Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          Uc/TV99QNpiJ+hq4WnJP+NbzHIk1GgRGDgo+ZMJM24Y=
Subject key identifier:   8F:28:C7:96:C4:31:15:6E:96:C5:51:A2:ED:3D:56:4C:9B:3F:1E:1C
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019F8FEC30D27AC57E0977C93F1FFD0A6080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          09F4
Signing time:             Thu 23 Jul 2026 17:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:48 +0000
Files and hashes:         1: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          2: Otz-lRLGypvf7TIwVms5jHBwxYQ.roa (hash: DTvEpHl+5nUpwx5mYYuodxVy4t8FUL7YR0GMpNyL6AA=)
                          3: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          4: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: 3iQRxOxfN9SClvE4jdlPDwqZQ68OIpsvN2zEuEhMEQE=)
                          5: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:30:d2:7a:c5:7e:09:77:c9:3f:1f:fd:0a:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Jul 23 17:00:48 2026 GMT
            Not After : Jul 24 17:00:48 2026 GMT
        Subject: CN=8f28c796c431156e96c551a2ed3d564c9b3f1e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:ef:23:2b:8b:9e:64:a6:d2:10:bf:63:82:
                    37:4a:92:08:e9:0b:f5:c9:ab:bf:e7:b0:a9:f4:64:
                    53:6e:95:e0:69:ee:fb:39:79:16:35:ef:e6:61:8d:
                    1c:2b:60:2e:d7:e5:a1:92:0e:32:ae:e9:e6:ac:44:
                    e1:e2:34:56:68:b7:e0:dd:13:3d:4d:c6:ec:7a:aa:
                    6b:bd:27:cf:ba:d5:9f:56:eb:a7:c9:80:4a:96:45:
                    fa:5b:fc:58:25:c7:ab:68:b9:fc:98:37:ef:76:e7:
                    5f:04:f0:80:69:00:16:5d:85:8e:9e:19:45:bf:fb:
                    40:de:72:92:c5:61:5f:77:19:86:a3:67:6f:93:71:
                    c1:e3:df:ed:3b:dd:10:71:49:33:60:53:b3:48:f7:
                    23:f4:65:28:d3:14:c6:a6:de:2d:12:b7:59:6e:17:
                    2d:c3:2f:38:63:a7:72:da:bc:30:f6:f6:d3:f0:0a:
                    dd:2f:70:2c:0b:96:f2:11:d9:7e:0a:41:60:4b:f2:
                    aa:41:45:8c:da:d1:b6:c9:09:b0:b5:cd:c7:ef:74:
                    60:e9:59:81:0a:68:3c:75:52:92:65:8e:12:10:47:
                    5e:a3:73:be:8d:05:d7:21:b6:02:0d:1d:2c:1c:4d:
                    fa:9d:f4:9c:92:ea:40:d5:7b:d6:70:a4:ff:26:65:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:28:C7:96:C4:31:15:6E:96:C5:51:A2:ED:3D:56:4C:9B:3F:1E:1C
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:27:62:80:59:68:29:0a:8e:6e:d1:6d:df:a0:51:bc:f7:ab:
         92:20:7b:9c:d8:c9:c1:6a:b7:b0:e3:7b:ab:e5:fc:c0:ba:c9:
         1e:a3:6c:90:fe:90:59:e4:f3:aa:57:26:34:d9:2c:79:4e:d9:
         ca:f0:56:70:c1:ad:4c:96:c0:79:70:7d:53:b5:8e:4c:f4:6f:
         a6:48:63:5c:46:50:0d:49:82:d9:c7:1f:08:6b:2c:5e:7d:02:
         f9:45:0c:08:f4:89:7f:3e:66:60:da:55:f0:90:87:55:d4:e3:
         96:32:4c:fe:d2:4d:fa:d2:7f:c7:e5:0b:09:a9:78:72:5b:cf:
         52:7c:18:e8:8e:2f:fa:15:44:91:47:09:82:2d:e5:fc:5f:c9:
         a4:75:97:97:2f:0a:db:c8:ee:3b:70:be:a1:64:66:82:09:43:
         8b:7d:80:58:ae:6c:44:e3:c8:e3:47:fa:c0:2d:da:13:43:33:
         36:df:49:d4:05:71:44:f8:eb:e1:95:70:27:4f:9d:c2:6d:da:
         0f:98:c8:6a:91:b3:86:d4:86:dc:b4:30:74:ef:f6:f3:fc:ef:
         2b:07:11:17:77:07:5e:a1:a5:d2:ce:84:81:5f:4b:4a:39:a4:
         f3:8e:1e:30:e9:bf:7c:91:07:17:e6:3c:f3:58:f7:9e:50:66:
         af:48:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:14 2026 by rpki-client