Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          GpWBck2289HJVYWBCs2pb0Cu8jWtibFAYgSHzqT8+g0=
Subject key identifier:   74:55:94:E1:C3:F0:E2:40:0E:EC:4C:D5:6D:B9:1D:24:E0:01:D3:73
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       019F94DBD073F38C31F5511EBE399398CD4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 16:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:01 +0000
Files and hashes:         1: dyIfoHvYEfN77rehdk6Hr_OLRAE.roa (hash: xcmHvUmEQ2Xk7WqYhP6N4oZ9W7Pc6AjsjVYgGRTZexw=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: SbJXby6XGdLyhKNvI7i8uM5r2hgYeBMB8kDypfDCJGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:d0:73:f3:8c:31:f5:51:1e:be:39:93:98:cd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: Jul 24 16:01:01 2026 GMT
            Not After : Jul 25 16:01:01 2026 GMT
        Subject: CN=745594e1c3f0e2400eec4cd56db91d24e001d373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:19:eb:fc:d0:be:d1:64:8e:9f:3d:c1:0f:
                    70:6f:07:9f:21:a8:a7:5a:6a:d6:d4:63:5c:c2:9b:
                    69:b0:a5:57:a3:c1:52:29:ff:7d:5f:12:7c:32:16:
                    98:eb:fd:76:7d:90:cc:1c:18:58:70:88:ec:2e:26:
                    f6:5f:3b:a9:46:33:71:0b:b3:8d:fd:84:9a:8c:94:
                    c1:49:aa:51:f6:a7:91:62:02:f0:9f:47:9e:9d:fe:
                    7a:41:7b:7a:77:f6:91:9e:7a:d5:fc:2b:2f:e1:dc:
                    99:e3:9b:fb:45:ef:68:9e:ee:17:f8:1b:30:9f:44:
                    12:3d:c8:90:dc:be:9c:5c:96:fd:cb:14:c3:9c:38:
                    3b:88:54:b7:00:bf:8d:48:b3:1c:e2:c6:87:5c:da:
                    45:2e:17:03:05:f5:e2:bd:82:eb:57:b0:94:50:5c:
                    23:b8:67:bc:5a:fe:d9:6e:c4:f4:0c:48:a2:83:2c:
                    7b:61:02:ae:43:98:b7:c0:31:70:4f:8a:9d:16:a6:
                    33:30:07:0f:75:1a:77:48:78:e0:ca:ee:2b:12:0b:
                    c6:79:ef:76:6c:c0:c1:9a:71:fd:7b:81:9d:50:f0:
                    7d:a0:9b:05:4d:d0:a5:41:89:7a:fb:cd:6f:ee:37:
                    9e:39:de:c5:47:7a:7e:2b:e7:50:b7:77:10:98:15:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:94:E1:C3:F0:E2:40:0E:EC:4C:D5:6D:B9:1D:24:E0:01:D3:73
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:73:22:e0:29:0a:4e:b5:a5:61:5e:7c:df:de:b3:52:a2:72:
         08:82:8b:a7:76:19:79:23:27:1b:8a:6a:85:bf:a7:b9:bd:5a:
         92:37:5f:72:c1:a3:1b:77:0d:00:a4:97:04:d7:14:b1:7c:7c:
         16:37:30:79:c0:7f:f0:0d:05:f8:99:bd:92:b8:b1:25:6d:ed:
         7b:ea:e7:d2:d5:46:1c:a4:31:1b:b5:7e:a7:d2:54:fc:eb:4e:
         b2:16:c0:aa:8a:4a:50:d7:54:21:8f:92:49:d7:96:31:12:00:
         66:0b:14:cd:f9:d5:ce:01:f8:c5:9b:ad:0e:5e:c7:63:97:88:
         03:fd:33:f1:01:3c:01:a9:26:ac:a0:66:81:16:15:16:c6:6e:
         77:65:94:9b:2c:87:bc:61:b6:b2:96:e3:40:12:21:8f:65:9b:
         1a:bb:bb:6a:a7:8c:84:43:33:fd:4f:52:04:cb:d3:21:ae:d4:
         18:7e:15:2b:27:03:df:a3:f5:28:74:45:2b:b3:7f:a1:2c:dc:
         2c:87:8f:fd:2a:9b:cd:0a:6e:3b:e1:f5:a1:ff:50:77:14:16:
         e4:07:df:39:18:83:55:bd:8c:f9:5a:80:48:c4:a5:91:dc:96:
         3b:4b:29:b8:3d:5f:1a:1a:d2:c5:9f:4e:f0:cd:be:ef:7d:2a:
         69:39:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:14 2026 by rpki-client