Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File:                     z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier:          v713dDi3uo/SSSNygQotUh8G9UoUaoSRaJabc8Gsmxc=
Subject key identifier:   F2:DD:E5:D3:BC:75:E1:39:EE:A0:18:90:54:CC:1D:37:56:00:C9:6A
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer:       /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial:       019FAA50B6EF41D22E76D9C186F7A7AE194C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number:          079F
Signing time:             Tue 28 Jul 2026 20:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:44 +0000
Files and hashes:         1: 0S-ozMaRAyvvdMvSJW3g5Kk4iVo.roa (hash: OQHH+g7JmAcn53oHjDt/GSfgh8qJfjfcS42p09F0WtU=)
                          2: DfeDYFEhcGiOVGd2HiXYX5Rn1XA.roa (hash: QNfPUzw4gyDIHgNy4UB5ZpKhS1ImNQM4IAovYnRUp5o=)
                          3: NQIBAohX75IaNOk07YtqfQi_l2Q.roa (hash: FDra3udXguGsI5fh/D9xyGvlXRNRLrQbxmcagtWhiYA=)
                          4: OX-WFn34m-JD1PE0u9eYZk4qKCk.roa (hash: I9b174DioYRAA7Dm+6Il6PksgXPNmVtiUo8IS77/Rvc=)
                          5: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (hash: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4=)
                          6: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: 8cHYla0+SRoONuCkYOE3u6mD1AcxjwIakwpu67c0c70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:b6:ef:41:d2:2e:76:d9:c1:86:f7:a7:ae:19:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
        Validity
            Not Before: Jul 28 20:00:44 2026 GMT
            Not After : Jul 29 20:00:44 2026 GMT
        Subject: CN=f2dde5d3bc75e139eea0189054cc1d375600c96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:c4:dd:e2:3e:7a:95:a3:54:5d:df:51:b4:
                    d6:53:02:5a:39:62:a5:9c:e9:9d:0b:91:b6:7d:1f:
                    df:88:71:ce:80:2b:fb:a0:27:54:96:00:b7:d4:56:
                    cc:13:15:60:47:80:71:ec:32:de:ec:cc:9a:4a:ee:
                    60:b3:07:39:db:bd:30:95:fa:15:72:b9:d8:74:0d:
                    9a:32:ab:ee:d8:4b:ef:ed:c4:cc:41:a2:4a:25:03:
                    a9:3d:0a:a7:f0:43:19:5f:b6:51:74:6a:c6:00:d1:
                    ba:a7:4a:e2:75:92:32:44:fc:12:a2:85:5b:e6:75:
                    37:7f:23:99:a4:c6:17:da:12:b1:14:01:1e:36:e6:
                    b5:eb:d9:29:57:8a:51:be:42:dc:b1:eb:0a:1d:c9:
                    c6:71:bc:11:6a:64:f7:3c:ff:8f:71:05:11:df:98:
                    2f:d0:31:b2:55:54:99:f9:f6:56:af:03:76:4d:bd:
                    f0:d7:67:0f:69:81:d9:3b:30:ae:bd:b0:fd:e5:14:
                    48:6c:65:76:15:b3:c4:93:a9:e2:31:e8:5f:b6:dc:
                    4b:3b:f2:8c:b9:90:15:b2:c6:f9:df:f5:73:c7:3e:
