Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File:                     Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier:          5FTZXxatZEgHY77M03EEjJKDMFnTn0B+u4FCTWapxBQ=
Subject key identifier:   0D:A7:19:AA:EA:85:C7:72:18:A0:48:42:D6:68:D0:8F:96:98:C1:7D
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer:       /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial:       019F965C182362466855A45FF3F8F8D71046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number:          108C
Signing time:             Fri 24 Jul 2026 23:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 23:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 23:00:45 +0000
Files and hashes:         1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: k4cB7TSG2KMu2lDKsr6sEosxUsnIZZFYyFJjsQ+kVsk=)
                          2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:5c:18:23:62:46:68:55:a4:5f:f3:f8:f8:d7:10:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
        Validity
            Not Before: Jul 24 23:00:45 2026 GMT
            Not After : Jul 25 23:00:45 2026 GMT
        Subject: CN=0da719aaea85c77218a04842d668d08f9698c17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:77:cc:0f:50:06:31:64:87:2a:ec:77:c8:
                    73:b3:aa:5a:29:50:7b:c0:ee:8c:ea:01:a5:c8:fd:
                    75:2a:74:85:36:a4:9a:b8:bf:ee:9b:fe:be:88:c0:
                    22:d6:24:c4:cf:f1:fe:14:a5:55:e6:b9:42:f6:03:
                    82:5a:1a:75:e0:42:3c:65:8d:cd:c2:8d:14:00:5a:
                    47:9a:98:aa:61:d6:dc:52:2a:ee:1d:48:d8:f9:91:
                    3e:3f:6c:3e:2d:19:cd:e7:69:73:46:11:aa:87:73:
                    72:cf:9a:27:54:03:b4:92:ca:4f:b7:7f:5e:c5:8b:
                    4e:90:53:7f:68:02:36:51:cf:23:15:b1:e0:29:f0:
                    75:01:77:8c:00:50:d5:97:37:e5:1e:8c:5d:a5:cc:
                    be:7f:81:11:1e:56:89:b9:7c:56:32:6f:53:21:50:
                    81:44:74:40:e1:f3:05:68:ea:68:55:59:ce:3c:1a:
                    b7:49:94:51:90:ba:5c:2b:b1:91:0c:cb:d6:ef:5f:
                    a2:4f:29:31:29:49:38:7a:8d:96:70:5d:5c:d4:b5:
                    43:c6:42:e1:e0:91:90:e4:7f:03:20:79:13:7d:52:
                    32:63:ad:56:29:e1:78:8a:1e:cb:c1:8a:c5:e1:e2:
                    37:fc:e3:7e:60:ce:4d:5e:7b:46:b3:b7:d0:3b:f3:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A7:19:AA:EA:85:C7:72:18:A0:48:42:D6:68:D0:8F:96:98:C1:7D
            X509v3 Authority Key Identifier:
                keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:28:b0:8a:a0:a1:4c:8c:50:27:75:fa:4e:e8:0b:46:c3:ae:
         f1:4f:c7:73:7c:b1:76:f5:08:d9:35:64:ba:a5:50:5a:7e:08:
         08:3f:96:63:d9:04:64:7f:0f:d7:69:46:f3:02:73:99:9b:be:
         6d:87:d2:e7:6b:1c:aa:db:87:b4:72:68:a1:f9:3f:aa:87:66:
         9d:70:0a:4e:55:d9:21:ed:09:d7:9b:8c:32:3d:e7:8a:aa:0c:
         b2:5b:c9:7c:77:44:11:90:89:34:02:a1:13:5d:73:fa:62:eb:
         14:72:df:3c:13:53:16:37:d4:70:f6:eb:5b:1e:86:06:08:9d:
         22:80:ab:98:78:ca:3d:05:bd:77:43:6a:7d:6e:a8:32:c8:30:
         36:02:2d:01:f4:88:5d:99:6b:9d:f3:fe:e7:c5:e1:4d:5c:93:
         d0:18:a5:f4:e9:2b:75:3b:a4:e3:99:67:e1:bc:58:b2:83:ff:
         fe:0c:8d:47:63:dc:20:57:cd:b4:92:74:1c:e0:74:07:a6:24:
         42:43:75:c7:a1:97:fb:38:02:40:b3:09:a0:d0:78:88:84:fc:
         4c:c9:7e:67:ef:52:5c:12:04:60:53:30:b0:ea:28:53:20:87:
         5d:cb:97:ab:e9:93:1e:b2:00:74:38:fe:49:6a:07:c9:0d:e8:
         7f:bb:ce:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WXBgjYkZoVaRf8/j41xBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4
OGQ0ZWMwHhcNMjYwNzI0MjMwMDQ1WhcNMjYwNzI1MjMwMDQ1WjAzMTEwLwYDVQQD
EygwZGE3MTlhYWVhODVjNzcyMThhMDQ4NDJkNjY4ZDA4Zjk2OThjMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQF3zA9QBjFkhyrsd8hzs6paKVB7
wO6M6gGlyP11KnSFNqSauL/um/6+iMAi1iTEz/H+FKVV5rlC9gOCWhp14EI8ZY3N
wo0UAFpHmpiqYdbcUiruHUjY+ZE+P2w+LRnN52lzRhGqh3Nyz5onVAO0kspPt39e
xYtOkFN/aAI2Uc8jFbHgKfB1AXeMAFDVlzflHoxdpcy+f4ERHlaJuXxWMm9TIVCB
RHRA4fMFaOpoVVnOPBq3SZRRkLpcK7GRDMvW71+iTykxKUk4eo2WcF1c1LVDxkLh
4JGQ5H8DIHkTfVIyY61WKeF4ih7LwYrF4eI3/ON+YM5NXntGs7fQO/N76QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2nGarqhcdyGKBIQtZo0I+WmMF9MB8GA1UdIwQY
MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt
NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5
LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxCiwiqCh
TIxQJ3X6TugLRsOu8U/Hc3yxdvUI2TVkuqVQWn4ICD+WY9kEZH8P12lG8wJzmZu+
bYfS52scqtuHtHJoofk/qodmnXAKTlXZIe0J15uMMj3niqoMslvJfHdEEZCJNAKh
E11z+mLrFHLfPBNTFjfUcPbrWx6GBgidIoCrmHjKPQW9d0NqfW6oMsgwNgItAfSI
XZlrnfP+58XhTVyT0Bil9OkrdTuk45ln4bxYsoP//gyNR2PcIFfNtJJ0HOB0B6Yk
QkN1x6GX+zgCQLMJoNB4iIT8TMl+Z+9SXBIEYFMwsOooUyCHXcuXq+mTHrIAdDj+
SWoHyQ3of7vOVg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:39 2026 by rpki-client