Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File:                     ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier:          3K9os98ZrVHpQihjWgeJTxsAA2OTTgv3XxGcJdofdiE=
Subject key identifier:   EB:22:F2:C0:8D:64:3F:10:18:72:ED:78:F4:97:36:99:85:23:B9:E8
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer:       /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial:       019F8EA2C33EDF2EF74150BC458612611A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number:          1334
Signing time:             Thu 23 Jul 2026 11:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:59 +0000
Files and hashes:         1: 1-LHcZlaxr8dQvsVNzQIDaN2BeWE.asa (hash: LiZ9oWhCLFkLqjTHi7biMv/A13XAhUUyZNZ2kHRDC4o=)
                          2: Cmjf0diDBjMpXK9Rg283uLnjsa4.roa (hash: 3GF0sphnOBAsl682z8e9nrFNXKLn18jG5JHQOBCJ7qE=)
                          3: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: NdmgkNc6xSCfwCxXv/GILcMdAacWf0FKWOqjX6Pjbk4=)
                          4: moqlfmKaE2Btn3qkc70wanITJss.roa (hash: b78qrODXBzetBQGVOPaslkoF1rHcqGwC5Req+zJKsno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:c3:3e:df:2e:f7:41:50:bc:45:86:12:61:1a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
        Validity
            Not Before: Jul 23 11:00:59 2026 GMT
            Not After : Jul 24 11:00:59 2026 GMT
        Subject: CN=eb22f2c08d643f101872ed78f49736998523b9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:bb:b9:ed:60:59:5b:88:58:1e:69:08:f6:
                    1f:08:a8:1f:e2:38:c5:e5:57:52:74:55:41:fc:2e:
                    cf:1a:29:52:c5:74:0f:03:bb:36:08:43:0d:5a:c0:
                    8f:80:a9:f5:6a:9f:c0:cc:a3:b6:9d:c7:84:02:c7:
                    93:02:92:c0:d7:f9:eb:14:ac:28:45:86:59:b8:1a:
                    04:40:38:bd:8e:ad:24:2f:9c:fc:05:36:90:c0:89:
                    f2:27:d9:c2:f6:a9:f7:ca:c7:5d:8c:cf:e1:27:d8:
                    a5:f4:0f:35:a6:77:3e:6b:6f:59:90:79:a7:aa:f1:
                    54:de:c9:e8:cd:0e:a1:c0:6e:a0:d7:9f:00:e8:77:
                    16:ed:a3:f8:cb:51:91:de:5c:4e:68:a2:25:98:d6:
                    6a:78:bc:06:25:a0:e1:5b:fc:c7:7b:9c:5f:26:99:
                    44:d2:d7:6e:0a:c6:03:f6:b7:04:04:9c:77:7c:6c:
                    c1:35:ca:6d:f0:e2:70:b8:ef:0a:1f:a7:a9:ca:2b:
                    0e:d4:89:a2:75:1d:2f:25:8c:fa:04:c9:81:2b:c3:
                    a5:d0:ff:e7:e5:6f:1c:c2:34:c5:0e:7c:d0:bb:3a:
                    03:ae:4b:f1:e4:a4:6e:7d:18:a7:c7:f2:69:39:9e:
                    4c:8e:33:41:08:8b:47:64:81:a8:c4:33:90:a4:8a:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:22:F2:C0:8D:64:3F:10:18:72:ED:78:F4:97:36:99:85:23:B9:E8
            X509v3 Authority Key Identifier:
                keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3d:6e:be:ad:a5:a1:1e:d3:d6:6a:1d:2d:90:d4:2e:1b:4a:
         ec:31:80:92:67:9e:f4:7f:e2:e8:22:4e:4b:99:44:a4:2a:f8:
         a1:a8:4b:3e:06:52:d6:57:b6:3e:10:b1:37:6b:51:c4:fb:19:
         e6:ce:f4:de:88:df:23:5a:c8:ef:ab:8f:a1:1d:66:e2:be:64:
         7f:d8:82:47:97:0a:ef:90:79:bc:0d:39:c3:b5:7e:07:0b:65:
         13:25:2c:c7:5c:bc:d5:9d:12:b9:20:cb:7a:60:a0:f9:13:b7:
         d9:08:a1:c4:2c:61:87:2b:52:6e:32:f2:3d:83:d3:7b:4d:25:
         93:83:84:2c:7c:6a:4f:76:96:4b:18:dd:10:c5:35:0c:82:f2:
         fa:33:8b:ed:da:8d:df:66:c4:4d:bf:4e:55:5e:48:45:84:c8:
         cd:9d:fa:27:64:16:f7:4f:8b:2a:b6:69:2c:78:8c:c5:a6:6a:
         a2:d0:d4:42:63:79:8a:10:53:de:fc:34:37:7e:34:ba:6f:b7:
         29:45:ec:df:ba:d8:3d:a1:a8:7b:77:13:03:52:e0:65:68:c8:
         03:6a:2a:00:69:21:32:fd:78:be:6f:23:a2:5a:83:a0:e9:00:
         25:84:84:98:dc:77:96:86:72:36:90:94:30:b1:9b:26:fe:34:
         ef:c9:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:40 2026 by rpki-client