Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File:                     Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier:          Br9W7QrC2k01WsXdyLQCeZm/QigSwnw4nUSks3Bq23Q=
Subject key identifier:   AD:EB:2B:48:D9:9C:A9:C3:50:94:30:93:E8:B5:5B:2A:92:E2:D5:EE
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer:       /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial:       019F8F471FBD2DE706AD6FE106598FD4FF6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number:          0484
Signing time:             Thu 23 Jul 2026 14:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:30 +0000
Files and hashes:         1: 7eUHBGs5-5ccLiuJle7ggH6TQjE.asa (hash: Bnt40cDgGP9nDvETNeaVD27iCk/Fc7R7LcRjaxb8Cnw=)
                          2: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: IOvGmzYTzpH25Rm5E3MhRwlwfU5XTq739U5vqHbpwWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:1f:bd:2d:e7:06:ad:6f:e1:06:59:8f:d4:ff:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
        Validity
            Not Before: Jul 23 14:00:30 2026 GMT
            Not After : Jul 24 14:00:30 2026 GMT
        Subject: CN=adeb2b48d99ca9c350943093e8b55b2a92e2d5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:36:bb:c6:57:fa:21:0a:ec:c8:d9:b8:1f:
                    1f:6f:fe:c7:85:8b:40:da:10:32:76:00:43:0a:26:
                    c2:af:14:48:b6:9e:18:cc:04:43:61:d3:61:6e:42:
                    46:ea:e2:c7:6b:62:58:40:cb:ca:6d:45:a1:e4:1a:
                    45:c8:97:b6:02:f8:db:0c:26:a6:0a:31:06:49:0d:
                    d0:a0:d3:94:6d:b7:1c:49:6c:d2:e1:c2:f8:37:ee:
                    29:e2:43:b2:83:43:6b:7a:08:7b:3b:da:6e:49:c7:
                    6b:6b:c7:d8:0c:c2:bf:6c:f1:36:27:9c:21:9d:48:
                    cb:0e:92:43:11:3b:9e:43:1b:6c:a0:c3:1f:ea:04:
                    11:65:29:84:c0:8d:5e:1d:fe:ae:ed:e7:02:19:3e:
                    f2:43:94:1d:28:ad:a7:92:d2:48:ce:fe:26:04:da:
                    3c:a1:de:f7:dd:52:df:cb:21:c5:3d:9f:fa:f0:a5:
                    06:85:7f:f7:6c:05:1c:74:ef:3c:41:0e:7e:15:cc:
                    82:e0:84:19:6f:3f:98:7b:a1:3a:a4:7b:98:fc:a6:
                    aa:51:f0:90:54:95:e6:98:5f:0d:c5:71:fe:b4:e5:
                    23:bc:fc:79:ba:de:c2:21:7c:2d:19:fb:64:e4:29:
                    a0:f0:57:88:24:ed:7b:99:7c:0c:2b:3d:d1:46:2a:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EB:2B:48:D9:9C:A9:C3:50:94:30:93:E8:B5:5B:2A:92:E2:D5:EE
            X509v3 Authority Key Identifier:
                keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:0c:ef:be:51:c7:fb:94:d0:c6:37:52:73:0b:c8:f3:d4:
         60:96:d7:53:ea:4c:77:2a:58:ea:44:b0:c6:05:1f:b2:a5:9e:
         0b:e8:f9:dd:f3:c0:ec:82:41:c7:30:5f:10:02:19:11:ea:a6:
         ac:6a:aa:9e:a2:a9:12:34:81:47:3a:00:a9:9d:f8:f7:b0:fc:
         db:c2:d4:2e:fe:4c:44:fa:5c:2c:1b:b7:df:49:d8:d7:ab:68:
         5f:e5:f1:24:5e:28:55:8c:e3:2d:e4:73:1c:8b:28:69:13:1b:
         e0:8e:1a:83:5a:85:d1:ed:7f:df:67:82:2e:92:ec:65:e9:35:
         28:75:e5:bf:88:6d:e9:15:a8:a4:fe:85:33:47:cd:8f:33:74:
         03:6c:32:ce:1c:46:8c:9b:b6:4e:08:ab:b0:27:90:a6:76:7b:
         bf:51:25:7e:d7:e3:f2:e0:b5:4b:05:df:68:37:57:bf:4e:11:
         34:48:bf:d6:6f:54:45:98:0d:ec:df:a3:f2:b0:15:dc:40:4d:
         9f:25:ee:13:b0:6d:42:36:9c:a2:18:94:68:97:7c:24:4d:96:
         f9:a2:b8:7f:b4:e5:ca:77:d1:43:3a:93:a1:55:31:6c:89:8d:
         f6:61:95:e8:a2:aa:31:40:a5:54:d7:4b:97:e4:58:55:61:85:
         c8:b6:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:27 2026 by rpki-client