Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File:                     z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier:          PSSxxruxyrluT4XSlZmBD+Qp7HS4yHjmUBmEGyrT9i8=
Subject key identifier:   64:21:37:54:1B:36:C8:C9:16:1D:13:07:73:F0:4C:DD:24:15:ED:B7
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer:       /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial:       019F92114CDD8770D49F372990114CE34D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number:          1240
Signing time:             Fri 24 Jul 2026 03:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:34 +0000
Files and hashes:         1: Muza-_3oCs1mXE2iijhmsa2ZMDc.roa (hash: F484vIaldigvaIIoMgyBe60CXF3BMbWAibiKKlPjgRg=)
                          2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: A3lkuj8n/COokZ+mL15Cv4HCaSkVrrARIt1KCKoMiCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:4c:dd:87:70:d4:9f:37:29:90:11:4c:e3:4d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
        Validity
            Not Before: Jul 24 03:00:34 2026 GMT
            Not After : Jul 25 03:00:34 2026 GMT
        Subject: CN=642137541b36c8c9161d130773f04cdd2415edb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:0a:55:f9:bf:bb:32:53:f7:da:c6:28:6c:
                    87:b3:9b:46:d1:c5:d8:dd:fb:0d:af:52:f4:9b:56:
                    47:23:ee:1c:7d:5a:37:27:d4:bc:c9:4a:0d:82:a5:
                    08:4c:5f:15:29:0e:ab:22:3e:ff:54:ab:7c:a5:07:
                    01:f5:3f:ac:9c:1c:0d:67:aa:f4:ed:11:01:9e:bb:
                    61:ea:45:e7:23:dd:c2:34:3f:fb:8a:75:eb:09:40:
                    58:94:a8:b1:b2:bd:3b:8f:a9:09:ad:67:b9:14:2c:
                    4e:a6:79:06:ee:0e:dc:c9:05:1e:91:9c:fd:63:84:
                    65:f4:6d:0f:8b:fd:f1:27:23:2e:f3:fd:25:4a:fa:
                    52:f6:a5:b0:a3:e5:71:58:09:a5:32:0e:26:56:bf:
                    90:47:c4:bd:c9:d4:95:e9:80:7e:a3:6f:03:77:23:
                    fc:02:cd:23:db:be:60:57:74:a4:7c:f9:11:24:d2:
                    1d:83:f6:eb:82:9b:98:c4:46:23:c5:b2:9d:93:70:
                    d3:d8:56:9c:ed:dc:e6:6d:1c:74:33:e9:a3:8c:82:
                    92:6f:39:32:49:7e:ef:7e:46:c4:71:d2:e8:ed:ed:
                    72:d7:2b:30:17:ef:a1:cc:2d:0d:4c:db:02:4e:be:
                    77:c1:93:70:90:21:37:b3:e4:ac:77:a9:d7:30:01:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:21:37:54:1B:36:C8:C9:16:1D:13:07:73:F0:4C:DD:24:15:ED:B7
            X509v3 Authority Key Identifier:
                keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:35:4f:eb:78:f3:24:a2:12:4c:c1:cd:7c:d0:b2:99:4a:44:
         c6:e5:85:c8:3b:80:63:70:fc:86:1a:3f:e9:96:b8:2a:5e:62:
         8b:f0:c3:50:42:b5:14:b8:54:49:5c:62:e8:d1:26:ec:a5:c0:
         c7:7b:f2:b2:f7:63:89:fc:d7:f3:4c:4d:d7:24:0b:70:1f:7b:
         2d:f0:f0:d7:9a:60:d7:d9:42:73:be:35:42:85:14:76:c9:d1:
         cd:b2:1b:66:42:ab:0d:a9:47:21:28:a5:86:8a:5e:4e:35:6a:
         29:b1:1d:2f:b4:82:8d:1f:7f:c8:05:de:90:f9:04:38:18:24:
         f3:5d:3a:5c:58:23:de:a0:a7:a6:bc:37:95:f6:f7:0c:01:5a:
         58:f0:47:8b:90:60:9e:60:be:ce:88:82:d4:e8:1c:e6:4f:cb:
         c7:29:24:c4:cc:fc:27:16:f8:44:66:e0:ca:f0:9b:25:4b:3a:
         37:c7:0b:6b:e7:c0:8a:73:2d:70:a1:e6:8b:e7:38:b5:a3:f2:
         41:03:b8:40:51:ec:40:97:b4:66:69:dc:af:91:12:6f:24:ae:
         f6:02:8e:ae:7d:b6:13:d3:d2:06:a8:b8:d4:64:fb:38:a4:5d:
         b5:6f:b4:93:a1:5f:f7:de:db:8e:78:9b:6a:80:de:f7:8b:30:
         b7:30:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:58 2026 by rpki-client