Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          l47/37EZxOKx1x9JHSyA5wx4gUJzkC8MMogojjlc/H0=
Subject key identifier:   0F:D2:2C:31:C3:76:9C:D4:3C:6F:51:75:DA:92:5A:8D:8E:F4:C3:7A
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019FA9E2D43E86E7D31C8ABE626F81C783C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          16AA
Signing time:             Tue 28 Jul 2026 18:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:42 +0000
Files and hashes:         1: HiiPQJYwHAaSYAVm8uTze8vCE9o.roa (hash: 2nziwQn2BDX70j1YJrz3ReJWO/lfYuKvlW5ZyhVZirs=)
                          2: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          3: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          5: rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa (hash: 5EPYMX4bCFhTuhRxbCYeuyqQ6i8l79Kij3J+8QpNg1Q=)
                          6: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: 9j5MrDei1C5qNXx5baDFnPacXIX6YOyUq4qJORz0yxM=)
                          7: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:d4:3e:86:e7:d3:1c:8a:be:62:6f:81:c7:83:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Jul 28 18:00:42 2026 GMT
            Not After : Jul 29 18:00:42 2026 GMT
        Subject: CN=0fd22c31c3769cd43c6f5175da925a8d8ef4c37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:86:1d:50:08:9a:46:ce:12:db:6d:97:0d:
                    d5:54:9b:1e:8d:e7:11:b9:d1:bc:3f:5f:73:ab:40:
                    97:6e:ee:35:3f:55:39:5a:44:b0:0b:eb:62:bc:f4:
                    69:80:92:f2:94:ae:db:0f:32:63:d6:f4:65:af:07:
                    82:49:bf:a6:ad:79:0c:4e:0c:59:43:b6:f1:13:1c:
                    3d:7e:8e:ce:ae:ed:31:fb:45:36:e5:23:82:49:d3:
                    79:be:62:4a:73:eb:79:8f:58:3a:34:2e:9d:ef:01:
                    1d:04:a2:bd:a2:a3:62:c9:3d:7c:85:c2:bb:07:3e:
                    39:23:ab:ac:f2:9a:03:17:97:20:38:f2:96:6b:f3:
                    b7:15:e9:36:62:22:ff:9c:2d:2c:34:ce:2d:aa:b4:
                    d7:61:fb:e9:bb:29:a3:57:cf:17:7a:90:8a:15:4a:
                    1b:ee:69:a6:d5:50:d4:c7:76:e2:8b:96:c8:29:36:
                    ed:d3:df:90:fe:3e:48:66:bf:b0:f1:fe:03:23:25:
                    32:d4:07:4b:24:61:c9:5c:be:87:fb:a8:68:e8:d8:
                    0f:a2:09:f6:71:30:f9:9d:f7:66:6d:ea:d7:ff:36:
                    21:19:54:df:25:7a:a3:77:40:46:f3:48:63:92:49:
                    ed:8c:22:da:f3:9d:b0:41:dc:84:54:6f:3e:69:43:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:2C:31:C3:76:9C:D4:3C:6F:51:75:DA:92:5A:8D:8E:F4:C3:7A
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:5b:e7:61:86:92:33:85:ad:9a:16:ce:03:19:55:7e:d6:dd:
         26:a0:bc:5c:95:32:1f:2c:0a:3f:90:4b:6c:84:8b:b7:e1:29:
         98:3a:f9:e4:c2:b5:ff:a6:fd:63:08:b3:72:c7:b2:63:a0:3b:
         8c:de:fc:37:e3:dc:69:f3:14:d6:b3:78:c6:25:e3:ef:ff:e2:
         74:78:33:94:8e:7f:50:d5:43:ee:9f:ad:09:f3:82:90:5d:b4:
         1e:54:e2:8f:54:07:83:c6:54:b1:05:78:17:2b:db:4e:c4:9e:
         c2:75:91:88:79:2b:b4:ab:5e:cc:d2:a8:31:6d:28:f7:3e:d7:
         46:90:27:c2:28:ea:fc:99:57:dc:58:b6:d2:40:57:5d:09:35:
         ac:a8:6f:c4:c1:3a:38:e5:74:ff:8b:e0:3f:31:20:bb:c0:ea:
         b5:51:99:7e:eb:3d:87:9f:e1:12:99:3e:a6:9d:ff:8f:6f:1d:
         b2:b2:d0:63:ce:53:73:81:4b:dd:f6:ce:be:8f:c9:1c:b3:4b:
         19:ff:eb:80:8f:a2:89:03:f3:ac:4e:2f:6e:d1:eb:f8:3a:a7:
         0d:fa:a7:4e:62:0b:71:16:87:39:89:1d:53:89:27:3b:4a:ab:
         f9:77:8e:57:cf:af:3d:5c:25:88:0d:01:6a:fe:66:b8:e5:bb:
         4f:31:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:40 2026 by rpki-client