Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File:                     ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier:          Zc0yKMgwVmIlWVqGaece8leFhpxWWjoDJ5xyLXqD0+A=
Subject key identifier:   7D:79:CB:17:5F:C3:FB:A4:B5:95:FA:CB:AF:E7:23:88:23:86:20:99
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer:       /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial:       019F94DC0E6B4AC4F1A0B5D2ACC0A4280268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number:          15C5
Signing time:             Fri 24 Jul 2026 16:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:17 +0000
Files and hashes:         1: G2vY-XyuXPEnGT50VL_DR2MGs8Q.roa (hash: FvP89IRchdhDOJHirpo71l3u2H6iIX16MtsmawYXGPM=)
                          2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: a9t7IENu/SbfhBoy27eu011IFbI4kQ0zsUaUN4gqfdA=)
                          3: qGKXqkQ2oiJ9zvb8d_lurIkeU6E.roa (hash: wXMPkR08yI/8IECW5Ighi7GQrII+Bv0ovubrEn3k1cs=)
                          4: wBsX-GYO-aEIdD-OnXmUqDDMdy8.roa (hash: rlyJ+Y0bf63UimFOrSGhNhA9pMMoo7xQfy3KPHlY1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:0e:6b:4a:c4:f1:a0:b5:d2:ac:c0:a4:28:02:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
        Validity
            Not Before: Jul 24 16:01:17 2026 GMT
            Not After : Jul 25 16:01:17 2026 GMT
        Subject: CN=7d79cb175fc3fba4b595facbafe7238823862099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1f:b1:f3:7d:48:1a:75:c9:99:af:eb:a7:1d:
                    c2:db:a3:f0:5e:1a:63:51:16:4a:98:68:43:1c:e3:
                    e8:19:56:aa:a9:e7:d7:b7:6c:ac:35:a1:1f:1e:6b:
                    7f:cf:e7:86:8a:60:45:16:6b:3e:30:56:05:47:7a:
                    67:3b:ae:e4:e4:2e:b0:5c:07:1a:e0:f4:c3:eb:d0:
                    58:b5:62:85:26:b4:a3:f7:b3:91:10:52:8b:a6:ec:
                    2a:84:1d:bb:cf:ce:e3:d4:b9:88:16:a1:68:f7:e8:
                    b2:d0:f4:26:1f:ac:b7:d1:d1:8b:4a:78:f2:49:5c:
                    4b:48:67:9b:50:59:c1:ce:b9:b4:6f:9c:37:09:9b:
                    ba:90:a0:09:f6:db:34:66:2f:6f:79:c4:bb:a3:c0:
                    7b:32:38:50:ed:4b:49:95:36:84:3d:82:b1:03:22:
                    cc:c4:cd:82:3d:55:4b:9e:e0:21:82:0b:d9:19:11:
                    5a:9c:79:a3:79:81:25:71:a4:57:eb:10:ed:c2:d6:
                    7f:7d:77:5f:af:07:1f:5e:13:58:a2:73:f2:43:55:
                    15:61:9b:79:78:d9:ee:e8:4f:f9:e0:2f:86:4e:1c:
                    e3:8b:ab:80:68:14:a4:7f:60:76:c2:cb:6a:b8:87:
                    09:84:3d:03:a8:8a:66:3b:75:d1:cf:2b:fc:f5:3c:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:79:CB:17:5F:C3:FB:A4:B5:95:FA:CB:AF:E7:23:88:23:86:20:99
            X509v3 Authority Key Identifier:
                keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:6c:7a:d4:4a:cf:36:82:e5:4b:04:eb:7d:e8:f6:6f:2c:
         75:07:8a:9e:88:4e:46:a5:65:a8:12:09:06:40:e7:39:bd:12:
         9f:d8:26:e5:b7:14:c4:43:54:a0:01:1c:d6:e4:c4:64:0d:b5:
         fa:69:47:b5:c1:79:60:2b:c7:c2:22:f7:82:64:f2:6b:6a:c1:
         22:15:5a:97:74:01:44:79:4f:16:3e:98:62:7e:93:4a:13:f1:
         ef:34:9c:2c:d9:10:96:34:4d:fc:6e:67:9c:dd:67:ea:85:ee:
         9c:d3:4f:3f:6d:76:f4:36:d4:6d:36:83:2e:4f:50:cd:3a:cd:
         c6:8d:34:95:cb:1f:bb:cd:a3:de:a8:14:18:c1:f6:1c:fd:7e:
         53:ae:d5:85:95:c7:8f:cc:00:0c:76:1f:9d:78:80:5e:af:24:
         cf:a2:85:45:39:46:33:d6:eb:93:ab:19:29:00:4f:c4:13:7e:
         c8:bc:03:6a:d8:43:65:44:d7:77:3e:7d:f3:cd:fc:af:4b:76:
         87:72:b4:58:06:1f:84:b6:6c:99:94:da:56:ef:99:a6:fd:e2:
         78:67:0f:f1:00:7f:7e:76:ef:e0:b6:59:b3:84:d0:9e:e6:c4:
         5b:e6:bc:a6:e9:47:d6:7d:2a:94:55:cc:ac:64:4c:ba:bc:ef:
         01:18:23:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U3A5rSsTxoLXSrMCkKAJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODljMzk5NWUyNDYxZDVhNTJmZDRmMTAwMDc4MmY5OWE0
ZDQ4MjIwHhcNMjYwNzI0MTYwMTE3WhcNMjYwNzI1MTYwMTE3WjAzMTEwLwYDVQQD
Eyg3ZDc5Y2IxNzVmYzNmYmE0YjU5NWZhY2JhZmU3MjM4ODIzODYyMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R+x831IGnXJma/rpx3C26PwXhpj
URZKmGhDHOPoGVaqqefXt2ysNaEfHmt/z+eGimBFFms+MFYFR3pnO67k5C6wXAca
4PTD69BYtWKFJrSj97OREFKLpuwqhB27z87j1LmIFqFo9+iy0PQmH6y30dGLSnjy
SVxLSGebUFnBzrm0b5w3CZu6kKAJ9ts0Zi9vecS7o8B7MjhQ7UtJlTaEPYKxAyLM
xM2CPVVLnuAhggvZGRFanHmjeYElcaRX6xDtwtZ/fXdfrwcfXhNYonPyQ1UVYZt5
eNnu6E/54C+GThzji6uAaBSkf2B2wstquIcJhD0DqIpmO3XRzyv89TwPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH15yxdfw/uktZX6y6/nI4gjhiCZMB8GA1UdIwQY
MBaAFGaJw5leJGHVpS/U8QAHgvmaTUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMt
NDFlYWExZmRlMTFiLzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMtNDFlYWExZmRlMTFi
LzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmStsetRK
zzaC5UsE633o9m8sdQeKnohORqVlqBIJBkDnOb0Sn9gm5bcUxENUoAEc1uTEZA21
+mlHtcF5YCvHwiL3gmTya2rBIhVal3QBRHlPFj6YYn6TShPx7zScLNkQljRN/G5n
nN1n6oXunNNPP2129DbUbTaDLk9QzTrNxo00lcsfu82j3qgUGMH2HP1+U67VhZXH
j8wADHYfnXiAXq8kz6KFRTlGM9brk6sZKQBPxBN+yLwDathDZUTXdz598838r0t2
h3K0WAYfhLZsmZTaVu+Zpv3ieGcP8QB/fnbv4LZZs4TQnubEW+a8pulH1n0qlFXM
rGRMurzvARgjrQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:52 2026 by rpki-client