Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
File:                     zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json)
Hash identifier:          7kI4wI5JHlIfSwR4PQB7U0bXR6DzKdtniIBIlMMMudo=
Subject key identifier:   78:7C:BD:EE:D2:8D:90:CB:06:F2:CC:77:81:70:1F:D9:98:85:0B:86
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       019F92113CF6ACD1DB78D675F9C1F259229B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
Manifest number:          19E5
Signing time:             Fri 24 Jul 2026 03:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:30 +0000
Files and hashes:         1: 1--RggRk_qlH26F-8QTH2ie7muc0.roa (hash: Hqhf4xa2ID1VNwxmhITZqAJ15hDU/4FyBARifnG6Ixc=)
                          2: 1a7SZTEXLvsY6ZnhEFxz-R8N7uM.roa (hash: VvGo7k75GH/z5NFVgpcLPEpxVLsQm0TzpboPdwFu0Yc=)
                          3: 3xxSrQX7ikVH9joHH7QsgCEkz0M.roa (hash: wOzTlwIIx8vGJW4532eTCHLypEd105cx24+b6jsBnOE=)
                          4: 4NONcDvqiCRqgZcQTfcqHeSzpuE.roa (hash: R27IngHDs3jcZqqkBeixBQgUg7p/CUgoVimY+Zoh0rs=)
                          5: 627RCQbVfaSLEpbqf1uOyStuItI.roa (hash: 2YbdBYQ9z8cknHKKXmc5SgbkxXPdynVrnlyUa/TP6wk=)
                          6: 9ok7vlhzmI90nPgnO1IgrHdTxZs.roa (hash: KMWs95W+KNbFg3H5cAfW7c/c378ZOgBFSVfOB7Q6xdc=)
                          7: FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa (hash: /bleCUlTHodFMRUrIClkQu+L3DOefkymAjlInaomTNQ=)
                          8: PTblVwI2pEuayFVs15O8VzhVtcE.roa (hash: BZMI5kioCtcsLQnN5vspUQmXLq1H6ZDsa+ACcaZ9hIE=)
                          9: S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa (hash: kgjDYJvzpvvXhGpA6SOSZpPon+c9XSP1iW9dljXHh6I=)
                          10: St6cINBiYFYzDsvoHQ0HIuhRHRE.roa (hash: TerSeMXT2wx/qxnCAM2X+sHCfRQgQnB7xYChR1RCmTU=)
                          11: ZW0aFRggHkZTWmuvnYGPdC2huwg.roa (hash: TrmzY9bElpj84VDEyVQdviY1r6dh8gcH5HMBCYNEAr4=)
                          12: _au0wimjEPCkLk0Si7B4RsrMdt8.roa (hash: /4fqj2Kq6klXf2682gRF7q2tz9MvyCSK5DmjIGN2uPc=)
                          13: _sJaMgsC9vZYHJ1-sJ2DQDObNds.roa (hash: tdKFcf6lEHJohX/dDC1SKuCr0lFpoQm/9xayJVcBCOc=)
                          14: fP0g3WG03fRKQvk9nCrI5dbtVbw.roa (hash: iqvY0ZnRaOtLATbSx1mHSetMiM19OQ+QCDRCVXbVWCo=)
                          15: iBWI_be6KZTQs8EfQhXMJzUgSHM.roa (hash: ocUnmNt9pPZOeFDjwHl6jCfHOmkeOSrq2u2q/CCROrc=)
                          16: jWqvEO-jmA-gQShTX85xvehC5Hc.roa (hash: pL69sm9cpEpCR8BKzOZz9JU0vtplAVmf/Mq5uV1wJiY=)
                          17: mvCrPFk_f-cYnxy32upovMXOSbI.roa (hash: Hvm/Hs4xIKHjkYUXqkI7d2NYIoktj/SKLqPN0YW1qpM=)
                          18: tYauO89UbkmwK_N9XQExSS1v_Nc.roa (hash: d/1zWN1EmLOyscLiJiM90yzoqktyhFzjpIvKSzKk96Q=)
