Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File:                     RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier:          4jnK9qQlJEEPvjzkd79u3+KrbFPh6LuqmIDihKr3fXA=
Subject key identifier:   AC:F6:98:7C:0C:E1:41:00:36:E3:88:FA:B9:A2:06:C3:9A:7A:55:8D
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer:       /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial:       019F93FFC28D5A9B3B9E4AA3B40C47B23113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number:          0A67
Signing time:             Fri 24 Jul 2026 12:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:39 +0000
Files and hashes:         1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
                          2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: Nqc53d9iqckWGHKyF6vbnJLjJOP+L2kzfcHsGi7grPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:c2:8d:5a:9b:3b:9e:4a:a3:b4:0c:47:b2:31:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
        Validity
            Not Before: Jul 24 12:00:39 2026 GMT
            Not After : Jul 25 12:00:39 2026 GMT
        Subject: CN=acf6987c0ce1410036e388fab9a206c39a7a558d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:97:d3:a3:f5:fb:51:de:82:b9:2a:27:86:
                    2f:45:f7:99:89:8c:6e:7f:e3:93:a6:5b:ec:d2:fe:
                    99:0f:2f:ce:c9:69:b1:0d:86:6b:32:1d:19:46:d8:
                    25:99:f5:af:1b:fe:a1:82:a5:18:4d:01:d4:43:4a:
                    8b:68:32:bd:ca:6b:b0:01:8a:79:7b:db:81:c5:52:
                    0b:91:e3:bd:9d:c2:44:96:88:b5:37:fc:27:54:2b:
                    12:c0:ed:11:c3:ee:ae:d1:0a:42:06:11:6f:83:b1:
                    9f:c2:25:b5:d6:bf:49:20:25:b8:ad:f4:b1:29:74:
                    57:4d:ec:48:31:20:bb:db:9b:11:23:3a:f8:ea:04:
                    3f:e4:56:13:be:49:3d:eb:35:d6:f4:63:00:25:98:
                    ff:f9:56:36:6b:bf:85:c0:6f:33:2c:da:c9:4d:a3:
                    6b:00:58:bf:ce:99:fc:77:d5:95:ad:0a:7a:b4:f8:
                    85:37:05:71:52:f8:f9:5e:98:06:18:66:0b:f6:50:
                    c8:a6:b1:47:16:e8:1a:d1:b6:b3:47:07:96:7d:c0:
                    81:7f:13:e0:ad:54:e4:ab:b2:dc:ac:13:fd:04:11:
                    e1:6a:d4:95:27:74:29:3e:06:3f:98:bc:32:78:42:
                    ed:28:e0:c3:63:0e:23:92:86:6a:5e:99:cb:a2:a1:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F6:98:7C:0C:E1:41:00:36:E3:88:FA:B9:A2:06:C3:9A:7A:55:8D
            X509v3 Authority Key Identifier:
                keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d2:a4:4e:b4:34:1e:b7:8e:d8:f6:79:00:d3:bc:14:46:a0:
         66:55:12:d2:6d:c9:e9:7b:d0:4b:34:89:9d:dc:fe:36:9d:3a:
         e6:51:e3:58:ee:6b:ae:61:8b:a9:cd:06:c9:29:bd:f3:1f:51:
         67:37:f2:ff:9a:2b:ae:94:a5:84:19:54:47:a9:bc:53:0e:09:
         2e:8b:49:6d:73:0a:7d:16:7b:fa:51:a9:c5:bf:9c:bf:3c:26:
         0f:f2:a2:41:d2:ff:91:16:9b:b3:3e:fe:39:56:27:5b:22:83:
         77:01:6b:b0:89:9d:57:0b:00:e7:a6:8e:27:15:c5:e4:3b:df:
         6f:24:a5:bf:4d:8f:04:ed:57:c3:99:1b:78:a9:3f:6f:f4:9b:
         9f:d9:2f:70:6a:fc:6a:fc:03:ba:32:de:f5:d9:fd:19:ad:5a:
         ec:89:9b:48:de:39:a3:4e:d1:f9:ca:19:39:fa:d9:8b:8a:04:
         83:96:07:99:03:d0:c8:61:26:ca:72:82:49:ff:94:7d:13:9b:
         22:22:7d:db:f4:cd:7c:45:c4:fb:f2:8e:b2:37:ba:c3:ff:c3:
         8b:b9:3d:f9:10:52:11:db:0e:d0:db:db:f8:9d:03:63:c5:40:
         94:91:78:e0:ea:5d:6f:63:67:e6:e7:7f:7c:c8:ad:30:8e:2e:
         88:3b:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:19 2026 by rpki-client