Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File:                     z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier:          Z9ryv4Da6qrtW9SbDLVl8B0YErZhdLf+9ZWzA83EsUc=
Subject key identifier:   4B:68:48:51:35:80:21:C3:10:1E:6A:0F:1A:7C:C9:34:1D:22:12:19
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer:       /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial:       019F8EA299D40253FA3DC84F190D05DFF753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number:          1526
Signing time:             Thu 23 Jul 2026 11:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:48 +0000
Files and hashes:         1: G0xz0bLV9EAQly4_g7VObUShRtE.roa (hash: ABgZUft6yhbazt8klEM2ZtMjod9FBs3oPUw6gWfrGKk=)
                          2: Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa (hash: Td8M1b5eYn7YJIEViFQBLyeZjyCEUobMfRK7pwtir7Y=)
                          3: UhXahydsOo_qiwzRtVGqPmi_pwk.roa (hash: DFHZo+ZnvqIq4efxazwJLIWQqpNgr1YvbSZZDY8hdCA=)
                          4: dMRJpZJ1JNYLWgq3FuqchxjnETE.roa (hash: fce7GbHsuDUNjDLPVqwrMpy3SolSS3TeDUI3vt7NKIY=)
                          5: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (hash: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA=)
                          6: oomUoRc8kAeXbJ8Vact092RPz5A.roa (hash: +kRKbGJLzWAadibg+zB0y/8pWSdZTuvX7OD3gBOEtzw=)
                          7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: L2edcw894Y7XgpobvT0vb+YEUU3IaQVEzz0Nqguur2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:99:d4:02:53:fa:3d:c8:4f:19:0d:05:df:f7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
        Validity
            Not Before: Jul 23 11:00:48 2026 GMT
            Not After : Jul 24 11:00:48 2026 GMT
        Subject: CN=4b684851358021c3101e6a0f1a7cc9341d221219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:24:8a:8d:94:88:b7:d8:54:c0:4d:a1:f5:
                    f8:5f:20:60:b4:16:c6:b5:33:d6:39:d2:39:e5:0c:
                    cc:f8:d0:4b:47:dc:a5:d8:05:51:56:e1:33:d7:25:
                    db:60:04:77:c9:d0:06:2d:d4:4a:94:d4:ef:63:fd:
                    52:c8:38:ae:55:bb:b7:12:38:d5:11:89:20:05:b9:
                    db:ea:bb:47:50:25:f6:9a:a6:cb:40:b8:dd:2a:bd:
                    e1:47:db:c4:a9:8e:c4:c2:76:c6:b4:f4:de:a5:cc:
                    b3:46:a1:9d:5f:2e:0c:94:ee:a2:6d:9a:a1:11:d7:
                    b2:a7:5c:4e:43:f4:6d:aa:67:8a:58:92:fd:19:f8:
                    97:57:63:79:76:73:cf:79:81:6d:3b:66:04:9d:12:
                    16:4a:ef:2a:dd:b4:e5:e6:cf:9f:c9:b0:50:4a:69:
                    01:7b:f3:4d:9e:b3:9e:15:00:be:ac:c4:32:95:31:
                    bd:ec:ff:08:10:2a:5d:3b:bd:fd:c0:14:96:4b:69:
                    3e:66:b2:f4:d4:2e:77:21:18:9d:64:f1:e0:78:c6:
                    b6:95:9e:bb:04:39:b4:03:67:ed:7f:9d:37:c7:36:
                    a1:a8:a0:60:25:38:83:c3:88:ec:aa:d3:d8:bc:79:
                    07:9a:70:bc:56:2e:e8:93:88:74:d3:85:2f:d7:e3:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:68:48:51:35:80:21:C3:10:1E:6A:0F:1A:7C:C9:34:1D:22:12:19
            X509v3 Authority Key Identifier:
                keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fa:a5:40:c5:9d:86:64:0c:af:40:cd:28:ba:ad:a0:ed:47:
         4f:63:01:49:ae:1f:0e:2d:4a:4b:38:f5:fb:56:c0:bb:28:6e:
         97:20:b8:e6:69:8a:92:a2:47:28:5c:93:b4:d4:66:4a:80:42:
         55:17:c0:ba:de:a8:78:bc:ff:1b:22:53:68:85:52:69:ba:82:
         6d:c5:6a:d7:8e:2a:35:76:0b:36:e9:32:43:d7:e6:8c:24:da:
         c8:e2:e4:45:ea:c7:5d:10:1e:8c:de:8d:64:89:54:3e:c0:5f:
         d9:d9:54:c7:ce:ac:9a:8e:52:9e:5d:83:da:4c:bb:ba:e2:9c:
         60:75:e6:dd:8f:a0:ac:50:98:b8:8c:cb:b6:bc:de:38:c1:13:
         5d:f4:b4:e9:6e:3d:3d:6f:20:2f:dd:af:4f:9c:a6:f0:1c:15:
         41:d5:65:ad:78:b5:b4:13:cc:5b:c4:7f:0c:27:40:18:f3:87:
         62:d9:81:10:fe:12:a9:6f:47:fb:8c:be:69:74:2a:9b:eb:c1:
         d5:ab:9d:7a:fb:53:76:d6:b1:bb:29:dc:87:a6:f9:95:0d:cd:
         59:91:5e:20:96:ca:33:e1:8d:3e:d3:2f:dd:ca:3a:d9:13:0d:
         75:eb:20:43:b5:78:8b:61:66:b0:20:52:90:b2:d4:11:4d:91:
         f2:0f:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:52 2026 by rpki-client