Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File:                     dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier:          LIVO6NQ8u9Amee77xXzh1C26mTF07BGfJulvmDuFEmQ=
Subject key identifier:   8F:14:EB:A7:3D:76:C1:38:7F:35:9F:4B:AE:CE:6F:70:DC:65:D8:04
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer:       /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial:       019FA8627CCC79DD9B10D9D683AC5C72D771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number:          0B0B
Signing time:             Tue 28 Jul 2026 11:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:54 +0000
Files and hashes:         1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
                          2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
                          3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: iqFjvdDf+lu20WSpgRql3sEsIUlROjsh3a7O4qs+rdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:7c:cc:79:dd:9b:10:d9:d6:83:ac:5c:72:d7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
        Validity
            Not Before: Jul 28 11:00:54 2026 GMT
            Not After : Jul 29 11:00:54 2026 GMT
        Subject: CN=8f14eba73d76c1387f359f4baece6f70dc65d804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:b1:4f:ae:47:e6:17:10:0c:3a:64:57:4d:
                    3f:56:c8:fd:85:7a:e6:63:d0:29:94:a3:76:73:3a:
                    2a:07:29:34:2c:60:0d:bf:9b:b9:d7:c6:d5:2c:94:
                    22:e9:57:f0:73:11:47:1d:81:69:47:6c:77:e5:0d:
                    d0:4c:2c:31:a6:38:eb:d0:7e:18:28:83:c0:63:9a:
                    35:25:41:26:8a:14:e4:49:29:09:1e:2d:bf:b2:97:
                    cc:71:bf:c5:10:f4:5b:ae:9f:a8:81:1d:fb:6a:88:
                    38:00:f9:85:57:e0:ff:b2:86:8c:40:50:b2:fa:f1:
                    24:c4:cf:72:0e:f4:0d:cf:23:74:92:5f:be:1d:f5:
                    0a:6e:7f:12:52:54:0d:69:33:44:ec:8f:fa:d0:d8:
                    e6:18:7c:8b:1e:2d:4d:57:40:97:fb:16:4e:13:ca:
                    90:0f:43:c6:3a:a0:71:ff:61:e9:47:c2:a2:0b:0e:
                    ab:39:76:69:0a:0d:6f:e7:89:b7:6c:46:25:f2:5e:
                    78:a9:0e:89:a3:28:60:66:9e:aa:41:2f:28:a6:a1:
                    27:f8:12:cb:2d:6c:3a:e2:a4:2a:9f:80:0e:d3:76:
                    e6:51:ff:2f:cf:04:3d:06:ca:3e:99:24:33:13:92:
                    84:df:b2:91:a3:f4:5e:9f:1b:29:c2:6b:ac:06:c4:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:14:EB:A7:3D:76:C1:38:7F:35:9F:4B:AE:CE:6F:70:DC:65:D8:04
            X509v3 Authority Key Identifier:
                keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:39:2f:01:c3:5c:78:47:45:84:03:84:4a:4f:be:67:09:df:
         61:d4:17:fa:83:fa:5d:80:62:2b:dc:cc:16:73:85:08:8b:5a:
         8b:72:11:e9:ce:a3:54:7e:b3:06:13:f0:d3:7a:cc:02:93:8b:
         18:99:4a:9e:22:72:9d:31:17:6f:e6:e3:14:6d:15:5e:ed:1d:
         8a:4a:45:38:17:ee:d1:da:55:fc:6a:2a:fb:db:1f:fb:3f:64:
         0b:e9:3c:eb:c4:56:5b:d7:7c:d8:5c:b9:76:77:a9:5d:44:c0:
         64:01:cb:99:17:06:3f:fc:e3:89:b3:b5:7a:53:69:f3:f4:0e:
         ea:b7:e3:04:db:3b:28:45:ae:a2:6a:70:7a:54:47:08:3f:e7:
         7b:43:31:d3:62:62:58:a4:29:9c:dd:fc:17:92:07:d9:27:f0:
         99:4e:13:80:0d:c0:ce:46:92:cf:9c:1b:ee:6c:fb:c3:85:a1:
         89:2f:aa:57:1a:9c:86:0c:e4:13:69:ad:f1:07:b9:09:00:9e:
         3f:9e:46:f6:01:44:c3:a2:b6:f3:39:3d:0f:fc:89:e9:b0:f1:
         26:79:f3:5a:65:6c:73:a9:d3:c9:c0:c5:c4:05:bb:5e:09:45:
         a6:f9:de:ed:20:cb:ae:b2:24:41:14:b6:cf:1a:3a:eb:1e:c8:
         cc:78:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:52:58 2026 by rpki-client