Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File:                     zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier:          T3tUN2PHbmELGsUdrjqGhnrpKt3VWs9D7omU+LXhW5I=
Subject key identifier:   69:85:E8:91:FC:32:5B:85:34:29:23:0D:7D:EE:5C:73:E3:40:EC:7B
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer:       /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial:       019F954A2F57105DCE4853A6BDC5427FB44A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number:          1706
Signing time:             Fri 24 Jul 2026 18:01:34 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:34 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:34 +0000
Files and hashes:         1: 7BLFrUv-21NPi5YU_QcyTQXK6sE.roa (hash: eZF7mM5D7X3yGSrbx54ZgMvJ5nO57jhcGZL0Higsrxw=)
                          2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: WUtw1Y+Kqd9N+qCZv6QA4UoccXwZRZRd/Q8BKZM1oJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:2f:57:10:5d:ce:48:53:a6:bd:c5:42:7f:b4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
        Validity
            Not Before: Jul 24 18:01:34 2026 GMT
            Not After : Jul 25 18:01:34 2026 GMT
        Subject: CN=6985e891fc325b853429230d7dee5c73e340ec7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:15:6e:3a:f2:14:b1:88:55:7a:04:8c:8e:
                    c0:4b:fd:ca:63:70:0e:78:c1:f9:8c:5d:73:dd:02:
                    57:a9:4a:4c:ae:9d:1e:2f:d0:9d:9c:00:36:00:fd:
                    33:84:02:48:4a:51:3b:9b:65:a2:2f:f4:e0:b6:27:
                    b6:87:bc:38:26:51:5c:7e:9c:7a:7f:30:72:3b:96:
                    bb:cf:26:3f:c1:46:39:02:f4:c7:69:f5:2e:ef:f8:
                    39:e9:04:d8:7b:f8:40:ed:90:44:e9:96:c6:df:ba:
                    72:52:93:7e:b1:0c:f3:f9:2c:7e:91:e0:81:b6:86:
                    4a:27:f8:ad:1a:6a:ea:c7:44:61:b2:86:84:a2:d8:
                    2c:12:41:c0:70:76:8a:ff:bd:17:57:ca:73:f2:70:
                    0f:f4:d9:bc:c1:ac:16:e1:db:23:19:6c:81:e7:bd:
                    c0:30:6e:b8:99:63:7c:79:4c:c0:d8:c7:5b:34:0a:
                    e4:0b:65:2c:13:b1:b3:51:38:10:dd:84:e9:7b:0a:
                    a6:53:89:d9:9c:ab:ef:ec:a7:5f:6c:53:1e:23:b1:
                    c1:eb:d5:93:1d:67:37:88:22:32:98:00:33:e7:78:
                    4b:07:fe:66:e3:54:ab:ef:88:f9:7b:f3:16:6e:e9:
                    ad:9e:6f:a3:f9:27:30:df:b1:2d:49:7d:55:de:72:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:85:E8:91:FC:32:5B:85:34:29:23:0D:7D:EE:5C:73:E3:40:EC:7B
            X509v3 Authority Key Identifier:
                keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:da:39:66:c2:5e:18:99:14:1e:3b:9f:25:89:1e:1e:36:9a:
         83:19:8b:db:2a:73:b2:71:14:80:65:76:2c:aa:f4:43:0f:d1:
         17:07:6d:5b:65:c4:70:6e:cc:ff:6c:aa:5a:16:ee:9e:44:02:
         64:4c:43:3c:01:2a:5d:54:05:51:c6:5f:a4:d1:2e:83:9d:a2:
         72:94:8b:db:88:62:26:e5:8f:5e:8b:a0:6b:8e:da:10:12:89:
         91:da:eb:fc:74:7b:da:b9:3f:10:61:71:cf:bb:d1:50:30:62:
         47:f3:54:ef:e7:87:4b:e7:31:fc:c8:63:95:17:b0:66:9b:00:
         be:7d:8f:e9:e0:3c:f4:98:8c:b1:9e:da:7f:05:3c:6b:71:65:
         76:b9:1b:f0:23:c5:98:04:3e:c5:76:29:fc:b4:e2:b8:e1:14:
         28:86:ff:8b:70:5b:1e:ef:36:e3:26:42:aa:bc:78:45:96:3e:
         88:2d:ad:c3:f1:78:7e:4d:ff:94:d8:c8:e3:33:ea:55:94:86:
         36:4e:61:98:15:39:12:f4:06:a7:06:4e:9a:df:0b:67:3c:2b:
         1b:0b:b2:1d:bc:8f:67:48:23:b9:af:23:fd:40:c5:49:6a:a9:
         15:66:ad:19:35:c9:2f:76:71:4e:46:8d:de:af:4d:a8:18:e8:
         86:31:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:14 2026 by rpki-client