Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File:                     zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier:          T5BJtKCGxVSu3wQhb5e9D9xirmjX0k0m6ptfgIVX+E8=
Subject key identifier:   71:01:B6:E3:E3:3E:F6:C6:56:A3:E7:EC:BE:53:3C:A1:6A:23:FE:75
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer:       /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial:       019F92B5FEB094B1893D8DAC0FD02A143CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number:          1279
Signing time:             Fri 24 Jul 2026 06:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:28 +0000
Files and hashes:         1: 5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa (hash: pyWlQmd0OGBAWyVjo0BfVWnydEoUEqSFJZF/M2RGZlA=)
                          2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: BSCOiWvTw25zOOsx4eWpcqHkcPmXGk70VU4rA6/KEos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:fe:b0:94:b1:89:3d:8d:ac:0f:d0:2a:14:3c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
        Validity
            Not Before: Jul 24 06:00:28 2026 GMT
            Not After : Jul 25 06:00:28 2026 GMT
        Subject: CN=7101b6e3e33ef6c656a3e7ecbe533ca16a23fe75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:66:39:ca:48:e3:ae:81:35:32:cc:04:26:
                    75:7e:c6:6d:a0:7c:05:3d:a2:54:43:f3:3f:08:93:
                    5d:96:92:4f:80:0c:5b:f2:d6:78:1d:ba:c0:7b:4c:
                    8b:ba:fb:a9:77:2c:b4:e2:4f:1b:fd:80:49:a7:9f:
                    42:62:82:31:55:71:4a:cd:1b:10:ad:bd:53:ed:7f:
                    fb:5a:b4:3c:43:a4:38:b2:3d:8c:92:88:53:bb:6b:
                    bd:76:cf:35:8b:e3:b3:92:2f:bb:b6:37:4a:2e:12:
                    ba:a0:8b:52:3e:d8:3a:ee:82:7c:a9:eb:bc:b6:ae:
                    8d:bb:37:72:95:f9:20:97:44:89:01:8e:e5:41:66:
                    ed:af:2c:4a:86:5a:f1:c0:1f:a8:f2:83:57:fb:fc:
                    33:cd:52:ea:b8:fc:21:ac:3f:f6:76:c8:78:ad:43:
                    62:30:41:38:1c:da:04:1c:60:cd:0d:f4:1f:01:58:
                    3f:13:9a:d3:68:7e:70:03:35:0c:65:c8:7c:77:cc:
                    d1:85:91:1a:c7:d7:69:58:10:2b:3b:61:16:74:67:
                    d6:aa:71:56:54:70:ba:6b:13:9d:63:28:b0:bd:17:
                    99:6c:38:81:e0:74:86:a2:02:da:b0:c6:ef:cc:36:
                    cc:53:e1:0d:33:01:f3:90:98:ca:f9:43:29:10:cf:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:01:B6:E3:E3:3E:F6:C6:56:A3:E7:EC:BE:53:3C:A1:6A:23:FE:75
            X509v3 Authority Key Identifier:
                keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7c:b1:55:99:d6:32:68:7b:05:8d:fb:8f:a1:67:1d:0b:5d:
         3b:d2:16:9b:af:8b:db:ac:ed:2e:95:0a:50:97:8a:4b:c5:d5:
         2d:31:13:44:cd:87:ed:17:99:1a:6d:93:7e:84:ac:97:f7:9a:
         8f:96:dd:c9:64:30:77:a9:90:f3:c8:8e:42:aa:0c:c1:6e:85:
         2f:e3:83:20:35:3d:48:cb:dd:bd:48:2a:9d:2b:86:ec:4e:7c:
         08:08:11:d8:30:21:d7:be:a2:c2:a7:ba:4c:f5:8e:97:25:06:
         6a:13:64:7d:64:20:23:6d:6b:7b:17:ce:b6:1c:08:d1:2c:8e:
         48:62:45:9a:06:6d:ab:2c:4a:ea:47:e7:8a:fa:30:e8:a4:22:
         44:f5:a0:91:87:e3:1e:a3:49:bd:1b:1e:ee:24:85:0d:d5:15:
         50:5e:fb:62:60:ca:5b:1e:fd:95:1c:49:88:04:e8:cb:11:83:
         0a:af:07:f4:fa:69:d3:b8:9f:f9:0f:86:d8:32:c9:5b:41:ce:
         90:56:5d:2c:e3:0a:8a:a3:8c:60:23:0e:10:50:07:49:a2:bd:
         08:71:f9:a5:47:3d:fe:81:43:d8:a6:02:8d:e4:03:a6:bb:cc:
         6a:20:f0:1d:9a:b9:56:07:3f:e4:75:0a:1a:ac:cf:2e:94:26:
         20:ff:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:35 2026 by rpki-client