Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File:                     0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier:          ti/9D1noet8QZPf7y4pNG4OIMV+QYoZaHkoMrs9WbQ8=
Subject key identifier:   6B:1D:D0:A6:67:22:90:09:80:50:9D:6A:70:5B:A4:F0:FC:D9:E2:06
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer:       /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial:       019F90C827F448B81AF763E1B010AF6E9E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number:          0FC2
Signing time:             Thu 23 Jul 2026 21:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:04 +0000
Files and hashes:         1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: 0jByQSIPdTvx1H49CbxkzSSIAylodsP/XMUHSoDmnWo=)
                          2: lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa (hash: WwqXm5S9kqC02dQFsZ5mFoZfT2ZEKlRHGYMQ2u0hdl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:27:f4:48:b8:1a:f7:63:e1:b0:10:af:6e:9e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
        Validity
            Not Before: Jul 23 21:01:04 2026 GMT
            Not After : Jul 24 21:01:04 2026 GMT
        Subject: CN=6b1dd0a66722900980509d6a705ba4f0fcd9e206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:95:7b:91:ca:6b:35:97:1e:c8:bc:f0:4c:19:
                    ec:50:8c:14:e4:8c:6f:ea:f9:62:83:d9:5b:5f:fa:
                    b0:46:78:5b:42:14:13:58:5c:9e:cb:a8:48:42:c4:
                    a0:12:a4:3a:74:aa:94:bb:5e:3e:a2:63:30:5e:21:
                    52:0c:7a:0d:8a:76:bf:a0:39:7f:c3:66:37:5c:ca:
                    1e:49:62:1b:e1:bd:a4:fa:9e:f3:9c:54:90:0f:a4:
                    4c:a5:9d:60:5a:ad:ab:92:5b:c1:67:6d:17:84:71:
                    8b:2b:d9:e0:46:34:0b:96:bc:ef:97:87:b8:db:a5:
                    dd:0d:ef:e5:69:dc:ba:ba:c6:da:58:10:d8:3f:27:
                    bb:2c:5e:c2:fb:2a:b9:fc:0e:bc:96:95:e8:77:35:
                    47:5b:51:ec:9c:d9:5d:69:77:46:e9:80:5f:e0:5d:
                    f2:13:16:33:52:54:f9:3a:51:59:a5:4b:d7:7b:fd:
                    ac:aa:e1:f8:d1:87:56:2c:31:4a:99:a1:9a:9f:81:
                    a7:de:e2:56:61:0a:f7:ea:29:04:ba:cf:2f:8d:b4:
                    ab:50:5c:b7:ff:f6:b9:f3:81:00:05:84:6d:69:69:
                    be:4b:10:82:dc:85:fc:d1:77:bf:d5:23:73:99:28:
                    50:b9:83:9b:fa:fd:9c:3c:99:3e:96:48:7e:11:1f:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:D0:A6:67:22:90:09:80:50:9D:6A:70:5B:A4:F0:FC:D9:E2:06
            X509v3 Authority Key Identifier:
                keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b5:4b:1a:92:0f:79:f5:8f:4a:78:a5:1a:63:c5:72:36:43:
         d2:7f:6b:d1:70:ce:92:5c:fc:99:59:c7:3f:47:47:87:41:46:
         05:62:7c:99:f1:c3:08:9e:d8:54:32:77:66:5f:38:d0:ef:7d:
         3d:11:2f:d0:a3:0b:c2:c2:1d:6d:83:c2:b2:33:14:8d:8e:63:
         36:36:52:35:8a:33:c7:61:c4:c7:c9:ef:f6:6c:f3:ee:a6:ee:
         3b:79:fb:2c:d9:0a:65:fb:4a:60:ac:d6:8f:b5:ab:0c:cf:0e:
         0b:57:c8:e8:d1:d2:2e:11:c5:9a:0d:46:d4:82:28:b8:8d:9b:
         a5:e9:26:4d:77:3b:87:b7:06:ea:9c:cc:55:7f:a9:4c:22:3c:
         74:0f:81:32:8a:4f:bc:fd:b8:b2:3f:12:b0:1d:b9:01:b1:fe:
         dd:38:11:a7:7b:a2:6f:28:32:07:10:0a:96:f0:fa:c2:1d:69:
         e5:b8:03:56:92:a5:de:8f:46:bb:95:5b:cd:6e:68:eb:ca:a2:
         d1:41:2b:98:9e:52:19:a6:81:5f:94:78:96:eb:8a:2f:17:43:
         3a:45:0d:02:67:88:6e:5f:6e:d1:3e:f8:6b:54:4d:6b:02:5b:
         c0:20:53:f9:48:00:db:d8:b3:ed:9f:3d:2c:21:f7:e9:e0:67:
         b1:72:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:32 2026 by rpki-client