Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          soQ/8vQDRbbDS2+WilJzY/xargEHIyADQ8gSye67I1o=
Subject key identifier:   60:EA:F3:1C:40:42:F9:3C:2E:C5:0A:C7:68:71:DC:EF:F0:B5:13:3A
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       019F9248DF0E1708800316458900DDC26FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 04:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:16 +0000
Files and hashes:         1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
                          2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
                          3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: nKB3I8u0u/JCKEIflyayv6aVhCbS7oVtAIch/IPp5mU=)
                          4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:df:0e:17:08:80:03:16:45:89:00:dd:c2:6f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Jul 24 04:01:16 2026 GMT
            Not After : Jul 25 04:01:16 2026 GMT
        Subject: CN=60eaf31c4042f93c2ec50ac76871dceff0b5133a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:97:17:bc:26:0f:12:e0:5b:e2:02:dc:1d:
                    ab:df:bc:61:3f:5a:38:52:b9:9b:47:c3:8b:38:92:
                    e8:14:af:d0:44:b7:da:00:74:e4:b6:ca:eb:fc:dd:
                    c6:59:a5:6d:62:12:57:92:b1:4d:b6:ee:43:f3:a3:
                    de:d2:f5:85:a4:4c:83:9c:e9:fd:b1:7f:60:42:26:
                    f9:ed:1c:f3:de:54:6a:13:fc:0b:fb:29:07:03:fa:
                    aa:0c:c9:01:18:57:61:7c:17:b0:41:1d:22:d1:c7:
                    ae:f2:50:7c:cb:d5:4d:7d:60:5e:af:e3:7a:df:fd:
                    84:75:a0:55:8f:a1:5b:83:15:ba:18:fd:f7:36:81:
                    32:7d:ee:8f:f5:34:57:87:a5:dc:b1:a6:7b:db:7d:
                    b5:83:46:00:4b:07:53:e7:8d:2f:d6:d8:5b:85:1c:
                    b0:05:a4:0a:60:bc:38:75:53:17:98:9c:20:65:6c:
                    ac:14:50:c3:67:9e:3e:b3:0d:75:2c:82:f7:1f:5f:
                    1d:e8:0d:f3:9b:23:84:0c:80:58:63:9e:e2:31:81:
                    65:e5:51:c1:ac:77:9f:d2:e4:dd:25:86:bd:96:98:
                    68:c0:dd:e0:a7:55:83:5b:bc:b1:64:85:2c:28:8a:
                    a7:41:d8:be:00:b9:24:2b:61:bc:3c:27:e0:13:b2:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EA:F3:1C:40:42:F9:3C:2E:C5:0A:C7:68:71:DC:EF:F0:B5:13:3A
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:b8:d3:ba:4c:e5:47:48:b5:69:8e:ed:b5:33:de:e6:6a:
         5a:44:c1:6e:15:2d:18:4d:f3:2c:bd:49:a6:9e:66:20:7d:48:
         88:2a:9e:22:cd:a9:36:07:85:2b:1b:09:29:3d:46:ac:40:06:
         77:72:b5:6c:94:fe:26:41:87:fc:36:f5:b3:79:28:fe:0b:db:
         b7:c5:23:99:fa:1e:84:45:e4:4b:76:b8:b7:f6:38:9e:1d:a9:
         1b:cd:8a:d7:b6:a1:47:eb:7a:a8:88:dd:f6:04:7c:f2:54:ea:
         58:9b:8f:94:c1:71:28:b4:07:d6:4f:4e:13:61:c3:86:45:96:
         63:43:d2:90:76:b8:b1:3e:2f:21:4c:c4:d5:0a:96:9d:2f:d0:
         5f:dc:69:ae:09:78:d8:76:4e:a7:84:2e:95:7c:2a:f6:4e:8d:
         da:2d:3a:91:47:c1:6e:a5:5a:9c:66:bc:84:80:4e:5f:f8:01:
         84:dd:66:b9:4c:bf:f7:83:3f:23:a5:42:1c:20:5e:c7:26:16:
         0e:5a:04:d5:b8:de:16:32:6e:ab:50:f5:7f:bf:43:6d:0d:cf:
         04:aa:15:70:97:4e:77:63:f6:44:44:65:4f:85:22:3a:02:8f:
         30:90:cd:66:0a:05:f3:d5:2a:2e:9d:ac:17:0b:7a:2c:4e:d8:
         f5:bd:60:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSN8OFwiAAxZFiQDdwm/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj
ZDJhOTcwHhcNMjYwNzI0MDQwMTE2WhcNMjYwNzI1MDQwMTE2WjAzMTEwLwYDVQQD
Eyg2MGVhZjMxYzQwNDJmOTNjMmVjNTBhYzc2ODcxZGNlZmYwYjUxMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDOXF7wmDxLgW+IC3B2r37xhP1o4
UrmbR8OLOJLoFK/QRLfaAHTktsrr/N3GWaVtYhJXkrFNtu5D86Pe0vWFpEyDnOn9
sX9gQib57Rzz3lRqE/wL+ykHA/qqDMkBGFdhfBewQR0i0ceu8lB8y9VNfWBer+N6
3/2EdaBVj6FbgxW6GP33NoEyfe6P9TRXh6XcsaZ72321g0YASwdT540v1thbhRyw
BaQKYLw4dVMXmJwgZWysFFDDZ54+sw11LIL3H18d6A3zmyOEDIBYY57iMYFl5VHB
rHef0uTdJYa9lphowN3gp1WDW7yxZIUsKIqnQdi+ALkkK2G8PCfgE7K/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDq8xxAQvk8LsUKx2hx3O/wtRM6MB8GA1UdIwQY
MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct
NTVjM2QxMjllYzI4LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4
LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5+407pM
5UdItWmO7bUz3uZqWkTBbhUtGE3zLL1Jpp5mIH1IiCqeIs2pNgeFKxsJKT1GrEAG
d3K1bJT+JkGH/Db1s3ko/gvbt8UjmfoehEXkS3a4t/Y4nh2pG82K17ahR+t6qIjd
9gR88lTqWJuPlMFxKLQH1k9OE2HDhkWWY0PSkHa4sT4vIUzE1QqWnS/QX9xprgl4
2HZOp4QulXwq9k6N2i06kUfBbqVanGa8hIBOX/gBhN1muUy/94M/I6VCHCBexyYW
DloE1bjeFjJuq1D1f79DbQ3PBKoVcJdOd2P2RERlT4UiOgKPMJDNZgoF89UqLp2s
Fwt6LE7Y9b1glQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:40 2026 by rpki-client