Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File:                     mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier:          NXRM+70BZ1LyQLn2YaVrmCqvsOCw6TzgMldNgzz0GWE=
Subject key identifier:   CA:AB:BA:0B:47:F2:81:1B:8C:62:F9:87:1F:DD:95:F9:5C:B7:B9:45
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer:       /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial:       019F92EDBB954C4468B5989BF48BFAE89FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number:          05EB
Signing time:             Fri 24 Jul 2026 07:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:21 +0000
Files and hashes:         1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
                          2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: Q5P4rDgEIi/PR0uFV9bZ9KYr/2IiuHjBk9/DpiQZb9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:bb:95:4c:44:68:b5:98:9b:f4:8b:fa:e8:9f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
        Validity
            Not Before: Jul 24 07:01:21 2026 GMT
            Not After : Jul 25 07:01:21 2026 GMT
        Subject: CN=caabba0b47f2811b8c62f9871fdd95f95cb7b945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:9d:3c:2d:f8:02:70:7a:da:c2:d8:f2:d9:
                    49:f8:8f:30:7f:f9:62:b3:ae:b7:7c:35:6e:27:22:
                    3b:b9:dc:af:13:34:e7:a2:8e:b7:4a:a6:44:23:d7:
                    28:03:e9:e7:5c:61:f4:83:20:b1:0d:d1:04:e6:e5:
                    3f:5f:b5:0a:3b:4c:f2:4b:9a:bd:27:7e:35:97:95:
                    27:95:15:ed:4f:35:24:a0:af:4e:68:6f:4b:66:0c:
                    bb:36:93:43:17:d2:a9:58:83:d0:06:56:be:8a:15:
                    e1:fe:18:f4:ec:67:38:dd:05:62:be:ef:49:b9:aa:
                    41:15:51:8d:f1:45:2d:ef:4f:2a:fc:12:47:68:84:
                    9c:fa:98:50:03:a6:86:6a:cb:91:47:ec:df:8e:23:
                    28:4a:8a:95:f8:1d:10:e9:6a:d8:4d:19:2a:3b:1d:
                    0a:f6:ea:da:da:b1:c3:8f:58:17:84:2d:8c:fd:1b:
                    15:53:68:b8:51:23:0c:b6:7f:6f:b6:20:99:46:b0:
                    b1:d5:12:40:d4:be:fc:22:5e:6f:cd:cf:bd:6e:50:
                    3a:01:a7:ac:e4:ec:92:2f:58:d6:eb:80:cf:9f:37:
                    53:11:4b:27:3b:d3:41:c9:93:25:3c:d1:6f:73:f0:
                    ff:a7:bb:9c:62:75:a2:ff:29:83:51:65:f6:cb:7f:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AB:BA:0B:47:F2:81:1B:8C:62:F9:87:1F:DD:95:F9:5C:B7:B9:45
            X509v3 Authority Key Identifier:
                keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:b3:79:b9:99:99:0d:1d:b1:88:85:2f:62:80:dd:c8:8d:
         42:a4:31:ff:a8:22:2c:26:0b:38:27:d9:76:cf:36:c9:ba:7f:
         8d:37:e1:79:bb:d3:f3:97:4f:01:ed:d0:0f:ab:fe:1a:09:a7:
         cf:45:34:de:f2:90:99:dd:9e:41:f3:36:2e:79:a5:94:28:f7:
         67:fc:d7:ae:61:47:06:6b:dd:35:ca:c2:e8:a3:79:96:55:bb:
         4a:65:4d:3c:9e:2b:4e:96:fb:eb:32:d0:a5:42:52:15:dd:5e:
         cf:02:e2:4d:da:23:e9:5b:94:17:de:6a:e3:53:ce:a3:da:c5:
         43:ab:f3:48:73:b7:87:1c:68:a0:66:93:05:dc:a1:b5:e4:66:
         1e:1f:93:bb:8e:dc:03:79:a7:0d:af:e8:d7:55:a4:84:7c:96:
         63:51:0b:c5:5e:ac:67:50:a2:22:19:a9:4a:16:e9:93:54:6e:
         15:8a:90:f3:7b:25:aa:ce:19:28:f8:e3:cc:41:de:3b:0f:56:
         94:99:f2:5e:87:b0:46:36:58:02:25:9e:4a:cb:ed:1e:f4:a8:
         d0:82:aa:e6:43:f5:34:fc:6e:50:77:87:3b:f1:ee:78:42:48:
         80:42:4e:77:6d:e1:0d:eb:c9:44:b7:a4:63:0c:b3:fe:c9:ef:
         25:4a:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:54 2026 by rpki-client