB9D5A903FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:03 +0000
Files and hashes:         1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: oRRfPBhNu6ZKVnWyEMTGYqh0f8zaxkz1/1dUZs1e3eM=)
                          2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:f0:5c:24:2a:aa:36:b1:61:7c:b9:d5:a9:03:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
        Validity
            Not Before: Jul 28 21:01:03 2026 GMT
            Not After : Jul 29 21:01:03 2026 GMT
        Subject: CN=51aba79ed039ceedc5121975cb99f7a95512d4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:de:74:1f:ff:46:ba:6b:f6:e3:be:81:3c:f1:
                    a9:1e:44:d9:95:f8:e9:df:45:73:5f:4f:f9:dd:5b:
                    a9:3c:7f:52:49:fa:62:9d:6d:4f:61:73:58:f3:bd:
                    ce:b0:76:fe:09:9e:42:c2:7a:93:51:9f:b3:1d:c2:
                    d0:69:88:5c:3e:e7:cb:02:36:51:a7:72:11:bf:f9:
                    ca:b5:2f:e4:f0:d1:97:8e:d5:85:b8:08:eb:0a:20:
                    3d:ef:cd:d3:a9:d5:cf:c9:aa:d2:f3:35:13:ed:3d:
                    ed:98:90:f1:a8:e1:99:67:10:16:16:67:fa:82:d5:
                    9d:16:84:22:f8:ef:31:1a:69:1c:f3:37:aa:6f:cf:
                    e5:e1:d4:a5:c9:ee:05:a4:1c:ef:eb:67:22:61:49:
                    a3:a9:6c:09:10:b9:3d:52:17:24:f5:41:35:bc:d9:
                    75:67:5f:7d:a0:21:6f:ae:0c:59:d0:5a:7f:b4:e2:
                    2d:4d:a0:fd:f6:3f:f8:55:6f:9c:9a:87:ab:10:7f:
                    e9:15:b2:60:94:5e:eb:23:3a:69:14:f0:79:04:62:
                    71:f5:f3:1e:04:a7:2c:c4:dc:40:c7:f6:d7:73:d4:
                    3b:de:05:f9:eb:06:38:25:31:b7:6d:2a:c5:16:34:
                    82:0c:f2:1a:3b:42:f1:c4:4d:9b:2b:61:38:5c:81:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AB:A7:9E:D0:39:CE:ED:C5:12:19:75:CB:99:F7:A9:55:12:D4:DE
            X509v3 Authority Key Identifier:
                keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:78:59:82:aa:6a:7f:fe:70:02:13:24:f1:6b:ae:c6:ba:
         22:01:46:57:6f:7d:14:c6:6a:00:1d:0f:c4:cd:52:20:4f:2f:
         29:5d:83:e4:ae:87:7f:0e:c9:28:e4:89:3a:b7:a4:a3:d6:34:
         28:55:57:6a:f9:56:ee:6b:9a:c9:37:4d:b3:f3:4d:43:39:dc:
         74:76:89:54:28:d8:75:97:47:75:bf:10:f5:e1:1c:90:da:b5:
         31:85:78:77:2f:33:a2:d8:46:3d:da:50:4a:45:25:c9:2d:a7:
         be:15:5d:f2:d7:6d:17:2c:94:c7:51:e9:e8:37:61:bb:8c:21:
         ba:cc:e4:dc:7e:eb:aa:fc:eb:78:1c:c7:90:ff:ae:f8:67:35:
         d5:e5:0f:8a:05:c1:4f:c5:8e:75:a1:3a:b8:a6:81:0e:d8:65:
         49:60:8d:fa:23:e6:a6:d4:4b:2b:6b:94:39:00:92:c1:3a:36:
         70:4c:4b:33:13:4c:34:c9:47:23:5b:34:fd:9d:90:11:05:d9:
         13:e1:4e:0f:c4:24:a2:ad:0f:94:85:dc:55:ad:f7:ef:0b:fa:
         0b:f6:b9:ba:20:fe:d1:05:83:23:87:76:a9:a8:dd:0e:48:aa:
         06:c0:0c:fe:7c:97:f4:04:bb:7e:0d:f8:c8:9b:78:e7:39:7a:
         0d:64:ee:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+qh/BcJCqqNrFhfLnVqQP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWIyOGY4Zjk3ZGYwOWFjNGZkNzcwMWU5MzMwZDRmNDVi
MWUyNWUwHhcNMjYwNzI4MjEwMTAzWhcNMjYwNzI5MjEwMTAzWjAzMTEwLwYDVQQD
Eyg1MWFiYTc5ZWQwMzljZWVkYzUxMjE5NzVjYjk5ZjdhOTU1MTJkNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz950H/9Gumv2476BPPGpHkTZlfjp
30VzX0/53VupPH9SSfpinW1PYXNY873OsHb+CZ5CwnqTUZ+zHcLQaYhcPufLAjZR
p3IRv/nKtS/k8NGXjtWFuAjrCiA9783TqdXPyarS8zUT7T3tmJDxqOGZZxAWFmf6
gtWdFoQi+O8xGmkc8zeqb8/l4dSlye4FpBzv62ciYUmjqWwJELk9Uhck9UE1vNl1
Z199oCFvrgxZ0Fp/tOItTaD99j/4VW+cmoerEH/pFbJglF7rIzppFPB5BGJx9fMe
BKcsxNxAx/bXc9Q73gX56wY4JTG3bSrFFjSCDPIaO0LxxE2bK2E4XIFMkQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFGrp57QOc7txRIZdcuZ96lVEtTeMB8GA1UdIwQY
MBaAFPmbKPj5ffCaxP13AekzDU9FseJeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ac28tUGw5OEpyRV9YY0I2VE1OVDBXeDRsNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMmY1ZjIyLTc0MzktNDIwOC04YjM5
LTdkMTFmY2YxNzEyMy8xLzEtWnNvLVBsOThKckVfWGNCNlRNTlQwV3g0bDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc3LzJmNWYyMi03NDM5LTQyMDgtOGIzOS03ZDExZmNmMTcx
MjMvMS8xLVpzby1QbDk4SnJFX1hjQjZUTU5UMFd4NGw0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ54
WYKqan/+cAITJPFrrsa6IgFGV299FMZqAB0PxM1SIE8vKV2D5K6Hfw7JKOSJOrek
o9Y0KFVXavlW7muayTdNs/NNQzncdHaJVCjYdZdHdb8Q9eEckNq1MYV4dy8zothG
PdpQSkUlyS2nvhVd8tdtFyyUx1Hp6Ddhu4whuszk3H7rqvzreBzHkP+u+Gc11eUP
igXBT8WOdaE6uKaBDthlSWCN+iPmptRLK2uUOQCSwTo2cExLMxNMNMlHI1s0/Z2Q
EQXZE+FOD8Qkoq0PlIXcVa337wv6C/a5uiD+0QWDI4d2qajdDkiqBsAM/nyX9AS7
fg34yJt45zl6DWTuew==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:45 2026 by rpki-client