Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File:                     ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier:          xf4HSqemSzbD7NchP0IkqTXJTMXRYLNlro11vZD+Q4A=
Subject key identifier:   04:30:D3:61:4E:40:25:C5:09:8A:FE:B0:2A:F6:E8:33:C9:D2:CA:A4
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer:       /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial:       019F9211C40D6E6EEF3CC76C9D699E338407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number:          10AB
Signing time:             Fri 24 Jul 2026 03:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 03:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:05 +0000
Files and hashes:         1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: BFNsEI8NuHdYEMvyitPtQlk+F6/FEAa7bfXBHdmmLkk=)
                          2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:c4:0d:6e:6e:ef:3c:c7:6c:9d:69:9e:33:84:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
        Validity
            Not Before: Jul 24 03:01:05 2026 GMT
            Not After : Jul 25 03:01:05 2026 GMT
        Subject: CN=0430d3614e4025c5098afeb02af6e833c9d2caa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:76:ef:a4:7e:97:00:d5:b3:2a:6c:7e:06:
                    51:52:11:44:ed:a4:fe:90:19:fd:c6:1d:49:57:39:
                    d6:d1:07:dc:d4:ed:2a:56:26:4a:e0:b8:6c:42:95:
                    0e:34:58:55:69:14:bb:38:91:e9:23:d0:5f:60:1e:
                    f9:9a:ff:ad:1b:6c:73:27:2e:2d:96:6f:76:ad:d8:
                    9b:d9:40:60:76:fa:68:80:4d:db:dc:6b:bc:9c:f1:
                    94:88:90:52:11:c0:9e:d6:f0:0d:dd:c7:42:79:c9:
                    66:18:2b:2f:68:8a:6d:5e:8d:89:4a:18:37:66:d2:
                    7e:d7:34:b7:7c:45:56:2d:1e:4c:c1:12:09:4e:c9:
                    0d:a6:9e:7b:b0:b0:22:c3:03:81:d6:04:f9:3b:bb:
                    62:a8:43:6c:a4:91:a5:60:95:73:c9:00:e6:74:24:
                    36:0b:f4:a2:76:26:07:69:37:53:e0:d0:b6:be:5d:
                    b5:30:ef:9c:26:4c:26:57:3a:45:e7:ba:fe:ec:cf:
                    e8:5d:cc:ff:e8:1d:30:e1:90:e8:34:e5:78:64:f2:
                    42:66:19:26:93:06:83:49:62:7b:5c:28:51:09:41:
                    d8:c7:77:6a:95:4b:12:b3:a2:5a:9f:dc:17:22:98:
                    ee:52:97:2c:42:5e:0d:c8:70:e2:62:11:61:c3:0d:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:30:D3:61:4E:40:25:C5:09:8A:FE:B0:2A:F6:E8:33:C9:D2:CA:A4
            X509v3 Authority Key Identifier:
                keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f1:3a:7e:f7:15:ce:71:45:75:2a:ea:a6:0b:2f:87:df:1f:
         1f:4d:24:e6:b8:2e:33:cf:5d:04:59:11:71:e0:b8:2e:8e:b5:
         54:d8:78:b3:0a:b4:c7:0e:68:f0:4b:fc:0e:11:d8:f1:ab:ab:
         a0:6b:2e:c9:0c:66:c1:5b:d7:2a:83:c1:ca:ad:b7:00:7f:6e:
         74:d7:18:09:44:0a:6d:69:6a:ef:ac:9b:b2:f3:b0:f6:e3:68:
         92:aa:b6:c4:e9:f6:6f:56:65:84:a8:51:22:13:bf:d1:77:af:
         6f:e7:4f:4a:cb:bc:20:6c:f9:4d:d2:ae:4d:71:72:be:10:9a:
         1b:42:ef:4c:3f:ff:0a:5e:39:a7:42:e8:ea:8b:b3:8d:4f:6d:
         e8:33:9e:a0:85:5a:28:f7:32:3d:00:99:a4:65:16:db:a2:b3:
         99:42:c6:ce:95:fa:94:32:de:eb:7f:82:52:d3:7d:a5:e6:3d:
         28:d4:71:76:06:07:35:ed:2d:6d:f5:af:00:ac:20:ff:2e:6d:
         e5:d2:4f:fb:59:d0:83:ba:a8:2a:86:52:41:18:45:78:bc:a6:
         63:1f:96:75:96:ec:a0:af:62:14:08:76:45:94:05:bc:39:c3:
         fe:af:f8:cf:29:41:de:81:1d:23:6f:5a:97:08:fb:3c:fa:d5:
         d3:20:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:10 2026 by rpki-client