Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File:                     p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier:          qbLwR3hAXcKD9ZkYHJcP67wnUAuR8AviYvvDu4DW6qY=
Subject key identifier:   81:FF:4F:51:67:43:B8:61:95:F7:BB:0C:A9:12:7C:F6:60:DB:33:46
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer:       /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial:       019F976E808B75BCCD0302338E0F4BAD63D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number:          154D
Signing time:             Sat 25 Jul 2026 04:00:29 +0000
Manifest this update:     Sat 25 Jul 2026 04:00:29 +0000
Manifest next update:     Sun 26 Jul 2026 04:00:29 +0000
Files and hashes:         1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
                          2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: PH393ARwyRYE7PnbGaOYVTxlMw0/xIFk15LVNYnt0aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:6e:80:8b:75:bc:cd:03:02:33:8e:0f:4b:ad:63:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
        Validity
            Not Before: Jul 25 04:00:29 2026 GMT
            Not After : Jul 26 04:00:29 2026 GMT
        Subject: CN=81ff4f516743b86195f7bb0ca9127cf660db3346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:8d:29:70:a0:d6:c1:e8:87:c5:27:5d:4c:
                    4d:b7:f6:f5:6f:8a:3b:25:08:25:20:e9:f2:dd:2d:
                    94:c1:70:fe:f0:1d:5d:2e:0a:d8:83:f2:29:67:5e:
                    60:97:d6:f3:c6:c1:74:b2:c3:a4:c6:36:8e:49:d4:
                    ec:0c:ff:1c:1a:10:3c:c9:85:ea:1b:95:a1:7a:cb:
                    05:c7:66:f7:1d:bd:4f:19:be:94:76:f1:d4:31:3d:
                    1b:8f:4b:25:a2:27:1b:19:f2:4d:c4:18:59:02:1a:
                    9a:bb:e9:29:b7:3d:be:84:a7:f9:57:55:f8:d8:72:
                    f2:e2:21:fe:97:97:f9:17:31:2e:99:55:bb:7a:13:
                    a2:23:e7:98:9e:ff:bc:77:11:32:51:ae:44:33:17:
                    20:38:73:db:9f:22:81:fb:04:d8:f6:ff:f0:9a:1f:
                    94:26:d0:57:2b:58:08:1c:e7:08:af:23:eb:71:d6:
                    c6:29:3f:4c:02:9c:19:8d:c3:e8:eb:a7:52:cb:1a:
                    f6:bc:b6:11:1a:a5:a1:39:65:b5:b6:c4:d4:8d:44:
                    59:f1:1d:f0:19:9f:39:cf:e7:ae:8a:8c:b6:e4:cd:
                    24:a8:36:e4:1d:25:10:6f:3b:e4:4a:fe:9d:a9:1a:
                    b3:4c:37:02:70:b0:22:e6:10:0c:7e:7a:a2:b8:64:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FF:4F:51:67:43:B8:61:95:F7:BB:0C:A9:12:7C:F6:60:DB:33:46
            X509v3 Authority Key Identifier:
                keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:63:06:a4:94:dd:1e:97:29:32:e2:20:16:ca:a0:a2:8c:26:
         ea:d6:d4:e9:93:1e:4c:b2:1c:17:4e:df:7d:2f:cf:bc:69:87:
         ba:63:b0:fd:09:7e:93:58:a5:00:56:90:28:f6:59:47:05:2f:
         ba:db:2f:64:be:d9:e4:15:57:b4:09:e9:14:a1:8b:ee:ae:98:
         39:51:e2:cc:5c:e5:eb:fa:d8:36:ed:db:d8:12:c6:c1:06:8d:
         97:7e:07:2e:fb:55:0b:0f:4e:25:81:53:90:45:fc:63:2d:45:
         8b:b3:45:b1:b3:b5:10:01:6b:33:83:f5:f3:3b:8e:86:8b:75:
         6e:3e:60:47:35:a9:c7:b7:3b:2f:6d:17:45:40:3c:18:c0:b9:
         e1:0a:ac:d4:f6:d4:d2:0e:f5:8b:60:4e:ea:53:e4:b7:9e:32:
         93:da:90:51:43:0a:67:93:35:a2:9f:18:dd:1f:2c:86:1d:bb:
         8e:ae:3a:06:6a:16:4f:9c:97:76:83:08:f1:eb:68:4d:65:2b:
         af:97:96:96:03:1f:ca:8c:76:7d:df:96:ce:68:44:68:e4:14:
         3c:75:38:61:aa:b4:cc:1d:9d:fa:3e:61:c7:40:83:9d:27:67:
         42:a7:c3:bb:3d:10:97:3f:62:13:85:15:98:af:d5:fe:82:af:
         2e:6e:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:33:06 2026 by rpki-client