Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File:                     ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier:          kCYXQLpzJOKfpfrVvLFBkiLCZO8/eD9Q3Fml4xCL9yw=
Subject key identifier:   C9:54:D8:51:A7:24:D1:51:98:9E:44:72:C8:57:10:14:88:40:25:DE
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer:       /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial:       019F95B7B050DC58CCC3E39C6426A96BC6A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number:          19D0
Signing time:             Fri 24 Jul 2026 20:01:11 +0000
Manifest this update:     Fri 24 Jul 2026 20:01:11 +0000
Manifest next update:     Sat 25 Jul 2026 20:01:11 +0000
Files and hashes:         1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
                          2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: BcYa8073aijrYdb5dG8llWw72IWH8c8ATv+eHVFAvmY=)
                          3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:b0:50:dc:58:cc:c3:e3:9c:64:26:a9:6b:c6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
        Validity
            Not Before: Jul 24 20:01:11 2026 GMT
            Not After : Jul 25 20:01:11 2026 GMT
        Subject: CN=c954d851a724d151989e4472c8571014884025de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:ff:cf:f9:69:67:32:c6:4c:52:0a:ca:89:
                    6a:02:3b:53:7d:28:71:d2:c7:77:94:0c:01:a4:90:
                    2f:16:a3:10:6f:43:be:2d:a2:49:b8:5a:1b:dc:35:
                    04:91:db:f9:d6:b2:f8:81:17:ed:a7:d6:22:7e:67:
                    1f:40:e8:ad:ff:85:bb:96:cf:22:42:5b:47:3f:2f:
                    d4:42:9e:2c:bc:3f:ab:f1:2b:87:35:f6:30:07:87:
                    5d:2d:c1:e8:b6:93:bf:61:91:d8:1b:9f:e1:b1:69:
                    a2:61:53:30:2c:af:3e:64:e3:d0:06:1e:c5:fe:21:
                    31:d7:11:8c:0a:41:5b:13:ce:9b:4a:49:7a:2d:65:
                    4b:21:28:a0:b5:ef:f1:5e:24:1c:af:2f:86:73:81:
                    8e:4a:b8:40:e3:9f:4d:1a:e6:0b:73:a7:41:8f:cc:
                    c7:79:39:15:d3:4a:f5:22:c6:7a:27:9d:8a:78:c2:
                    b6:62:64:23:94:0e:22:49:44:76:f2:d8:eb:c6:be:
                    49:a9:c6:a9:24:ed:b5:aa:de:85:e9:35:fb:a4:36:
                    f5:97:1b:e5:12:25:1e:cc:c8:2e:0d:fd:ae:23:57:
                    22:1d:2e:67:a8:00:bf:f6:a9:2a:a1:36:a2:a2:ec:
                    4a:3a:df:5a:0e:31:63:8b:c9:d8:db:bc:4e:9b:e0:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:D8:51:A7:24:D1:51:98:9E:44:72:C8:57:10:14:88:40:25:DE
            X509v3 Authority Key Identifier:
                keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:57:93:c0:58:f3:2c:8e:94:8a:c9:a5:7a:60:03:f0:bd:e9:
         c6:06:b5:62:ca:13:37:8c:13:c3:13:d4:9d:a3:79:4e:6f:ce:
         3f:31:cc:11:5a:51:35:5c:7c:e1:38:89:54:56:c5:19:a1:cd:
         59:10:2c:0a:c5:3a:fb:ae:f0:94:32:89:18:b2:ba:55:e3:11:
         2e:a3:8a:6f:5a:dd:63:18:3d:df:5c:16:8a:d5:47:04:71:6b:
         54:12:91:07:85:7b:6c:d6:08:6c:8b:04:c8:4f:e1:b6:4b:33:
         a3:19:aa:09:34:91:e6:2a:e9:8d:ce:2d:28:12:a2:93:fb:16:
         96:a8:d1:e2:f3:8a:8f:a0:8a:dd:69:0a:02:38:bd:7b:4c:a8:
         02:2d:39:ae:f9:36:84:30:e3:04:e0:63:b9:1b:b9:10:d0:c5:
         e7:3e:a4:ab:d3:33:7e:1f:f9:a3:fb:cd:29:56:b5:b2:c1:9f:
         8a:de:e4:7b:c6:f2:de:1c:ba:6c:16:c1:3d:30:e7:06:e1:73:
         4e:c6:6b:f3:fb:ce:19:4f:87:c8:00:4d:99:9f:f8:a5:12:a2:
         be:37:25:d2:6a:99:a6:bc:dc:26:c6:68:cc:c9:6e:d2:56:4d:
         f5:37:7d:f0:65:05:f9:a0:63:e1:0f:dd:d7:d6:04:6e:a5:e8:
         6c:f9:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:09:49 2026 by rpki-client