Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File:                     ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier:          FIbDzwGIYRAkg2biHPS51WSBAyQvagK1NjpMirBy3t0=
Subject key identifier:   71:60:6A:DC:F8:7F:42:3E:D9:B1:81:29:22:50:01:E3:AA:E2:17:47
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer:       /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial:       019F92B6B0911BAC661B8124DC07EB710EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number:          0CB9
Signing time:             Fri 24 Jul 2026 06:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:13 +0000
Files and hashes:         1: 4Kqssfz45wqKl4Y5usAP2cryF-s.roa (hash: VtsQh8EBUySqJ+8n7XXtvvG+r8GbNYVy0DLEl3LAFic=)
                          2: PlJpj7jP73E4zbfMxQODYMcp_7s.roa (hash: 6ejhDKH+4IAoIUxzT6kMmGZlbm0mSbrfcniUm7Rso6I=)
                          3: Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa (hash: Rrtw6rU9+BgwK1Mhs6SeDqlpBkER/cCVfCVvQJ88CfE=)
                          4: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: wjPg5ujxH4UsClS2SUt8HR5RMMaO39ZrJaz7fAuKgXI=)
                          5: b1C1K0R4SsuxHJd-26aSi9G1s-s.roa (hash: UdNuNIgIX4vDZ6cHekj/pIxiG7gV3J4SuyTuh3WadyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:b0:91:1b:ac:66:1b:81:24:dc:07:eb:71:0e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
        Validity
            Not Before: Jul 24 06:01:13 2026 GMT
            Not After : Jul 25 06:01:13 2026 GMT
        Subject: CN=71606adcf87f423ed9b18129225001e3aae21747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:d5:d3:7a:ac:c9:66:4d:f5:f9:1b:74:a7:
                    b9:cf:0d:4c:7c:aa:c6:80:54:64:d0:a0:f1:16:3a:
                    54:47:9b:f4:b3:59:85:88:7b:01:7e:69:4f:d7:25:
                    62:71:4c:de:62:9d:bd:f4:3c:c8:7a:7a:06:8e:bc:
                    a0:2b:c6:2b:80:77:41:78:cd:5a:0e:b1:ac:99:07:
                    56:e3:c1:e6:0e:9c:52:b6:19:bc:38:53:b8:08:26:
                    f8:c7:4d:a3:60:0c:08:ac:63:a8:2c:9e:83:70:34:
                    9a:bb:53:8d:6e:70:9d:f5:3d:36:03:1f:09:cd:44:
                    0e:65:75:73:3b:4f:ce:ac:f7:35:34:c3:77:10:ee:
                    a5:61:4a:89:7e:74:88:d8:31:c4:35:b0:b8:a0:e6:
                    60:fb:e5:c9:8d:f6:fd:c6:e7:42:d3:ab:24:2a:ea:
                    6b:27:85:9b:60:1f:f8:d6:f6:ad:1a:70:1f:ea:19:
                    c9:42:d3:7e:90:4c:13:ca:e9:58:6d:8f:51:40:9b:
                    f5:8b:7e:d5:48:94:a5:23:94:29:ed:16:f6:87:61:
                    28:b3:c4:15:ba:c4:4a:3e:a0:33:e2:ce:e0:5b:bd:
                    ad:28:7e:69:5f:0b:c0:5c:92:84:9a:d0:cc:6f:25:
                    b4:c9:49:55:9e:75:c6:6a:c3:36:74:0d:e5:10:e9:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:60:6A:DC:F8:7F:42:3E:D9:B1:81:29:22:50:01:E3:AA:E2:17:47
            X509v3 Authority Key Identifier:
                keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:19:f0:95:33:b5:5f:07:60:e0:1d:d1:12:59:30:b9:8d:e4:
         dd:22:c5:c2:97:23:42:73:01:58:b5:50:51:f3:4a:11:e6:e5:
         aa:81:5b:6a:c6:da:af:43:2c:84:0c:18:16:35:48:b4:70:d0:
         85:39:99:f7:2c:c8:c6:2c:95:f9:0c:f1:05:ec:9a:07:4d:45:
         0b:6a:4d:85:62:27:e4:c3:f9:21:83:81:9d:85:fe:7c:6b:92:
         1a:9a:51:52:5e:9d:4f:04:ee:42:bc:9f:c1:30:f7:d1:16:f0:
         b0:c8:d8:b0:de:fe:8f:9e:f4:53:bf:23:68:a6:97:43:61:20:
         32:30:9d:d2:67:3b:19:03:35:20:70:13:b6:15:4f:0c:53:e8:
         b9:a5:5d:e2:48:93:42:b8:13:da:53:8d:e5:89:9c:f9:3c:93:
         58:6e:53:ac:5c:47:14:3a:c5:f1:a6:b2:67:d4:bc:f0:7e:19:
         c1:66:a8:10:c8:4a:46:71:1e:c9:80:ce:e9:b2:1a:45:a7:45:
         c9:a4:ce:2a:27:fc:1d:14:b5:5a:63:95:e5:f1:a1:63:71:13:
         4e:83:e1:74:b4:95:3c:90:41:1a:06:8e:ff:ba:f5:f3:d1:af:
         9a:ec:20:72:d8:b8:3e:5c:79:48:f8:55:91:d5:1f:2b:9d:e5:
         66:49:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:53:02 2026 by rpki-client