Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File:                     ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier:          niOBOgr5M4Q6mDmuvDefL5+KYtDKq/Qv1fYnyUAiqRY=
Subject key identifier:   ED:99:81:4D:E4:C9:40:AC:B8:BD:D7:02:7E:92:6C:B1:D0:55:24:1E
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer:       /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial:       019FACAD20AB1EE249C90FE0CE267EBDBE9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number:          090C
Signing time:             Wed 29 Jul 2026 07:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:54 +0000
Files and hashes:         1: YDyC5kBhNI8thKV1LynCzapFE7Q.roa (hash: QeALQ6HX+21WYDZockRGHmyT4aXfggw6UzIeai2uvuw=)
                          2: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: RitR6N0mGjiS7bAve57/3B/u5cxNJYuA2oujj/dSHZk=)
                          3: uhkofDxDROlcHCvXKtjXZmbwMcM.roa (hash: VNaYu0cLAzaNZcXisiMMcDQwN9FyAi7e1kpMVNW8PJk=)
                          4: v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa (hash: HE5E+h78gyc1LIpKVk4+W1mq58iu0Ssx5TmwVEIggic=)
                          5: wOkpHSGw-U8KI9tK8aag-rxFIFI.roa (hash: eMuVT13Zj6Uew2bZcSNq7VO8ffPMy9zKzbd96LA2Eac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:20:ab:1e:e2:49:c9:0f:e0:ce:26:7e:bd:be:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
        Validity
            Not Before: Jul 29 07:00:54 2026 GMT
            Not After : Jul 30 07:00:54 2026 GMT
        Subject: CN=ed99814de4c940acb8bdd7027e926cb1d055241e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:e8:30:e2:38:81:78:12:ed:08:60:e7:1b:
                    c0:87:46:92:fd:fd:d4:8c:be:8b:a7:bb:a8:b1:67:
                    aa:b6:c9:8a:86:eb:eb:8c:ef:63:32:07:27:90:08:
                    59:0a:ab:b8:3f:38:61:9e:cb:12:c9:86:aa:e8:35:
                    dd:10:db:c1:90:49:d0:67:10:ec:6c:9d:2e:75:bd:
                    25:0b:98:74:79:f4:17:43:b0:da:72:2f:5d:5e:3a:
                    80:31:87:98:b8:69:6b:d9:85:e2:84:7a:a6:a1:12:
                    2b:6c:4f:c8:c5:8a:2c:cb:1e:1c:e7:fd:23:7e:2f:
                    b8:35:d9:14:1e:13:55:c4:fd:8b:cf:52:7f:f4:c9:
                    bc:3f:1a:12:e0:e8:be:b3:79:b5:7b:b9:b6:57:5d:
                    26:8d:c5:77:f1:38:19:fb:d1:0f:aa:85:10:e8:cc:
                    f5:8e:39:5f:6b:4d:01:9a:b2:bb:c7:dd:88:10:6f:
                    fc:5d:c2:f6:7b:b1:69:19:01:c3:0a:cb:c1:22:35:
                    a7:41:f2:01:b3:b9:42:cb:13:80:11:5c:cf:57:77:
                    75:c5:5c:55:54:7f:c0:60:46:6b:68:ea:80:e9:a7:
                    df:c8:64:e8:90:51:d7:f0:64:18:d8:b9:6f:cc:c9:
                    90:85:a1:2e:7d:7d:44:eb:b5:19:a3:b2:3f:59:f5:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:81:4D:E4:C9:40:AC:B8:BD:D7:02:7E:92:6C:B1:D0:55:24:1E
            X509v3 Authority Key Identifier:
                keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:98:2a:78:f2:d2:26:43:d2:9a:7a:dc:a6:21:f0:4c:d8:be:
         ce:d5:67:20:3e:68:39:6b:67:ba:f9:e7:91:09:05:4f:e5:4f:
         75:6b:11:07:cb:65:11:7a:61:1f:89:c5:2f:b6:37:85:89:d1:
         cf:66:f9:ad:7e:65:34:f3:7d:f7:fc:93:5a:5f:55:cb:f4:2f:
         d8:7d:72:c2:8b:8f:cc:0d:ce:03:53:da:51:98:8d:be:0e:e0:
         20:cb:ec:f2:19:53:95:be:1e:e8:1c:ce:d9:8c:8c:42:06:c3:
         2e:1e:80:0d:ae:fb:4d:3a:02:be:09:a3:44:d4:4c:03:33:3f:
         64:50:cb:50:ab:00:8d:d8:37:95:5d:7c:38:d2:1c:97:43:37:
         63:d9:46:bb:83:24:e7:b7:c5:e0:f0:6e:a8:91:8e:f2:85:7a:
         e1:b4:69:81:a1:23:f5:a7:f7:98:20:a6:42:3f:87:85:56:e0:
         84:a4:5b:e8:54:cd:d2:f6:fd:9f:67:fc:8d:ca:e6:c3:dc:51:
         5c:4e:8d:d5:45:a5:ef:9b:b2:b5:9d:4d:e0:d1:6d:fa:1e:fb:
         d1:d6:ce:07:22:c6:84:b5:60:c0:f9:36:46:11:90:fa:c9:da:
         8e:58:b8:e7:5b:9e:90:71:eb:ad:07:f8:c2:b2:0d:0d:d0:50:
         66:89:45:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:14 2026 by rpki-client