Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File:                     zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier:          s+FVsRcZCmnHKmQHpjzJkCTbhjt9DDp73MGdhZk91gQ=
Subject key identifier:   3D:A8:B8:7E:31:5F:93:2B:7C:82:83:38:46:C8:28:E2:71:2D:84:57
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer:       /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial:       019F8FEC2E39E10A7E22283443DCD97B70E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number:          0C4F
Signing time:             Thu 23 Jul 2026 17:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:47 +0000
Files and hashes:         1: 1HJ0WMLf_ZwpvB2twqCOzVmtV0g.asa (hash: iR78X0mgCniZZCm4mwii2CU/1JD8ljNS0OWlnK+UZQE=)
                          2: Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa (hash: lsd6lPp/ulgto4+3u4nnsXd9a7lg4D4o9xZaATfNY4Y=)
                          3: ZPVObgSQAeaiEJWCunUwUTPvT5o.asa (hash: XJQ5ytTnF2RAOuhg27UFX6k5++USz3ZVVC5spCrv3+g=)
                          4: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: aypVL9222ktzlrsHBKY7ymblJG4eCY/hsYYnkQJftQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:2e:39:e1:0a:7e:22:28:34:43:dc:d9:7b:70:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
        Validity
            Not Before: Jul 23 17:00:47 2026 GMT
            Not After : Jul 24 17:00:47 2026 GMT
        Subject: CN=3da8b87e315f932b7c82833846c828e2712d8457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:d4:4d:33:89:2c:7f:49:e7:a9:c5:d4:c2:
                    d4:f2:bf:10:bc:bd:3c:59:67:ad:e7:70:da:0c:01:
                    a9:81:70:f9:d2:04:87:5f:ad:8e:58:be:7c:82:ac:
                    6e:93:5d:e9:56:2e:b2:8d:74:63:e9:8b:9f:34:bf:
                    b7:a9:f8:5b:02:1f:78:08:15:e3:86:6e:fb:b3:15:
                    21:00:f6:c7:8c:c6:4a:8d:fd:de:fa:b8:b9:72:db:
                    0c:d4:10:e6:68:be:f2:48:1c:78:c2:25:b3:96:96:
                    18:68:63:4e:e9:11:0c:09:e9:76:58:5f:21:1f:64:
                    2d:18:fe:57:39:da:c3:03:6f:d2:5d:2e:31:43:2a:
                    3b:5c:5d:c1:3d:4b:d2:d5:2b:b0:2a:45:3e:fe:ac:
                    94:2c:c0:18:51:35:55:34:6d:05:87:e2:5b:2e:93:
                    a9:56:5a:a4:58:ba:e7:15:84:d5:d4:23:76:b7:b9:
                    07:c2:05:e2:e4:ee:d1:0f:4d:c8:0a:de:a3:ea:ad:
                    cd:cc:77:d1:ce:21:45:a4:ae:c4:c5:a4:68:0f:c5:
                    3f:d9:09:5c:7d:24:7b:9b:8a:ac:25:04:0a:a1:25:
                    42:55:fa:73:ff:a2:c5:4f:18:0d:cb:25:b0:36:87:
                    e1:d9:6f:f1:bd:79:02:75:57:1d:72:0c:f9:4f:9b:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A8:B8:7E:31:5F:93:2B:7C:82:83:38:46:C8:28:E2:71:2D:84:57
            X509v3 Authority Key Identifier:
                keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:eb:1c:41:79:b5:d2:41:c2:26:d6:24:07:83:5d:3a:ce:53:
         df:34:aa:4c:b0:d6:37:a1:7d:cf:2d:78:45:c2:6c:0c:a3:61:
         83:6e:46:28:3c:5b:c3:16:e3:83:04:73:0d:dd:0d:33:52:70:
         79:16:ba:7c:88:86:cf:c1:e2:30:d0:78:d5:6e:b3:c5:70:e8:
         98:38:8e:12:6c:8b:3c:37:5b:55:6a:2e:16:87:96:69:00:76:
         23:5f:35:80:0f:33:18:c3:f5:9b:40:53:17:05:40:5f:c8:2f:
         35:56:b4:89:7c:48:91:64:3c:5a:89:45:3f:c1:2d:8b:81:28:
         b2:46:d0:73:ed:fa:85:7c:f7:3f:02:82:66:0e:ac:d1:29:f6:
         c0:b7:4a:ff:35:d9:a8:c9:9d:5e:50:fa:e6:da:65:bb:7b:56:
         5d:32:58:de:d3:f3:43:f7:e7:1a:5b:e8:40:be:12:48:c1:5a:
         7b:82:fd:05:97:e1:02:4a:5a:03:e1:bd:4f:95:f0:5d:6e:9b:
         f4:f4:ce:d6:75:0a:36:40:ee:97:19:62:57:87:e3:54:58:1a:
         b0:0e:1f:86:d5:5e:e5:fc:08:4a:de:47:3d:5d:17:94:9c:00:
         f6:db:a8:e1:5a:37:d5:d3:a4:ae:c1:d2:63:f8:9c:4d:c7:a2:
         67:8f:40:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:18 2026 by rpki-client