Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File:                     ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier:          bE8iUGetScNCLBp/jrovvFMAT+H0pbBG55ATk9JNpEs=
Subject key identifier:   3A:4F:FC:CF:AF:7C:37:D5:33:A3:0A:5C:77:E5:01:46:04:3B:CB:B0
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer:       /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial:       019FAB2C9C01E81A7D8B374F48752E56C601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number:          02C8
Signing time:             Wed 29 Jul 2026 00:00:55 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:55 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:55 +0000
Files and hashes:         1: 8ndDa5rRng5A6n53ieZF5n0zI7s.roa (hash: KtGt0NdlDvyNnvEnoJfeg2xWBfVSAuPvOu/PVmj7YGM=)
                          2: VPi2ebLJADEknE0vjMS8E-YQvPQ.roa (hash: oO735iZZLpkD9NxJ8YTop9o4debqleHv7iMJ/1qzafM=)
                          3: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: yhwc4ru5y5kPx50cAXQpzDdeZlNZeI5GCe3o6LqXWVU=)
                          4: uR2ylumTmfT3BQFedfgIoqmEIcM.roa (hash: OT+mNpsQIWtCh4SyPSeorwW+75Abd8tYhpy5oP3ZE18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:9c:01:e8:1a:7d:8b:37:4f:48:75:2e:56:c6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
        Validity
            Not Before: Jul 29 00:00:55 2026 GMT
            Not After : Jul 30 00:00:55 2026 GMT
        Subject: CN=3a4ffccfaf7c37d533a30a5c77e50146043bcbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:ed:8b:c3:6d:85:bf:79:d9:19:2d:5a:f5:
                    35:2e:d5:a6:9c:b9:7e:76:1e:5f:99:af:ae:83:ab:
                    94:72:e7:52:90:cd:cd:77:55:50:21:b1:45:10:fc:
                    6c:cb:95:e0:97:36:5e:a5:7a:7d:5d:ca:a1:b9:e7:
                    c8:06:16:10:50:cb:9a:07:1f:bf:a7:e2:e4:62:af:
                    12:e9:31:c8:3e:43:6f:2d:3b:75:b4:b1:07:1c:4a:
                    93:9a:a6:bb:5e:af:8b:a2:7a:7a:ed:04:20:71:9b:
                    27:4a:50:a1:95:c5:25:9f:59:94:3f:fc:11:6d:a6:
                    09:d4:d8:36:2a:d8:a4:66:e5:3f:b2:8e:46:0a:d5:
                    c2:5f:9f:fb:6a:33:79:b2:07:3e:a1:e2:e4:79:6c:
                    5e:63:cb:32:e7:1e:99:5f:43:f1:3a:bc:53:3f:a9:
                    26:a0:a1:ef:06:80:15:36:91:4f:6b:17:04:3d:f9:
                    e2:e5:66:05:d1:e5:b4:c5:2d:c0:2c:74:65:cb:89:
                    c6:8c:b2:ce:58:df:d0:e0:a8:9d:a1:f6:84:d8:a4:
                    8b:75:5b:79:7e:e3:84:28:4e:aa:04:29:81:df:ae:
                    2d:f5:c0:84:5b:67:a9:41:37:2e:0e:db:38:73:66:
                    67:3d:ef:8d:d5:23:f8:c9:0b:2a:9e:ed:93:d8:36:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:FC:CF:AF:7C:37:D5:33:A3:0A:5C:77:E5:01:46:04:3B:CB:B0
            X509v3 Authority Key Identifier:
                keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a0:a1:a9:cb:ee:2b:b1:46:a7:f3:cf:cf:9a:41:2f:17:9a:
         97:07:ca:f0:b4:b3:71:a9:c4:1b:aa:18:cb:5f:c5:88:67:fc:
         eb:36:6a:47:41:8d:2c:e4:07:79:2c:ab:70:26:5c:0d:de:17:
         df:7e:1d:00:d2:59:82:01:8b:8e:f0:b5:5e:60:0e:5a:78:a3:
         74:51:bc:ba:0f:c9:81:d9:fa:ca:be:1a:91:0c:86:20:5a:cd:
         c1:18:af:e2:f5:03:95:b5:92:11:80:ec:fb:a3:bd:f8:3d:8c:
         98:cb:81:98:3e:31:33:7c:35:12:66:27:15:6b:72:1a:39:61:
         98:70:d9:6d:e0:03:9a:c0:ed:b4:ff:5a:0a:1b:df:c0:cc:15:
         22:a6:85:44:f9:08:29:4e:c9:9f:a6:6d:bd:d6:4a:ee:d2:6f:
         f5:ac:34:06:c3:70:94:10:0c:5f:cc:e7:17:61:54:23:ad:c9:
         6d:4d:6c:c3:33:77:c4:37:a1:1f:b7:ed:4f:3a:95:08:6f:48:
         c4:5d:9d:85:a9:0d:90:eb:0f:22:64:e7:b4:75:af:d4:75:78:
         b5:c6:ab:66:db:31:82:b2:6c:8b:54:21:72:a7:49:8d:76:aa:
         95:a9:29:23:47:76:39:e2:f6:bc:9c:f1:47:5c:d4:09:d8:2c:
         41:75:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:45 2026 by rpki-client