Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File:                     0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier:          1EaSnlkn82lXsKZH96KyFRhJtEsDamGaL77kPPTPqcg=
Subject key identifier:   62:FE:A0:B0:9E:36:6E:8B:B7:B2:2E:78:69:63:1B:4C:1A:86:DB:78
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer:       /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial:       019FAA19E3884DE8ED548C09B30299B7893F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number:          0728
Signing time:             Tue 28 Jul 2026 19:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:51 +0000
Files and hashes:         1: 0MEQxwD9zfWWZH2uW7sIhd_mFno.roa (hash: bP379mwRyG+37X38gwvy3mtfEkchSNALzGhS0CYul3s=)
                          2: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: 4Z1DjVPMRIAviEEAaG+YUwrT87ze9GLDjK/vbWp2Eok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:e3:88:4d:e8:ed:54:8c:09:b3:02:99:b7:89:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
        Validity
            Not Before: Jul 28 19:00:51 2026 GMT
            Not After : Jul 29 19:00:51 2026 GMT
        Subject: CN=62fea0b09e366e8bb7b22e7869631b4c1a86db78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:b3:eb:8e:78:92:18:91:d3:22:f4:b4:ff:
                    02:73:02:66:83:85:d7:8e:e4:4e:5a:9c:b7:08:07:
                    55:5d:76:02:02:a6:d1:6d:da:64:3b:96:72:02:42:
                    2f:fa:d3:34:01:b6:5b:00:17:4a:9e:50:27:7f:f2:
                    57:37:d2:3a:70:17:cb:53:f4:31:b0:37:cf:9f:9a:
                    37:f0:9d:a4:d6:83:05:68:81:b9:39:05:b4:3c:01:
                    de:0f:c5:c5:68:67:36:21:63:66:b5:9b:09:52:b1:
                    51:2f:60:66:7e:3d:ab:94:66:9f:40:9d:6c:86:43:
                    f7:06:c5:41:ad:6c:9c:33:bb:ee:92:a8:d2:ab:31:
                    eb:f3:cc:4f:4f:c3:7f:fe:19:55:e3:00:a7:0c:33:
                    1a:69:b2:60:5e:73:ff:fc:5b:b0:a7:dc:3e:1c:6f:
                    05:04:4d:b7:f8:46:d0:f3:d4:06:f2:9d:00:b2:13:
                    f8:20:01:f2:34:d3:f3:39:d3:dd:6d:4a:44:e4:9d:
                    65:ac:b1:d3:57:e7:b6:92:b6:51:35:9c:71:04:70:
                    42:18:dd:f0:a2:16:5f:f9:cf:a1:f2:b6:e4:db:32:
                    11:59:45:d9:78:0c:c3:32:a5:4f:d6:63:f9:98:19:
                    66:69:c5:a7:81:36:ce:fc:26:44:f7:80:33:14:99:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FE:A0:B0:9E:36:6E:8B:B7:B2:2E:78:69:63:1B:4C:1A:86:DB:78
            X509v3 Authority Key Identifier:
                keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:66:74:99:97:40:01:b2:f6:eb:d7:71:03:ef:c0:64:5d:d3:
         9a:23:83:87:65:29:17:0d:96:24:36:51:97:9c:50:85:46:8b:
         74:94:07:ce:3f:49:c4:d7:d6:80:f7:b8:4c:35:34:24:49:54:
         68:ce:45:9b:f3:4b:41:80:08:c4:bb:aa:40:cc:50:ae:10:d6:
         10:d2:25:9a:8c:44:26:65:dd:75:9b:96:06:6d:49:de:5b:5a:
         23:f1:3c:12:3b:e9:42:8d:b7:e2:a7:8f:6e:9b:71:9d:3e:23:
         96:fa:69:82:84:85:da:b7:c4:ec:5c:90:f0:5d:75:53:06:8b:
         ca:5a:ff:9b:a0:6f:61:7b:10:ea:c5:c1:91:23:f5:9d:d1:79:
         22:0e:76:43:49:02:13:91:fa:a8:0f:65:6c:96:17:9b:26:9b:
         f9:c3:bc:1f:d5:0e:c3:1e:44:91:5a:f4:82:9d:8f:84:36:c4:
         eb:a2:78:ac:6e:72:83:81:09:33:27:19:0c:de:07:89:83:8f:
         90:97:f5:c3:4a:1c:55:d4:5d:28:10:2d:11:93:02:6c:87:4f:
         0d:98:22:4c:2d:d3:8c:b7:51:18:60:26:7c:67:20:8f:f6:44:
         c5:5e:f8:b5:2b:e4:4f:77:b7:0f:c8:a2:e3:03:b4:62:84:a1:
         49:6b:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:49 2026 by rpki-client