Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          gmVAvBvlA+bnwTLCEyspUIRjrq/RnrJmMeFEEpHzh0o=
Subject key identifier:   DF:40:12:B2:BE:41:70:F8:68:62:35:31:4F:EA:04:DE:36:FA:32:D6
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019FAAF60C5B6927180C9C8FD2FF1BC8BDAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          0A70
Signing time:             Tue 28 Jul 2026 23:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:19 +0000
Files and hashes:         1: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (hash: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU=)
                          2: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (hash: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA=)
                          3: NC1kNBCi5IA0F53iafyWv28tEdg.roa (hash: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo=)
                          4: _C1dxAYzgojRgjfg932a5o53DHI.roa (hash: MWoWdwypjbLGhZ5K85xQtJNC5yRCwOAiowUMTjpjyv8=)
                          5: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (hash: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: nGX3DaV79d/CEFEcmdaDEWhe4vp/hHlpQ1fIC77jFjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:0c:5b:69:27:18:0c:9c:8f:d2:ff:1b:c8:bd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Jul 28 23:01:19 2026 GMT
            Not After : Jul 29 23:01:19 2026 GMT
        Subject: CN=df4012b2be4170f8686235314fea04de36fa32d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:4e:22:17:ba:73:a2:b2:e4:32:47:c1:8a:
                    cc:06:e0:2a:56:53:67:be:58:63:1d:68:2a:87:9b:
                    80:ab:a8:08:98:96:af:1a:77:87:e1:d3:5a:80:59:
                    24:69:c1:16:b1:22:25:f0:ab:48:49:2d:e9:54:03:
                    ab:de:60:e1:e4:28:6e:50:11:8b:5c:98:55:a5:1f:
                    37:9a:3c:56:d1:7f:62:82:58:da:20:f8:de:63:37:
                    50:67:7d:69:ea:cc:5c:10:3f:38:43:37:d3:40:68:
                    eb:2d:6d:d6:71:f9:24:9e:16:a0:cd:69:1d:fa:03:
                    78:5b:13:f8:56:71:4e:9e:c5:06:5e:20:3d:6c:a7:
                    dd:87:a3:37:05:bc:50:ce:0b:b1:b5:68:76:98:ef:
                    f0:f7:58:ce:51:37:ee:83:7b:24:31:75:c5:b5:27:
                    53:8d:9a:9e:11:5d:30:4d:5b:b5:fe:6c:c9:84:86:
                    31:4d:18:60:d9:85:0a:01:da:fc:64:7c:3c:4b:8a:
                    be:6d:92:23:c4:29:6e:e3:ec:bd:4c:3e:5d:02:f3:
                    a1:15:45:51:aa:78:88:61:43:1d:bf:c4:7c:59:c9:
                    3a:0a:9f:a2:11:aa:27:f5:c5:1f:1f:0d:4a:de:94:
                    94:db:fd:d3:0a:a3:1d:bd:ce:d6:e7:58:96:df:04:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:40:12:B2:BE:41:70:F8:68:62:35:31:4F:EA:04:DE:36:FA:32:D6
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:74:94:01:f6:f4:f8:b9:62:fd:40:fe:ae:40:fe:56:22:
         db:0a:e5:12:52:da:63:5d:27:b9:72:0b:2b:0b:44:b3:0a:d9:
         5d:b5:ec:08:f8:9c:d3:98:ab:9f:02:2a:f6:44:54:65:16:97:
         f6:38:72:61:91:0a:35:9c:93:de:48:58:da:a6:ad:10:3a:cf:
         3b:08:73:51:60:ad:50:0a:0b:40:5e:4b:28:ca:83:a8:d4:94:
         f0:52:2b:15:1f:bb:93:37:75:be:0e:ce:be:1b:79:95:29:64:
         e5:d2:63:d8:46:5f:f5:8a:cf:72:56:87:ea:45:26:ca:8f:95:
         ab:75:6d:b3:cb:b2:29:5f:4e:aa:9c:07:ca:40:ad:f9:5c:f5:
         b9:a5:4a:7c:9b:f6:09:51:a3:89:a7:23:ac:d6:dd:ab:f7:3e:
         b2:0d:9b:e6:cd:85:55:25:a5:27:f2:12:7b:dc:1a:51:77:84:
         cf:c7:f1:3f:54:d3:c6:c6:56:06:67:41:a6:bd:a3:15:e3:55:
         bd:e4:15:41:89:1f:f5:c6:17:16:18:eb:02:7a:d0:6a:d9:f8:
         39:2f:5c:76:1a:b9:ea:13:a5:92:82:ae:8e:24:59:e5:9a:d8:
         98:cf:4e:c9:57:b3:87:8c:09:49:30:4f:51:fb:bc:ba:d0:77:
         03:eb:c1:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9gxbaScYDJyP0v8byL2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjYwNzI4MjMwMTE5WhcNMjYwNzI5MjMwMTE5WjAzMTEwLwYDVQQD
EyhkZjQwMTJiMmJlNDE3MGY4Njg2MjM1MzE0ZmVhMDRkZTM2ZmEzMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4lOIhe6c6Ky5DJHwYrMBuAqVlNn
vlhjHWgqh5uAq6gImJavGneH4dNagFkkacEWsSIl8KtISS3pVAOr3mDh5ChuUBGL
XJhVpR83mjxW0X9igljaIPjeYzdQZ31p6sxcED84QzfTQGjrLW3WcfkknhagzWkd
+gN4WxP4VnFOnsUGXiA9bKfdh6M3BbxQzguxtWh2mO/w91jOUTfug3skMXXFtSdT
jZqeEV0wTVu1/mzJhIYxTRhg2YUKAdr8ZHw8S4q+bZIjxClu4+y9TD5dAvOhFUVR
qniIYUMdv8R8Wck6Cp+iEaon9cUfHw1K3pSU2/3TCqMdvc7W51iW3wQi0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9AErK+QXD4aGI1MU/qBN42+jLWMB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyx0lAH2
9Pi5Yv1A/q5A/lYi2wrlElLaY10nuXILKwtEswrZXbXsCPic05irnwIq9kRUZRaX
9jhyYZEKNZyT3khY2qatEDrPOwhzUWCtUAoLQF5LKMqDqNSU8FIrFR+7kzd1vg7O
vht5lSlk5dJj2EZf9YrPclaH6kUmyo+Vq3Vts8uyKV9OqpwHykCt+Vz1uaVKfJv2
CVGjiacjrNbdq/c+sg2b5s2FVSWlJ/ISe9waUXeEz8fxP1TTxsZWBmdBpr2jFeNV
veQVQYkf9cYXFhjrAnrQatn4OS9cdhq56hOlkoKujiRZ5ZrYmM9OyVezh4wJSTBP
Ufu8utB3A+vBcw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:18:29 2026 by rpki-client