Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          UsstIYqF4U4TAFZhDLtzY1BHU/vA+sjsn/kkERxbkGk=
Subject key identifier:   B0:AF:0E:6B:EE:E6:33:0F:09:1B:8A:85:63:92:79:7D:6C:5C:F4:6E
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       019FAAF5BCE0CB793F258CCCC0A94BD908D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          090F
Signing time:             Tue 28 Jul 2026 23:00:59 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:59 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:59 +0000
Files and hashes:         1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
                          2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: e3YqCjWmTPuHTv6gNYaASTnttY1tT7usmbETx6QM2Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:bc:e0:cb:79:3f:25:8c:cc:c0:a9:4b:d9:08:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Jul 28 23:00:59 2026 GMT
            Not After : Jul 29 23:00:59 2026 GMT
        Subject: CN=b0af0e6beee6330f091b8a856392797d6c5cf46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:fd:22:a8:8e:8d:07:5a:b9:89:59:6c:9f:
                    98:22:0f:b9:21:fc:f7:b1:a2:b4:14:1c:43:0f:8e:
                    1b:8a:3a:ee:c2:11:6c:7b:eb:cb:9d:3c:c4:cd:14:
                    be:24:03:0c:cc:16:44:eb:a1:8d:df:1f:2d:10:63:
                    ea:3d:14:1e:c8:65:94:75:81:fa:b2:fd:26:c7:30:
                    26:d7:76:fe:b6:02:80:71:ea:41:34:71:cb:2c:c6:
                    b2:7e:a8:e7:33:f6:3a:04:93:9b:91:3e:d7:ab:09:
                    5e:d2:68:60:35:e6:47:75:89:32:53:77:c6:1e:1a:
                    f7:0a:32:a1:78:f8:85:f0:f4:c1:c0:5c:ff:6f:99:
                    cf:d8:be:f2:df:6d:25:39:94:b7:73:4f:46:b5:41:
                    80:3a:ac:af:07:ac:f3:9d:08:84:41:6d:28:4b:9e:
                    43:28:ff:99:26:e9:dd:05:0b:84:75:9f:32:57:02:
                    54:dc:de:ad:d7:3b:cf:cf:71:3e:84:6a:f9:97:79:
                    83:74:6d:69:37:2d:bc:d0:d5:cd:4a:6d:90:1a:39:
                    80:49:80:13:e5:c2:9f:be:d7:a9:39:68:f5:fc:41:
                    f8:be:3a:b3:94:32:3f:89:ac:1f:61:19:b7:d5:f3:
                    5c:50:92:8b:35:c9:3f:dc:1a:e8:d8:d3:37:2c:7e:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:0E:6B:EE:E6:33:0F:09:1B:8A:85:63:92:79:7D:6C:5C:F4:6E
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:e2:fb:ce:1d:2b:c3:d7:e8:34:7f:90:cc:a6:0a:f8:94:
         17:be:da:bb:bf:e7:13:5c:95:03:87:f7:34:70:8e:e1:20:8b:
         61:2c:d6:1d:01:e5:26:76:90:2a:e6:f4:56:e0:87:78:c9:dc:
         40:d9:c0:6b:9d:ba:46:fe:cb:25:c9:44:e6:cf:a7:35:46:03:
         b9:4e:20:8e:a1:fa:81:de:c3:c9:7d:4f:2e:6a:18:c6:7a:7e:
         5f:50:29:82:af:89:be:81:65:93:b1:e5:eb:d9:cb:72:37:27:
         9d:2d:2b:48:c6:a0:1b:22:6c:17:d8:0f:51:8f:50:91:f3:a8:
         5f:a6:5c:81:1d:e2:47:09:22:dd:cb:64:2d:05:87:79:b4:5e:
         09:29:28:55:07:89:5a:9a:51:85:1e:ad:76:89:82:9c:b3:a9:
         c8:0c:8d:be:f7:75:89:2d:f6:08:6c:5b:06:e4:b9:0f:33:8f:
         f5:f5:1b:d1:6f:aa:04:8e:4a:4c:56:36:29:33:dc:8f:99:dd:
         6c:2c:b9:de:24:8b:45:7d:67:6f:dd:4a:00:92:50:3f:dd:4b:
         f1:ed:74:07:70:36:94:c3:ca:8a:1a:85:f0:b4:ba:63:36:f0:
         99:81:53:7a:35:c7:3b:91:79:1b:eb:b2:e9:7b:b7:02:1c:ea:
         66:94:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:45 2026 by rpki-client