                    d8:24:94:8c:26:15:93:4d:0e:73:f3:7e:94:54:bb:
                    6d:6e:11:23:a4:3b:11:09:cb:86:5f:b3:f6:1f:83:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:E5:D3:BC:75:E1:39:EE:A0:18:90:54:CC:1D:37:56:00:C9:6A
            X509v3 Authority Key Identifier:
                keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:7b:8a:07:a3:e0:b2:53:fa:aa:56:9a:ea:3f:fa:f0:60:
         fc:66:8e:b6:3a:d1:f7:6c:eb:d2:eb:59:e8:1b:1a:f2:50:fb:
         9b:ef:c7:99:1f:98:c9:84:af:37:6b:76:8b:97:6d:08:56:85:
         a0:d4:fe:a0:a1:f6:23:93:2a:ed:1c:6a:95:33:50:53:08:69:
         55:85:d2:df:7a:f7:7d:35:6a:50:8b:34:88:82:92:59:54:02:
         b9:69:30:7e:23:db:78:8a:d1:9b:b1:13:19:fe:e5:f1:d3:31:
         e3:e7:a7:4f:a9:76:a2:24:3b:30:33:0b:4e:ef:cf:5d:3d:ca:
         27:b2:c8:65:a7:60:f5:47:08:98:e0:e8:46:3a:c1:4e:c0:02:
         8c:63:96:d4:89:1a:a6:c0:99:5d:7f:39:76:86:f4:e8:45:e2:
         75:4a:51:45:69:52:bb:11:5f:90:be:b7:6c:96:56:7a:90:70:
         48:5a:93:66:c6:42:e7:cd:f1:32:b6:c8:37:a6:52:47:04:56:
         ec:54:dd:96:f6:64:27:f0:fa:03:62:9b:ef:ca:c9:9b:18:65:
         6a:c3:fe:09:3e:08:8c:c9:62:bf:16:96:a6:2a:1d:9d:4d:56:
         63:04:7c:ed:71:ed:91:1b:f2:9f:1c:bc:c0:84:42:f2:d0:06:
         df:e6:88:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qULbvQdIudtnBhvenrhlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOTgzMzI2MTY5NzY1MmMzNTU0N2U5OGZjMDVhN2UyMjk0
ZWRiYzcwHhcNMjYwNzI4MjAwMDQ0WhcNMjYwNzI5MjAwMDQ0WjAzMTEwLwYDVQQD
EyhmMmRkZTVkM2JjNzVlMTM5ZWVhMDE4OTA1NGNjMWQzNzU2MDBjOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSDE3eI+epWjVF3fUbTWUwJaOWKl
nOmdC5G2fR/fiHHOgCv7oCdUlgC31FbMExVgR4Bx7DLe7MyaSu5gswc5270wlfoV
crnYdA2aMqvu2Evv7cTMQaJKJQOpPQqn8EMZX7ZRdGrGANG6p0ridZIyRPwSooVb
5nU3fyOZpMYX2hKxFAEeNua169kpV4pRvkLcsesKHcnGcbwRamT3PP+PcQUR35gv
0DGyVVSZ+fZWrwN2Tb3w12cPaYHZOzCuvbD95RRIbGV2FbPEk6niMehfttxLO/KM
uZAVssb53/Vzxz7YJJSMJhWTTQ5z836UVLttbhEjpDsRCcuGX7P2H4O6UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLd5dO8deE57qAYkFTMHTdWAMlqMB8GA1UdIwQY
MBaAFM+YMyYWl2UsNVR+mPwFp+IpTtvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMt
YWU0MDFhMzdjMDQ0LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMtYWU0MDFhMzdjMDQ0
LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+l7igej
4LJT+qpWmuo/+vBg/GaOtjrR92zr0utZ6Bsa8lD7m+/HmR+YyYSvN2t2i5dtCFaF
oNT+oKH2I5Mq7RxqlTNQUwhpVYXS33r3fTVqUIs0iIKSWVQCuWkwfiPbeIrRm7ET
Gf7l8dMx4+enT6l2oiQ7MDMLTu/PXT3KJ7LIZadg9UcImODoRjrBTsACjGOW1Ika
psCZXX85dob06EXidUpRRWlSuxFfkL63bJZWepBwSFqTZsZC583xMrbIN6ZSRwRW
7FTdlvZkJ/D6A2Kb78rJmxhlasP+CT4IjMlivxaWpiodnU1WYwR87XHtkRvynxy8
wIRC8tAG3+aIow==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:47 2026 by rpki-client