Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File:                     zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier:          9jtR5pTqxh3qKxm0I1kBthXGf+oQnXkoEqj+0mPeABs=
Subject key identifier:   48:E5:C2:D2:00:E3:2D:C4:1F:88:B2:76:A3:E7:68:5F:7D:21:A1:D4
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer:       /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial:       019F92481E9B30157B069884F208C7383637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number:          0BC4
Signing time:             Fri 24 Jul 2026 04:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:27 +0000
Files and hashes:         1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
                          2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: q3mUnUx7lh0iw5c1HR4MT8+tf8AvAmGen4xX7Cw5xxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:1e:9b:30:15:7b:06:98:84:f2:08:c7:38:36:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
        Validity
            Not Before: Jul 24 04:00:27 2026 GMT
            Not After : Jul 25 04:00:27 2026 GMT
        Subject: CN=48e5c2d200e32dc41f88b276a3e7685f7d21a1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:d9:a3:75:c5:4c:ce:36:df:99:9d:58:e3:
                    5e:7b:78:40:42:4e:cf:3a:85:f1:71:1a:d9:3d:24:
                    e6:46:67:2c:c2:83:6b:d8:c2:3f:65:87:3a:e2:21:
                    77:c5:a8:d3:4b:e2:b9:41:5c:a7:93:b6:1d:cd:33:
                    ea:22:10:11:95:8d:45:12:84:19:14:df:c4:db:ba:
                    29:9b:d7:98:21:f2:24:a7:4e:31:fb:47:20:e8:80:
                    aa:e5:0d:79:c9:83:dd:19:5c:fd:82:50:60:a3:f1:
                    61:f5:c3:b1:d4:26:df:1b:e9:1f:44:61:31:3a:67:
                    5c:c8:1d:3d:8d:d5:53:47:7a:43:35:06:3b:e8:2c:
                    9a:4a:d2:4a:49:23:75:67:7d:b9:31:c2:cb:b8:a1:
                    18:34:a7:d2:f1:1f:4f:e9:e4:56:9e:d5:86:92:74:
                    78:15:3d:06:2b:f4:46:42:63:7e:83:6c:50:d9:82:
                    89:1f:f2:1f:c6:bd:8b:4e:6e:bd:53:c5:7c:31:45:
                    cb:03:1f:ec:b9:11:38:33:7e:6f:0c:64:c3:6e:e9:
                    77:d3:6b:e1:00:a6:ab:e7:2f:d5:b3:a0:b9:85:83:
                    da:27:ce:4e:46:65:67:82:34:d7:70:27:2b:1f:de:
                    ac:db:ae:55:b3:2a:45:4e:0c:8b:9b:e1:35:ca:ed:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E5:C2:D2:00:E3:2D:C4:1F:88:B2:76:A3:E7:68:5F:7D:21:A1:D4
            X509v3 Authority Key Identifier:
                keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:bc:aa:82:4d:07:41:3c:e8:e2:0b:4d:46:1c:6d:27:7a:
         a7:1f:a0:27:bc:af:d9:f9:44:28:d6:f7:30:ee:a2:65:47:c6:
         22:4b:fb:b3:e9:3c:d3:1f:bb:3e:6c:49:e8:13:9b:d0:19:d3:
         e5:d1:73:af:73:b7:e6:3e:f7:d2:90:92:d6:92:8d:37:5b:38:
         95:1c:8b:47:7e:32:95:ca:fa:15:6b:6b:6f:fc:2c:09:d4:f8:
         ee:2b:1d:c0:32:ba:09:f1:7a:51:3a:1c:2b:d6:a5:15:10:50:
         ac:48:f4:52:10:bd:90:4a:63:14:df:82:55:ef:75:1a:6c:1c:
         92:a5:12:6a:61:fd:bc:b6:aa:2a:5b:e6:73:58:bd:8d:64:7c:
         42:64:23:8d:3a:a9:62:a7:06:04:b9:9c:2a:00:25:64:59:e6:
         b1:b8:ec:c2:2e:3e:a5:31:a6:ef:02:ab:7a:3a:27:90:e1:3c:
         ad:a9:93:90:f1:ef:f3:50:76:b9:ff:d9:cd:ca:75:8e:52:0f:
         a4:f0:72:55:32:d4:f1:c8:68:54:f8:7b:01:45:1f:12:c7:cf:
         fc:5c:2b:42:ba:09:4e:0d:d7:14:56:f5:9b:52:67:d0:61:9f:
         07:b4:9f:64:45:93:88:4e:26:fa:33:c8:8a:b3:96:a2:7c:6a:
         27:b1:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:36 2026 by rpki-client