Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File:                     Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier:          CHM7UkTfL11p8LCSOiHf0xMPymbid6tzpc2xpg9BsZ0=
Subject key identifier:   B4:CE:E9:71:44:FC:F6:56:AF:11:1B:C0:79:B0:F9:87:8F:38:23:59
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer:       /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial:       019FAC07FB621256264F6740EEF0C377FB96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number:          08CF
Signing time:             Wed 29 Jul 2026 04:00:31 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:31 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:31 +0000
Files and hashes:         1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
                          2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: RxdC45oMUS43AsMN0hiol3MEHJ2RHB0lQVy8hyzWYgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:fb:62:12:56:26:4f:67:40:ee:f0:c3:77:fb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
        Validity
            Not Before: Jul 29 04:00:31 2026 GMT
            Not After : Jul 30 04:00:31 2026 GMT
        Subject: CN=b4cee97144fcf656af111bc079b0f9878f382359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:05:bf:cf:8b:74:a6:16:31:c0:f9:46:08:
                    8b:72:19:be:5f:40:68:37:d1:4f:ee:3f:75:6d:9a:
                    3d:d9:9b:1f:db:d4:20:cc:5f:a1:2b:d2:ab:29:53:
                    65:8b:96:03:b0:69:a0:e7:7f:ce:92:a5:34:69:10:
                    a7:37:79:4e:3a:5c:a6:25:b9:e6:1c:0a:fe:70:a9:
                    b5:40:4e:25:a2:aa:8d:1e:de:b3:73:62:55:4c:0c:
                    c2:22:8d:04:62:75:08:59:c7:f3:41:1f:03:4a:a7:
                    eb:d3:a0:4e:f6:28:88:29:40:15:18:11:7b:f9:ce:
                    da:a7:9b:51:33:cb:81:f6:b4:7f:99:fc:db:c2:5d:
                    5d:e2:67:b4:99:30:88:07:8d:ab:03:e2:53:06:8d:
                    4c:6b:37:1f:23:28:c6:fb:35:ff:13:18:1d:5f:2d:
                    44:09:0c:a4:c2:d3:14:00:1c:06:44:9c:12:c0:af:
                    54:36:41:21:8e:8e:c0:a1:95:7c:db:93:16:6c:8a:
                    98:b2:a5:05:a0:ce:0e:bc:e2:0a:d8:58:dc:08:2c:
                    41:45:7b:dc:4c:79:ec:16:d8:c4:20:78:65:93:1c:
                    3d:78:30:89:2d:aa:a5:af:c0:25:7c:13:23:41:d2:
                    b8:8e:e8:62:70:bd:d4:80:b6:a7:c0:62:e1:3e:c0:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CE:E9:71:44:FC:F6:56:AF:11:1B:C0:79:B0:F9:87:8F:38:23:59
            X509v3 Authority Key Identifier:
                keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2c:b5:67:33:9c:69:31:7c:d3:19:f5:5b:16:0e:28:ac:ab:
         94:cd:65:c5:5c:e2:c0:61:8d:e5:95:da:33:5a:5d:7c:85:fd:
         5c:61:9f:4b:86:73:24:b1:12:5f:ad:2a:9a:d4:5a:d2:63:19:
         72:61:c8:47:f7:a2:5d:09:84:ac:ca:a5:1b:69:09:a6:ff:dc:
         01:91:d4:36:7f:80:23:5e:71:41:22:a6:35:e5:fc:71:f9:86:
         7e:37:f7:77:e8:88:e1:9a:05:49:b4:84:a2:11:22:85:49:5a:
         ce:bb:98:0b:1e:02:4a:ac:6c:29:19:56:c1:23:ca:f8:a8:5e:
         98:40:45:ac:79:5e:2c:ef:78:a3:02:d5:9e:fd:ec:ee:47:0a:
         23:41:54:3d:8a:e0:3a:e0:5b:42:ec:e0:9e:ce:72:4d:5b:54:
         e7:c5:d9:2d:42:55:6c:de:74:aa:d3:8f:41:ec:bc:cf:b3:c9:
         64:cc:66:78:5d:71:e3:25:f9:25:57:ef:60:ff:ad:f1:71:1a:
         e3:a9:c4:b6:65:07:d1:a1:57:dc:4a:bd:6e:65:e0:ac:5b:4f:
         e2:f6:1e:90:2f:c0:d1:cd:d6:bb:10:98:be:ee:6d:56:9b:bf:
         f0:4e:e2:b0:ce:88:b3:1b:26:e3:ee:d5:62:06:cc:80:21:3e:
         c0:61:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:30:04 2026 by rpki-client