Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          HaXVfSQ4OooWvDj3z95+pp1SDvgnOqHId23WzRrqNvc=
Subject key identifier:   2D:75:23:6F:1E:3D:67:BA:37:E1:CC:68:92:58:1C:1E:D3:95:87:0D
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       019FA9E2D820C1D006989909B7518CDAE6CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          080F
Signing time:             Tue 28 Jul 2026 18:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:43 +0000
Files and hashes:         1: 8vgRQVd50Rm3giCvTHM9dYeprUI.roa (hash: ZqKjZ1U3B0KeN2GviCp+mRJZ8NNTVw+srqTGM9NBsTk=)
                          2: GOVhumxEPoL4neQZjjckJeN-KNI.roa (hash: z0Kl7cRQ4EqgIEyAr3hQ9onG9NvsLkz7qIrC+ywOwnQ=)
                          3: JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa (hash: mtH7HEjcUoSWBPqGTrN+mDrgbsMUT6MnlsAyD0vzcjQ=)
                          4: MvgVDAqPSE3okj5m3PcFfzXBk1w.roa (hash: WTJgxLOGGaH3LR8ATwMwf+dORKDlRpVth28vAu1Woxg=)
                          5: epSW8Zh20G3Tyl52-dTL3yz-KVs.roa (hash: q6R7O5ajy86FRw9ExVqpE0uX2CxkIe39LhaQU39GNTs=)
                          6: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: cpHKEbXLIWObhN87VC1ZP92VScFQMdTA1xU0HdHfs7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:d8:20:c1:d0:06:98:99:09:b7:51:8c:da:e6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Jul 28 18:00:43 2026 GMT
            Not After : Jul 29 18:00:43 2026 GMT
        Subject: CN=2d75236f1e3d67ba37e1cc6892581c1ed395870d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:d1:08:c4:9d:08:c0:41:79:db:bd:21:38:
                    16:b6:cd:7d:a9:e6:66:79:95:68:6a:22:9d:b1:21:
                    c2:a7:cf:5a:b4:29:7b:da:d0:17:b1:8e:5c:13:d9:
                    5f:e3:11:2f:06:f2:80:a9:a3:f3:ae:2b:ec:4e:23:
                    63:b1:f5:f2:b9:27:32:9b:88:00:50:31:58:c0:fd:
                    de:5b:21:d5:d0:3b:70:f8:06:5d:55:db:84:84:d7:
                    f7:f3:d4:4b:f3:c3:69:15:76:aa:08:be:da:c3:5d:
                    43:5b:a1:bf:f5:98:35:b2:c1:64:c2:9b:95:7d:e8:
                    e6:ea:f2:1e:f0:19:06:ef:74:d0:6a:4f:77:22:92:
                    ac:ba:1e:85:94:ae:c7:81:80:f8:c8:d1:01:01:72:
                    1e:5a:f3:6c:ce:35:ce:4b:dd:eb:fa:57:7f:72:b5:
                    33:88:02:1e:d2:a5:b7:dd:67:c0:9f:fd:8c:1e:05:
                    b9:ef:ac:36:b2:a3:4b:dd:21:5e:93:ac:5a:2a:5b:
                    6d:ca:2b:26:7f:d8:fb:78:dd:31:e7:ba:a8:ff:9c:
                    19:94:92:10:b1:2e:fc:17:c4:02:dc:2c:2e:5d:5b:
                    fe:29:62:df:b9:bf:dc:6b:da:2a:cd:35:80:82:f7:
                    ab:c6:f6:59:32:aa:a5:fd:39:85:21:3b:2d:3c:81:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:75:23:6F:1E:3D:67:BA:37:E1:CC:68:92:58:1C:1E:D3:95:87:0D
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f2:98:84:f4:76:3a:e3:23:5e:27:e6:2d:d4:ff:31:17:ef:
         23:7b:dd:46:e2:d0:96:51:80:f7:47:0a:02:92:08:5c:22:f2:
         b6:1e:75:18:41:a7:9e:ef:63:7f:28:09:02:7a:9c:8f:0f:44:
         e6:84:07:be:ad:86:31:80:9a:25:8d:c5:4c:9a:a0:b1:15:b1:
         f8:bc:e5:24:99:1b:25:34:68:aa:ea:8a:95:12:22:fa:f1:5d:
         65:80:f3:fe:cf:21:eb:83:f0:90:52:37:63:2e:c4:a2:0c:ba:
         d6:00:25:4a:05:04:f1:9f:dd:1a:a7:a8:21:4e:84:11:b7:10:
         17:21:8c:a1:53:33:15:7b:3f:03:48:81:03:e7:bf:a8:03:bc:
         62:dc:94:e8:1c:a5:91:0d:21:bd:05:cf:0e:d9:97:97:b5:7f:
         ca:b9:0b:97:de:7e:5a:be:bc:cf:3b:d6:8d:0e:30:d3:27:72:
         84:6e:5f:d8:32:ec:7e:bc:e4:04:74:cc:6b:d2:87:35:f3:35:
         5d:c2:f3:2d:d9:c2:8f:f3:d3:f0:9f:63:fb:51:74:a3:d9:9e:
         7f:fe:99:26:6a:fc:99:38:e1:02:3a:e5:7b:a6:bb:61:2f:33:
         e9:fa:06:8e:df:d9:00:65:7d:d1:8a:db:56:e6:01:47:43:32:
         74:e8:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:38:59 2026 by rpki-client