                          19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: 9UAeJZQKAnJJ3TOHHvAGbMvYojyVFfdJvzCdbN4ocPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:3c:f6:ac:d1:db:78:d6:75:f9:c1:f2:59:22:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: Jul 24 03:00:30 2026 GMT
            Not After : Jul 25 03:00:30 2026 GMT
        Subject: CN=787cbdeed28d90cb06f2cc7781701fd998850b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3a:83:0c:f9:0a:37:6b:c0:aa:24:a2:4d:fd:
                    71:a8:75:a1:6e:05:8c:2a:96:8a:63:e6:1d:92:14:
                    94:97:22:c6:c5:1b:a8:d9:ce:88:6e:a8:5a:b8:c9:
                    96:ec:10:26:a6:78:0a:76:60:6f:a0:1a:85:c4:d6:
                    fc:3f:a3:30:d7:59:27:98:8f:4e:07:63:d1:0f:4a:
                    2a:38:00:e0:2c:09:95:29:06:00:c2:06:a2:62:5c:
                    b4:97:24:8d:9a:ae:d0:cb:b2:de:b1:8e:bf:a2:64:
                    bf:63:9c:ee:91:fe:8f:2e:17:57:3b:32:f6:c1:9c:
                    ba:f5:e4:73:86:b9:74:72:ed:bb:af:b8:8f:b9:f0:
                    0b:c8:44:86:40:48:cf:21:4c:00:fa:9a:b7:38:6f:
                    cd:53:4f:2e:b4:35:04:ed:c8:90:51:30:17:45:b2:
                    8a:bc:7b:49:95:3a:f7:73:22:ec:2e:ee:e3:90:6c:
                    ad:b8:11:7f:9d:3a:0a:fe:ab:bc:f6:ab:4b:68:3d:
                    3c:77:75:06:42:5d:61:98:bf:2b:94:56:7d:a7:26:
                    a3:f7:e6:0d:a8:03:f9:d0:1b:9b:15:61:92:69:4b:
                    68:f7:9e:2f:89:3d:18:0b:3d:b9:b5:6d:18:46:23:
                    4d:6c:7a:50:aa:eb:4a:4c:62:25:81:10:b1:30:50:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7C:BD:EE:D2:8D:90:CB:06:F2:CC:77:81:70:1F:D9:98:85:0B:86
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e0:c5:cb:ed:bb:6b:28:17:45:81:21:8c:bc:b4:1e:98:fd:
         1c:41:c4:6f:80:2a:e9:c4:ee:5e:f9:3d:84:31:af:b0:3a:dc:
         bc:b7:e0:9f:ec:91:2a:18:5b:94:4e:ce:13:1a:d0:9d:f9:5b:
         45:d0:d9:cb:3a:af:16:f7:59:f2:4f:1d:20:d2:8c:56:e7:19:
         a4:08:7f:6a:6f:5e:5f:70:a1:90:e9:4e:c2:51:50:8c:91:2b:
         63:bb:d9:54:dd:57:a1:94:34:a9:09:d3:69:5d:39:f0:bd:c1:
         e3:ac:1a:e6:51:35:83:22:5d:e5:f2:25:4e:76:07:78:2b:2b:
         ea:da:28:45:c7:61:f3:93:00:10:1c:46:44:48:bb:ff:fd:34:
         58:88:f6:a7:cd:e4:72:29:10:81:91:17:43:f6:8b:e8:77:36:
         eb:1d:a0:b8:f2:73:79:2b:bb:22:e5:36:6a:cc:80:90:ba:94:
         3e:ff:f6:71:74:9d:40:75:c6:bd:ec:cd:7b:f3:5e:70:49:68:
         91:80:96:13:cc:a9:e0:46:6c:04:7d:8d:e0:35:88:35:8d:fa:
         55:2c:31:bf:07:50:ba:5d:29:54:04:70:fa:18:fe:c1:9e:a5:
         3b:b9:30:19:fa:79:ce:b2:01:64:9a:31:26:d5:c5:99:f7:2c:
         d8:01:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:33 2026 by rpki-client