Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          QxFsY2d32//9jmH5ozAKABn7SWVaTd219rmlgt4VFsE=
Subject key identifier:   0B:06:30:A3:9A:CC:39:76:F5:27:53:82:CD:73:F2:07:B4:5D:12:5D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       019FA9078EA192AB2315933031B1F76FE10A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0C8B
Signing time:             Tue 28 Jul 2026 14:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:12 +0000
Files and hashes:         1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
                          2: 0hivMId7QyV_J-baQe-LpP04A_E.roa (hash: 4wskR4bGB2kTBEPb3U0Ndo9Z+ReWqtwzIpeVVcyolq4=)
                          3: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
                          4: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=)
                          5: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          6: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          7: BLbEGnHlodnp79q9soB7X47HKdw.roa (hash: YLxcybOGPbSncNQUcEA27OYyYsdtahC0bwUM37mtR0U=)
                          8: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          9: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
                          10: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
                          11: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=)
                          12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
                          13: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=)
                          14: P7ZgWKI1Wrjsz9VU4DTzCLAgheI.roa (hash: x5YukDSUF+4txhRHDoxZY/oWruu1mketabTf55p1uXU=)
                          15: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          16: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
                          17: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          18: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
                          19: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: QFsCUAmUUgMXok4DkZ8CGB8TdudUVMb4Wg5qeoHEOe8=)
                          20: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          21: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
                          22: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
                          23: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          24: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=)
                          25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
                          27: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
                          28: r5xSrq13TBSiblkLCkk6aKWkSPM.roa (hash: Jqrbgb6N2ntUjpORqhuL9e7bWx13rYWpNNGtwo5PVmQ=)
                          29: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
                          30: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
                          31: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:8e:a1:92:ab:23:15:93:30:31:b1:f7:6f:e1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jul 28 14:01:12 2026 GMT
            Not After : Jul 29 14:01:12 2026 GMT
        Subject: CN=0b0630a39acc3976f5275382cd73f207b45d125d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:c7:6a:00:19:ee:af:16:66:32:a5:81:0d:
                    ae:fe:0b:32:df:01:96:ec:d2:4d:9c:fa:ae:05:7e:
                    c1:a9:68:be:54:f4:6e:c2:41:d8:cd:12:5e:1e:ab:
                    21:7c:27:b8:e9:7a:50:b4:b4:dc:3e:ba:b6:c5:15:
                    5a:30:93:e6:24:43:5d:cf:04:6d:03:42:1d:a8:a2:
                    c9:54:95:54:b3:0d:c4:37:dc:60:04:26:3a:d4:12:
                    3f:3e:90:c9:e3:b6:ee:f8:08:f7:4b:82:56:38:ad:
                    89:e6:40:33:bc:b6:f5:8a:b4:5d:5b:93:31:47:b8:
                    4a:03:29:86:69:9a:33:ce:6d:2f:8c:60:30:80:bb:
                    95:eb:08:3c:1a:34:09:d7:be:bc:76:38:02:8c:39:
                    7e:88:0c:8d:d2:b6:e1:83:4a:94:14:82:a4:02:a4:
                    56:ce:60:96:7c:8a:b4:e3:a6:40:aa:25:01:58:f8:
                    d9:72:83:bc:f2:1b:43:d4:81:c5:79:e1:b4:d5:ca:
                    b4:75:00:69:7a:fa:75:96:45:2a:ab:5e:cc:d5:23:
                    8f:06:e3:35:12:57:45:c0:cb:46:7a:0c:93:2b:4f:
                    08:27:3c:73:11:b4:32:75:70:9e:68:1b:df:a0:c2:
                    dc:4b:6f:d1:76:bb:26:ca:bd:31:36:17:99:df:37:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:06:30:A3:9A:CC:39:76:F5:27:53:82:CD:73:F2:07:B4:5D:12:5D
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:38:84:2e:6d:01:3c:f0:0f:44:e8:8b:fc:2f:b3:22:ce:24:
         1e:9c:cc:8e:56:41:ac:fa:7d:3f:1f:7d:2d:24:b9:68:14:13:
         11:0d:28:ec:26:a5:27:4f:be:8c:65:23:07:7a:ef:e7:e0:8c:
         22:2e:23:ef:95:d5:b4:37:51:31:7b:01:96:89:2c:27:4a:ba:
         68:56:2a:5e:51:62:20:0b:da:8a:da:00:c3:63:78:a5:00:18:
         ed:fd:51:0c:6e:8e:2c:fa:91:ba:e3:ac:a9:56:da:27:bc:81:
         40:4f:86:fc:c1:06:2a:34:d0:5a:03:6f:6d:bb:2f:2e:3c:18:
         a4:02:80:0d:ec:68:77:97:66:49:fe:77:1f:95:47:4f:6b:f5:
         8b:66:4b:d2:3f:a0:4f:fc:1c:78:c5:9f:e6:98:d2:69:03:97:
         b2:25:d9:5f:99:f1:c9:cc:0d:17:64:70:af:f5:04:b8:3e:04:
         97:91:af:91:7f:13:41:94:dc:cd:ed:94:61:2c:e6:86:13:db:
         ef:c7:8f:37:bf:f9:62:0c:67:2b:b1:ef:fc:9b:68:0c:bd:3c:
         b1:bc:16:79:d8:0d:c5:d1:6d:20:d4:e9:60:91:22:47:79:2f:
         d1:5e:3e:8a:e1:b9:f7:6b:4c:89:10:c2:07:af:25:a6:a3:2b:
         7a:c2:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:04 2026 by rpki-client