Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File:                     ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier:          oTFCBRXmwNsY+zevFyrHpKGtfL/nEsmscSFADo1Y6Yo=
Subject key identifier:   55:90:DA:96:A0:6A:2B:67:AA:74:C1:4E:DE:6C:DD:9C:ED:D4:51:F1
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer:       /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial:       019F91DB08DC7DD94422155F1C514CB85A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number:          18DF
Signing time:             Fri 24 Jul 2026 02:01:18 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:18 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:18 +0000
Files and hashes:         1: J-e1EK_LAkajkxzNj6LSi_DOMCQ.roa (hash: 2wHbXc4iH7fDMwb/pEgkJZF38SGZEaDWW6KVL/qYSzQ=)
                          2: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: q7JwwrGRbmDkqqZOVj4KB5XTcXptpVMDlKjHZC3ywQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:08:dc:7d:d9:44:22:15:5f:1c:51:4c:b8:5a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
        Validity
            Not Before: Jul 24 02:01:18 2026 GMT
            Not After : Jul 25 02:01:18 2026 GMT
        Subject: CN=5590da96a06a2b67aa74c14ede6cdd9cedd451f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:d1:f1:b9:d9:5d:b2:2e:57:56:35:06:ed:
                    c0:bc:f3:c2:25:fa:84:dd:af:e6:10:6e:69:31:b7:
                    8e:13:55:75:51:da:66:90:86:56:f9:66:34:6b:49:
                    37:69:10:b3:f9:10:5a:ac:8f:ca:60:85:bb:52:db:
                    4e:12:69:40:f5:5d:fc:ed:49:5b:57:02:40:99:22:
                    f8:f0:4b:55:b9:1e:dc:d7:bf:23:3b:f4:08:45:10:
                    f5:13:05:28:1d:9d:94:d6:85:49:39:40:03:59:12:
                    88:a5:4a:9b:ea:dd:8a:6e:3e:c6:c3:14:94:b8:a8:
                    91:72:26:30:7c:11:09:4b:13:e1:53:5b:29:d6:7e:
                    63:fe:2f:8a:4d:4d:72:3c:de:1c:1c:20:6f:5a:45:
                    5b:f0:47:de:a5:54:1f:ea:33:31:ca:69:46:b9:fd:
                    6e:83:25:32:44:b7:3d:1e:be:48:5f:e9:17:94:45:
                    53:79:e5:0e:7f:4a:a4:5c:b1:b8:f1:be:c8:c4:2a:
                    73:c2:a5:a3:7b:d4:ff:8d:59:e6:ed:e6:59:45:22:
                    d4:24:68:9d:ee:1c:b5:9a:0e:59:04:6e:36:20:07:
                    4b:f3:e8:b3:67:aa:7d:b8:06:f5:18:48:c6:b5:02:
                    2a:7c:c2:31:0d:55:54:b8:c6:70:8b:70:d0:d2:68:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:90:DA:96:A0:6A:2B:67:AA:74:C1:4E:DE:6C:DD:9C:ED:D4:51:F1
            X509v3 Authority Key Identifier:
                keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8f:66:22:86:40:84:78:c0:1c:1a:e3:2c:94:bc:c4:73:76:
         59:f2:5f:e8:b5:7a:50:f8:63:b4:e6:5d:56:88:c9:fc:7e:85:
         c0:fe:b3:20:7d:2f:b4:d8:4b:f9:f1:44:b2:7a:47:e8:94:00:
         da:08:7d:0d:67:aa:18:92:28:a5:1e:32:3d:e8:e5:de:13:c8:
         ff:11:0f:f5:49:9e:b9:3d:77:88:2c:73:db:da:c1:2d:d6:3d:
         25:b1:65:a0:a7:be:4e:61:b4:b2:c1:8a:30:12:60:7f:97:fb:
         4a:9b:09:0e:a8:e4:61:6a:a8:00:0b:54:36:50:43:fe:93:f8:
         f2:6b:f1:cf:1d:fe:3d:f8:23:33:1c:dd:8e:35:0c:85:6c:1e:
         49:83:60:a9:f4:d3:60:a7:7a:d8:23:3d:52:d0:2b:17:76:4c:
         fc:c2:f0:ac:24:97:10:84:60:22:f2:98:86:db:d6:f3:ea:fd:
         5f:4d:ef:ae:ea:c9:6e:78:e5:2b:cc:b0:74:03:8d:7e:9a:4a:
         c5:6d:94:3f:72:b6:5b:f1:37:f9:bd:7b:65:85:b7:1a:48:ae:
         1a:22:59:d3:a6:c3:95:ad:25:41:b2:68:04:fb:5b:9e:9a:5f:
         5f:1e:a5:f9:d0:21:99:a9:dd:3c:bf:8b:53:58:50:6d:7c:d1:
         8c:88:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:06 2026 by rpki-client