Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          hhUnYxe24eHNDLt84VRc+uiLpCsdXzqfAwTz1qIYjoo=
Subject key identifier:   4D:CF:F0:EC:61:60:13:8B:DE:F3:DD:74:32:3D:3A:D2:CC:FB:AB:74
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       019F91360030E456946AC734C0A154F86B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          19F1
Signing time:             Thu 23 Jul 2026 23:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:02 +0000
Files and hashes:         1: AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa (hash: 0umZskah+CEr8ip186+RE27wIFvtLRl5c7E3qXa1bJA=)
                          2: C2VLEg7n0tawM_YjuKM0EwCOIdU.roa (hash: YkJt5/I0ermqnHQNrdy2/02bafN5wEDvzpqYuCqnw2s=)
                          3: ED4SThrzQXYcrC-AEArSen9tJXk.roa (hash: 7Cm2n+7edQ/TSDNLB06WjyawgEuLOZa4VST/mcq8bUM=)
                          4: c39N67bVxmJiemTHJXkT_8LO_Jc.roa (hash: aB4P6VURUO7PJEhrDe97gwqnhvifkhr4AJMJpATFX6E=)
                          5: xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa (hash: Pww3BJWwUmNPj1/iW/aWXYB7NNqY6jVB3VyHrlLqwhA=)
                          6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: bcR+fUnB2dpAWmCC0RqxThC9bXOGxpozXiUDAkyz8rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:36:00:30:e4:56:94:6a:c7:34:c0:a1:54:f8:6b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: Jul 23 23:01:02 2026 GMT
            Not After : Jul 24 23:01:02 2026 GMT
        Subject: CN=4dcff0ec6160138bdef3dd74323d3ad2ccfbab74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:00:d2:ab:95:c1:37:48:59:db:81:03:fa:84:
                    c1:49:24:cd:80:06:3f:49:dd:47:e0:66:f5:40:6f:
                    44:47:5f:59:d5:ad:e9:51:31:e2:1c:78:94:c1:63:
                    65:44:09:a3:02:98:0d:d8:7c:09:39:92:87:77:3c:
                    d4:37:04:91:26:ea:f4:6d:15:27:27:4f:b1:72:de:
                    d9:3f:6a:8b:55:44:9c:85:ee:39:23:22:4a:f8:69:
                    d1:88:6e:79:3b:1e:03:82:fa:d5:6e:60:6b:52:d4:
                    00:9e:32:7f:72:1b:3d:e7:68:e3:bf:4d:2a:da:53:
                    70:9e:ef:1b:cd:c9:b2:6c:d0:9f:c5:dc:1f:33:07:
                    32:5d:ae:b8:b5:99:b2:e0:88:b1:67:24:69:7a:cd:
                    dd:a0:94:a8:6f:29:8e:d8:54:c5:3c:5b:b8:29:62:
                    0e:96:1b:bb:df:7c:81:29:ed:19:d7:9f:f1:46:47:
                    fd:a6:89:c6:df:ea:aa:1a:53:b5:30:c2:85:14:53:
                    6c:5a:04:bc:94:88:1f:cb:7a:16:22:c1:5c:da:40:
                    8b:15:3b:c7:f6:a3:29:9e:6b:df:de:9a:af:b4:0d:
                    54:83:81:ae:eb:c1:21:8e:c4:c4:05:9f:64:b5:27:
                    86:b0:e6:88:ee:35:17:43:65:f0:f7:b6:49:67:93:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CF:F0:EC:61:60:13:8B:DE:F3:DD:74:32:3D:3A:D2:CC:FB:AB:74
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:1c:5f:f4:dc:24:05:14:45:0d:e6:88:06:c2:cc:88:ba:
         30:74:48:a2:61:2e:31:16:9a:ef:fa:be:47:f2:8e:84:94:eb:
         b8:08:96:46:02:bb:93:5f:9b:44:8d:4b:1e:d6:7c:79:18:04:
         3f:17:87:a1:14:af:b1:e9:d2:fd:a9:1f:15:1d:0d:5c:0a:5e:
         cf:26:83:db:c0:5c:50:3a:4c:f9:15:87:68:4d:6e:bc:d1:0d:
         5f:8b:fe:fd:33:f8:dd:c0:99:ff:1a:5b:a2:d8:a6:bc:5d:49:
         31:b2:a4:fd:e4:da:64:96:16:5f:5a:1e:f5:30:0b:c3:70:7d:
         b0:58:68:9a:79:07:2b:e1:ce:2c:6e:c6:c3:7d:96:05:8d:e4:
         72:a2:20:d9:d1:b8:d1:31:8c:b3:5f:5a:a8:25:fc:66:6a:92:
         2b:73:99:aa:76:02:ee:71:ad:d2:2e:cf:e7:e6:75:81:c8:14:
         95:26:48:61:20:be:4d:dc:62:86:dc:a5:1e:86:91:96:c8:1b:
         2e:67:48:5b:10:8e:79:ee:d7:8f:3c:81:b0:99:10:70:a4:ba:
         57:4b:ee:43:bd:20:04:20:07:ba:63:a5:bb:2d:94:99:27:b2:
         e5:17:03:df:3d:c7:41:42:b4:78:c2:51:b1:3a:f2:d0:71:35:
         e7:7e:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:00 2026 by rpki-client