Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File:                     DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier:          tUy1eg7CFPM8Ic+YByAX2xmvktnqAf+7gyiH70rOk9o=
Subject key identifier:   07:59:A5:8F:04:E1:5C:96:53:BC:60:1C:84:6C:A9:7D:E2:11:7B:6D
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer:       /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial:       019F95B70D4483F3C6D4FF543829AD3433DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 20:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:29 +0000
Files and hashes:         1: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: zXgG5PqA9gAZmaekkWf/KUqEbMMQ8VEgr/A+AP6jBPU=)
                          2: Ty_PZDqaOmeFjLIdr3QFueerKIM.roa (hash: mfeK6p+b2jXbJTu7RkO60pgbrZY/WThNdE0YkaHIazA=)
                          3: ZK_lplNOHoj8XGWdtaGMmSrc3x0.roa (hash: /qdKs+yTlrC/OXEPfuDp9SEn7i6+ObqNyY75S5FZQO8=)
                          4: _7jylL9q9B68bc5gOBCT4NAKAwE.roa (hash: udwwApN1RRRAB/0kSZzWjgDibuhxWbwtgPuXqFkvmuE=)
                          5: cpElJSiXGO7jJAVo9S1jen5uhjQ.roa (hash: jXHD1yWMKx7op/sh3fiD9gaMHojOuxsjiA1ioAXvW84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:0d:44:83:f3:c6:d4:ff:54:38:29:ad:34:33:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
        Validity
            Not Before: Jul 24 20:00:29 2026 GMT
            Not After : Jul 25 20:00:29 2026 GMT
        Subject: CN=0759a58f04e15c9653bc601c846ca97de2117b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:88:ce:b4:e9:0d:9b:0f:09:10:dc:dc:3a:
                    dc:44:27:ea:6b:ed:2e:32:99:8b:a6:49:b2:58:e6:
                    84:f2:ea:d0:98:7e:1f:cb:91:a4:20:98:65:5d:05:
                    86:93:c8:f0:1c:de:36:6a:9e:f2:ce:9d:52:2b:fd:
                    62:de:53:1c:bf:af:89:a7:cc:82:0f:bb:f8:0e:fb:
                    75:29:99:8f:f4:c5:61:27:6d:4f:84:b8:d5:34:8b:
                    1b:d1:3c:23:3f:8a:02:b6:e7:bc:d4:d1:c3:9e:e0:
                    fb:18:20:97:2c:73:02:03:72:f5:05:be:11:2a:a9:
                    31:4e:5b:6a:46:db:d8:f1:22:27:cd:78:e9:0f:4d:
                    eb:a4:18:06:a8:70:a8:74:c6:eb:1c:08:50:34:81:
                    7a:08:44:c6:15:62:e9:af:1c:7d:5d:44:a6:13:c5:
                    9b:22:a1:97:85:e3:2f:ae:13:17:0f:0e:22:6c:02:
                    d8:16:d8:08:32:98:71:3b:4c:f0:7f:52:e1:1a:ed:
                    50:39:ed:d3:58:a4:ed:9f:ee:56:bd:1a:dd:eb:40:
                    6b:ee:19:10:5a:a0:4e:b3:e9:94:48:8b:f9:30:04:
                    76:bb:b1:fd:1d:d3:9b:aa:92:c7:24:0f:3e:8b:03:
                    3b:d2:d7:20:de:95:18:9b:fb:a4:3a:cd:d6:08:9c:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:A5:8F:04:E1:5C:96:53:BC:60:1C:84:6C:A9:7D:E2:11:7B:6D
            X509v3 Authority Key Identifier:
                keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:67:47:a6:d4:88:d3:85:be:7b:92:d3:2e:72:38:4e:df:ca:
         c8:71:28:50:f4:1d:33:fd:c9:28:15:cb:11:1d:06:d6:07:52:
         58:16:d8:fe:01:fe:32:90:51:87:b6:f4:35:71:36:a7:84:dc:
         4c:0a:91:53:27:fd:2b:38:71:f9:91:e1:4a:4d:ba:ae:3f:91:
         02:28:0f:1e:4e:ed:81:44:80:af:2a:69:13:65:f5:cc:dc:7c:
         be:71:6a:93:69:aa:ca:28:13:b3:88:18:ec:12:c4:cd:8e:fd:
         6c:3f:cc:bd:2d:cf:d2:28:2b:ed:1d:20:1d:39:fb:2c:69:56:
         ff:e9:81:bb:50:ba:b5:0e:66:a5:ff:7c:db:77:f9:a3:92:56:
         3f:69:ed:31:94:d5:a2:b8:9c:14:80:dd:2d:f7:de:eb:05:8d:
         d6:46:28:1b:10:73:97:63:f5:df:b9:ef:e6:93:5f:b6:c4:64:
         9f:65:7d:ba:76:2b:68:f0:59:77:27:de:19:a5:ab:26:79:03:
         f0:35:30:75:d8:9c:be:98:70:88:d6:92:ba:2d:9c:46:d7:6b:
         11:d2:0b:bb:75:e8:45:4f:4f:06:96:d7:51:b0:2d:bc:84:8e:
         6f:24:cf:23:18:ff:0c:00:cd:67:49:af:92:67:23:12:b7:c8:
         39:3a:8d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vtw1Eg/PG1P9UOCmtNDPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj
OGJjZDUwHhcNMjYwNzI0MjAwMDI5WhcNMjYwNzI1MjAwMDI5WjAzMTEwLwYDVQQD
EygwNzU5YTU4ZjA0ZTE1Yzk2NTNiYzYwMWM4NDZjYTk3ZGUyMTE3YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDqIzrTpDZsPCRDc3DrcRCfqa+0u
MpmLpkmyWOaE8urQmH4fy5GkIJhlXQWGk8jwHN42ap7yzp1SK/1i3lMcv6+Jp8yC
D7v4Dvt1KZmP9MVhJ21PhLjVNIsb0TwjP4oCtue81NHDnuD7GCCXLHMCA3L1Bb4R
KqkxTltqRtvY8SInzXjpD03rpBgGqHCodMbrHAhQNIF6CETGFWLprxx9XUSmE8Wb
IqGXheMvrhMXDw4ibALYFtgIMphxO0zwf1LhGu1QOe3TWKTtn+5WvRrd60Br7hkQ
WqBOs+mUSIv5MAR2u7H9HdObqpLHJA8+iwM70tcg3pUYm/ukOs3WCJzt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdZpY8E4VyWU7xgHIRsqX3iEXttMB8GA1UdIwQY
MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt
NGJlZjQzZDNmYjE3LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUtNGJlZjQzZDNmYjE3
LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2dHptSI
04W+e5LTLnI4Tt/KyHEoUPQdM/3JKBXLER0G1gdSWBbY/gH+MpBRh7b0NXE2p4Tc
TAqRUyf9Kzhx+ZHhSk26rj+RAigPHk7tgUSAryppE2X1zNx8vnFqk2mqyigTs4gY
7BLEzY79bD/MvS3P0igr7R0gHTn7LGlW/+mBu1C6tQ5mpf9823f5o5JWP2ntMZTV
oricFIDdLffe6wWN1kYoGxBzl2P137nv5pNftsRkn2V9unYraPBZdyfeGaWrJnkD
8DUwddicvphwiNaSui2cRtdrEdILu3XoRU9PBpbXUbAtvISObyTPIxj/DADNZ0mv
kmcjErfIOTqN4g==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:48:31 2026 by rpki-client