Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File:                     Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier:          W7s/S0nIYc8bdmtVKR9Z1j8dcr9yv5HUiuAqefDoKiY=
Subject key identifier:   A0:91:69:18:6A:42:51:D9:AC:26:6A:E4:F3:51:8A:C4:38:A7:0F:EA
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer:       /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial:       019FADF7340EDD5291EF32078C7C7993518C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number:          05A0
Signing time:             Wed 29 Jul 2026 13:01:26 +0000
Manifest this update:     Wed 29 Jul 2026 13:01:26 +0000
Manifest next update:     Thu 30 Jul 2026 13:01:26 +0000
Files and hashes:         1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: uCN8e/5eirmfrj07EL8VeM2ca7nhVFhJY22RB4TY2p4=)
                          2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:f7:34:0e:dd:52:91:ef:32:07:8c:7c:79:93:51:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
        Validity
            Not Before: Jul 29 13:01:26 2026 GMT
            Not After : Jul 30 13:01:26 2026 GMT
        Subject: CN=a09169186a4251d9ac266ae4f3518ac438a70fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:cc:55:e4:2c:ea:f9:8f:e9:76:55:4a:ae:
                    16:b4:2a:97:31:62:43:99:43:16:dd:7f:c4:2a:38:
                    d2:3d:4f:3f:38:7c:75:03:bb:68:50:5e:e6:0a:9b:
                    9a:28:8f:ad:40:48:81:e4:9b:56:60:b8:ac:61:a2:
                    22:a4:b0:23:0d:7f:35:da:ef:c3:2a:7a:57:f4:ed:
                    9f:cf:48:26:88:c2:89:c4:eb:9c:1d:af:9e:93:48:
                    db:85:a7:3e:d1:1e:dd:86:59:0f:9d:b8:97:e3:1a:
                    19:63:6d:16:2f:36:63:b9:85:6f:8a:6b:e5:ff:13:
                    bb:e7:1f:ff:c2:c8:03:a2:58:2c:2b:92:94:8e:e6:
                    1d:ab:bb:f9:14:d9:3f:37:74:70:46:b9:f2:1a:b5:
                    ff:71:ba:93:9e:29:cf:f5:8c:35:08:44:53:10:12:
                    7c:93:ad:8c:42:d5:ff:d0:f3:fb:6e:e8:eb:47:cc:
                    41:94:26:d1:76:e3:4c:84:e1:cb:7e:c2:70:d2:e5:
                    31:ff:85:f9:07:c4:68:aa:69:26:a2:60:af:27:2f:
                    b8:25:18:e8:80:42:dc:16:7d:65:9d:08:99:38:99:
                    db:5b:0c:d0:47:e3:1c:c7:c3:74:6c:19:f3:1e:2f:
                    f5:a3:44:85:0d:db:79:1d:3d:0e:4a:53:3e:8f:64:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:91:69:18:6A:42:51:D9:AC:26:6A:E4:F3:51:8A:C4:38:A7:0F:EA
            X509v3 Authority Key Identifier:
                keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:c4:3f:55:70:0a:25:bf:43:20:03:5b:40:15:9b:cb:af:
         45:72:05:53:a0:1c:81:14:38:04:4f:b2:29:cd:ed:3a:44:5d:
         71:7a:ad:49:70:25:75:4b:b2:2a:04:9a:bd:d7:50:1d:0f:d5:
         93:e6:ae:72:cc:c0:e2:87:19:b6:9f:de:a7:7e:9a:59:fa:48:
         63:9b:e8:e6:eb:03:22:88:28:45:0d:b6:0a:63:50:9e:d5:7e:
         dd:df:7c:49:a4:57:db:55:67:d4:50:02:89:3f:b4:c6:a8:40:
         29:c9:8b:71:cb:da:87:92:a3:c6:a3:fd:68:0b:31:45:49:3a:
         07:9c:ac:2a:86:79:e2:5d:bb:b8:08:a8:1e:d2:cc:8d:23:42:
         4c:a4:b0:77:e7:fc:50:bd:e6:7b:39:1d:c5:2c:92:fa:5d:02:
         6f:bd:91:43:5b:8b:87:51:97:6f:16:5c:e2:ee:4b:46:00:9c:
         02:38:31:e3:7b:07:f2:78:88:4d:7d:7a:ba:f2:c0:82:94:9d:
         6c:f1:e0:9b:5d:a4:4b:d7:06:7e:1c:8b:ca:0d:fe:94:b7:6c:
         98:4d:0a:a1:91:5b:52:f9:7b:ea:09:85:ce:4b:78:d3:b2:ab:
         3d:2f:94:c6:6f:92:ec:03:6f:a5:72:f0:a5:9b:6f:f9:63:05:
         cf:d2:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:01:40 2026 by rpki-client