Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          vlXFqRxceN74HaLwt/FYdCt+q7R0/lpw9Wxi6Fpg3tI=
Subject key identifier:   36:49:F1:79:F4:7A:47:16:3B:EB:45:E4:B0:74:F5:1F:2D:F4:A8:AC
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019F92B668F7FD93E7813A108C3D2C9EA79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          169E
Signing time:             Fri 24 Jul 2026 06:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:55 +0000
Files and hashes:         1: HiiPQJYwHAaSYAVm8uTze8vCE9o.roa (hash: 2nziwQn2BDX70j1YJrz3ReJWO/lfYuKvlW5ZyhVZirs=)
                          2: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          3: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          5: rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa (hash: 5EPYMX4bCFhTuhRxbCYeuyqQ6i8l79Kij3J+8QpNg1Q=)
                          6: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: f/QjllWRsbLfNsnlNMgfWDsGmJaq14MSQgZRNZ0eqUo=)
                          7: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:68:f7:fd:93:e7:81:3a:10:8c:3d:2c:9e:a7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Jul 24 06:00:55 2026 GMT
            Not After : Jul 25 06:00:55 2026 GMT
        Subject: CN=3649f179f47a47163beb45e4b074f51f2df4a8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:19:ac:6d:8e:b1:c7:f3:7b:b0:5b:1b:2c:19:
                    31:5a:45:68:c1:4f:e3:19:6f:9b:15:37:c3:bb:11:
                    4e:99:35:e7:e0:eb:11:50:78:d0:67:3b:eb:64:f3:
                    df:46:4d:eb:8b:22:02:8f:2d:6b:5d:cc:e4:e1:f0:
                    4a:18:85:2f:ba:59:34:cc:4d:29:df:dc:e0:51:af:
                    4e:e6:e5:b4:3f:b3:dd:94:4e:0f:1e:e7:22:14:7e:
                    b5:13:05:1f:ad:d3:04:79:40:72:be:4a:ad:e8:68:
                    2c:21:1d:71:e2:b9:b9:a2:fd:34:56:d0:74:7b:25:
                    76:22:8f:97:25:9e:be:6f:fd:3c:be:f3:6f:ee:37:
                    87:d8:87:8a:1f:50:f6:5e:c0:ca:c2:a0:c5:38:fe:
                    d9:b2:3e:2e:84:a7:0a:ab:03:c4:f4:95:7f:9f:00:
                    54:a9:46:3f:65:ae:12:63:b1:0a:d7:e3:3f:10:8d:
                    ed:a4:78:47:4c:28:68:65:62:7f:7a:23:fa:f4:88:
                    c5:b1:76:6c:e1:61:1d:c2:09:72:7c:dd:77:39:07:
                    c1:4b:46:c6:16:e5:b6:75:2a:08:3a:61:d0:d0:45:
                    d4:3c:65:53:3e:58:22:42:09:e4:cd:6b:c2:1d:51:
                    9e:fc:66:c9:6b:21:10:72:17:a0:54:44:3b:db:44:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:49:F1:79:F4:7A:47:16:3B:EB:45:E4:B0:74:F5:1F:2D:F4:A8:AC
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:d3:1f:45:6f:66:38:a6:2e:ba:29:0a:ae:91:3d:7c:c8:
         a3:43:0a:85:80:e2:bf:74:3d:74:c5:5a:63:5a:f1:ce:f9:ed:
         ed:ec:46:85:5f:a4:09:3d:f3:ec:b1:66:1c:32:b5:96:82:bc:
         8a:7e:66:dd:ec:82:41:f3:9e:46:b0:f7:1c:55:13:01:b3:50:
         df:2a:6c:67:bc:49:32:72:ff:87:95:cd:f6:af:81:08:96:ba:
         45:94:df:12:d1:07:f4:46:d4:05:4a:c0:70:0c:b2:a0:ce:5d:
         7d:56:37:e9:4c:8b:e6:d2:95:8a:23:18:f6:5b:31:bf:c7:43:
         40:a3:8c:50:f7:9f:c5:94:5d:32:bc:72:19:97:a4:fd:18:0d:
         0b:d3:3e:c4:1f:c6:3d:d6:87:d4:8d:b6:f1:8b:31:5e:06:c2:
         01:5c:1c:7e:cd:d4:6b:11:e6:79:7d:29:c3:ed:1c:3c:13:e2:
         fe:43:ca:d0:a6:d4:09:e9:c0:df:be:f7:08:42:73:1b:4d:c5:
         c3:c3:ed:7e:26:51:32:0a:44:ea:48:59:80:36:2a:25:61:89:
         0d:36:88:d8:6c:65:5b:26:47:cc:4d:ba:eb:8d:77:1f:8a:ca:
         8f:11:5b:13:13:90:15:bd:ef:01:4e:08:09:d4:c1:ff:d3:37:
         03:5f:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:23:59 2026 by rpki-client