Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File:                     zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier:          vCxMk5a9VDTyhpvi4A4KYH9bL2KUZ6z0aIe+Tn8CjUY=
Subject key identifier:   FF:1E:D3:F7:C9:D6:26:5F:F6:A3:72:94:C6:03:87:A9:1C:1F:3F:5C
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer:       /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial:       019FAB634E1016B04F912C158DB1D23D38AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 01:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:39 +0000
Files and hashes:         1: 8irMhN6XI4UTd6CziWQze6aQaRU.roa (hash: 4USQ1+WIpW+ALL4UR8+ywA+eZ3L7W74DTtNUv/veQUw=)
                          2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: TPSdDji8p+BOumzMXTCQ7I6ULmCLLIctoAtZYWdv3/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:4e:10:16:b0:4f:91:2c:15:8d:b1:d2:3d:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
        Validity
            Not Before: Jul 29 01:00:39 2026 GMT
            Not After : Jul 30 01:00:39 2026 GMT
        Subject: CN=ff1ed3f7c9d6265ff6a37294c60387a91c1f3f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:87:af:be:33:b8:c6:fc:59:7a:eb:5d:aa:
                    7b:ea:0d:8c:79:d7:af:0b:cb:e5:ef:d9:eb:91:92:
                    ed:8b:cf:d8:fe:9b:22:ca:70:93:18:59:de:be:2d:
                    eb:6f:7c:23:2e:8a:08:d7:a8:2c:6b:72:ee:6d:83:
                    3d:f3:4c:c9:77:f4:4e:f1:14:e2:a0:27:43:86:8e:
                    a4:62:9c:94:26:98:95:d2:f1:7c:c5:f6:44:f6:2a:
                    46:60:05:bb:74:4f:ea:e3:23:24:fe:0f:4b:40:c0:
                    3f:5a:30:69:b0:9c:ab:bc:5a:1c:02:1b:79:a9:97:
                    b4:c6:fe:8d:1b:13:16:53:29:ac:38:dd:16:8b:de:
                    77:46:b4:5d:71:56:7e:69:c0:8e:c0:c5:8d:bf:c4:
                    18:5b:7b:43:cf:e0:9f:3b:c8:ae:8a:9f:55:ac:33:
                    0a:f8:d4:b1:a4:26:cc:6a:fe:7e:fb:ad:e6:66:e6:
                    a1:84:1b:aa:4a:db:57:f6:ef:73:cb:c9:39:3d:90:
                    e0:5b:a9:f5:39:db:6d:b4:7a:d5:dc:de:1c:41:74:
                    b5:ca:fc:85:9a:d2:9f:d6:ee:5e:c3:3b:e8:08:28:
                    6e:43:15:06:81:25:0b:91:d6:2b:8f:c0:49:5f:d6:
                    29:80:7b:b9:eb:5c:1e:52:8e:4f:56:71:82:28:15:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1E:D3:F7:C9:D6:26:5F:F6:A3:72:94:C6:03:87:A9:1C:1F:3F:5C
            X509v3 Authority Key Identifier:
                keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:44:ea:74:4a:4d:33:d9:87:71:62:c3:6f:33:96:2b:a5:
         64:73:f4:4e:2d:f3:1c:df:cf:70:4b:54:d1:03:d8:95:0a:42:
         97:26:7c:50:34:4b:c4:9b:4c:e1:bd:0d:53:7e:50:3c:21:08:
         23:5b:9d:bb:eb:3c:4f:37:03:0a:08:8f:3d:de:e6:e5:66:2e:
         9a:97:36:18:12:a7:c3:3b:86:3d:47:01:ed:64:0b:24:3b:4d:
         a9:40:8f:d5:cd:e0:d3:5e:04:29:26:7e:69:6a:15:5b:28:77:
         2f:aa:86:75:e1:57:f9:07:f4:31:fe:32:ca:2f:c5:67:ed:b9:
         45:c1:5a:9b:8b:f8:6f:1f:ee:65:94:f0:a9:28:6a:d2:2c:e1:
         c5:34:7b:f0:d1:70:53:e3:75:29:4c:e2:70:26:b7:db:d6:0c:
         e2:46:fa:36:b1:b0:ca:27:88:00:52:af:2e:c5:33:c2:3c:a3:
         00:49:06:ae:95:62:31:ee:8f:e6:c8:c9:dc:31:93:8b:ff:aa:
         91:f3:58:44:76:c1:78:61:d1:c5:01:51:53:d0:80:0b:3a:6a:
         7a:d5:c1:a2:a3:ec:b9:6d:76:59:3a:43:63:2e:d5:53:0d:a3:
         03:12:aa:11:70:31:5f:71:b1:76:ae:6c:b9:5d:87:23:b3:d3:
         53:ae:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:39 2026 by rpki-client