Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          WPAjReTBBmk9E6cPEJRdIaW86mbnXRi9F3pVCCeXH9M=
Subject key identifier:   59:CD:08:EE:B1:FB:69:00:75:CD:48:4D:07:37:2F:50:C1:27:4D:96
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019F958084788BF5D314B2975B906EAD8228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          1253
Signing time:             Fri 24 Jul 2026 19:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 19:00:55 +0000
Files and hashes:         1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
                          2: 3hk8gZRTXeoThSESdUyXemIodyY.roa (hash: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc=)
                          3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: 8z2enYJd4x30/Aq4yDHVBRAiO41bInjgnfXxFqlvjEg=)
                          5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
                          6: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
                          7: vUUgJIohg5SQneif_sUKDZs-FYo.roa (hash: O9F4ICaD35Dayn0PCg4Uohxoxcc4CWJ4HvxFQPiHF6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:84:78:8b:f5:d3:14:b2:97:5b:90:6e:ad:82:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Jul 24 19:00:55 2026 GMT
            Not After : Jul 25 19:00:55 2026 GMT
        Subject: CN=59cd08eeb1fb690075cd484d07372f50c1274d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:d6:98:e1:a3:e2:3f:92:56:4e:ab:c2:51:
                    77:db:ec:84:43:ef:42:18:67:9d:c0:46:5a:38:2b:
                    d7:7f:bf:46:6a:62:0b:d7:dd:07:3a:f9:9d:4b:c3:
                    e5:b2:c9:7a:a4:03:7c:1f:c8:62:7f:7d:fe:62:f9:
                    8f:3d:90:9f:cd:6b:1d:06:47:cc:ab:c1:f8:71:ad:
                    39:9e:c6:98:8b:8b:9e:8a:48:51:cc:75:67:e3:2c:
                    26:2f:73:cd:61:6e:dd:6a:19:96:e8:12:e3:fa:09:
                    87:c3:d6:cd:7e:5d:cb:a4:21:ee:5d:e7:3f:af:14:
                    71:41:64:df:9f:0d:1b:b2:52:e5:71:bc:5b:23:18:
                    d5:86:64:d7:a0:3d:85:2d:af:91:1c:05:72:8a:9f:
                    46:9a:40:79:92:26:85:be:ea:e9:a2:4d:b5:77:7a:
                    47:7d:5a:af:d3:28:bd:ce:5b:66:d7:a5:7e:20:30:
                    c7:56:a5:e8:e9:8e:8d:fe:6e:59:d7:ae:61:53:03:
                    58:1e:08:27:a5:4a:15:1e:ce:34:86:08:eb:99:bc:
                    24:4b:61:2e:02:cb:80:51:0b:b6:0b:22:1f:87:fc:
                    6e:79:30:c7:be:76:b2:b7:7b:9c:92:a1:25:5c:74:
                    ad:7a:7b:3e:17:c0:b9:1f:b4:3d:cf:d1:7e:57:c9:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CD:08:EE:B1:FB:69:00:75:CD:48:4D:07:37:2F:50:C1:27:4D:96
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:ab:ab:1c:b3:f1:24:0a:e0:ed:4a:de:b0:bc:8f:32:a7:
         4b:e0:7b:7d:02:9a:e7:86:8a:ad:b7:e0:0a:af:4b:19:bf:a6:
         4c:42:50:9f:e8:81:ea:34:5f:2c:cb:57:8d:26:24:35:a5:b1:
         f4:84:f9:d4:d0:21:ae:c1:d7:a7:b1:e1:17:45:53:bf:64:43:
         42:86:c5:e1:83:7c:7e:9a:a1:36:80:7b:00:04:04:cb:4d:f4:
         dc:33:a1:73:c5:61:44:4f:8e:53:9b:71:ee:e9:aa:64:f6:fd:
         25:ff:ef:79:ba:1f:2b:c9:c0:5a:7a:60:b6:69:1c:ca:01:ac:
         90:b7:43:d8:23:b8:6d:33:97:8f:cc:27:ce:c8:6e:d5:33:52:
         65:4f:fd:49:c3:bf:14:27:22:8e:46:65:13:f2:f6:85:00:71:
         b4:a3:28:89:e3:64:d8:8a:1e:3a:2e:23:31:b0:ed:e3:2c:81:
         57:1b:e3:d5:21:a7:46:d7:57:90:c9:d5:3a:96:e4:2d:5d:11:
         38:8d:8b:05:b3:83:68:64:5f:c8:30:9a:8d:75:3f:9b:7d:24:
         20:ae:2b:55:f8:a8:8a:7c:99:32:98:33:96:40:02:8e:00:c0:
         62:56:36:b7:98:fa:30:4f:0c:f7:18:09:7a:99:31:e4:7f:cf:
         39:8b:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:44 2026 by rpki-client