Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
File:                     ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft (raw, json)
Hash identifier:          D32d7Sy/xZygsoxKHmppqhRrAcG0Yy0tK7gUQRqsEaE=
Subject key identifier:   8A:C0:9A:DB:03:16:1B:C0:DA:B2:E1:ED:C5:73:80:24:31:B9:15:79
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Certificate issuer:       /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial:       019F935C48D7FF540450817DC227C2521299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:02:06 +0000
Manifest this update:     Fri 24 Jul 2026 09:02:06 +0000
Manifest next update:     Sat 25 Jul 2026 09:02:06 +0000
Files and hashes:         1: 1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa (hash: gzQs+2Sri4/i+ZuiKLzc6oYRR4Wmc7We38Tn2yPF6nU=)
                          2: KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa (hash: XSPZXPjtWmH3tsooKgIJCC9hK4ebdbO48OGaE0GPJDQ=)
                          3: Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa (hash: ZVqCkdThQ+Dxa4j8Ohcu5jpE4zpamft8rts1/91ztKk=)
                          4: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl (hash: FiIQcwSkw6FT6M1HE7Fwrz7z7RgEBz1e5yR2OZU0gmM=)
                          5: boyjYBR7CeYYqBubps31ePeRjKg.roa (hash: 44PfnVaKtdz7BnqSwnT3jqIEnA/Gm5oPQKvw5imMG+E=)
                          6: jwSgudfTgoD0rYPgWs2QdsgCaFY.roa (hash: T7RwlJl15rnyYrYfOU8otSAOkH0fOifwVGS8FpasWE8=)
                          7: kTamAiL6qOOf57nIraLXQq7irIk.roa (hash: djhCgJi8JfOsutJAAl8lRxYE0HKm1fCZVH28XEIjiKY=)
                          8: lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa (hash: PwjbCusxHYbPcriuRl5QcW2dN5wg11/a1p9YKj/rRnQ=)
                          9: pOkq5deJnN6boK6s5xEuzkj_cGg.roa (hash: J7cGVPgbOqr7KYHw8zUxLmdbPeKxga24cigIY5mS8rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:48:d7:ff:54:04:50:81:7d:c2:27:c2:52:12:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
        Validity
            Not Before: Jul 24 09:02:06 2026 GMT
            Not After : Jul 25 09:02:06 2026 GMT
        Subject: CN=8ac09adb03161bc0dab2e1edc573802431b91579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:69:92:5f:0a:91:df:ba:1d:25:19:79:75:
                    ad:58:2b:17:95:e1:2b:3d:c8:ad:94:fa:50:9d:a5:
                    77:c3:94:5b:f7:5c:83:a4:fa:8e:56:1c:81:ed:12:
                    18:b5:65:92:41:4e:f8:e8:7c:f4:cb:c4:83:aa:c5:
                    f5:8d:15:1d:28:58:d5:23:60:32:42:fb:6b:1a:88:
                    f0:1c:5a:67:70:1c:3c:0e:68:a2:3d:97:57:6f:58:
                    7a:7e:f2:9e:77:0e:90:07:df:1f:b3:2b:2f:48:a6:
                    da:f6:14:fb:5b:45:d1:93:2a:e7:3d:2b:2c:ef:9d:
                    a8:dd:45:2b:11:ce:bc:6e:23:8b:21:a2:18:ab:f9:
                    9a:6a:60:34:f4:50:84:4b:33:97:95:e6:ff:ed:b3:
                    98:92:5e:d6:9a:0d:eb:4f:5e:da:9a:cc:c8:53:86:
                    a0:b9:14:6d:e7:58:bc:b9:27:a8:78:92:13:ae:c2:
                    8a:fa:a2:8f:19:f9:91:9b:ea:f6:42:7f:b1:c2:02:
                    a4:2b:dd:1e:b7:c7:ce:6a:9e:3f:6f:86:cf:f9:07:
                    8d:18:62:c9:0d:5a:ab:c3:6a:a0:22:58:5a:b5:33:
                    46:c5:28:5a:05:c7:9b:27:4c:c9:8c:e6:d8:34:ac:
                    e0:32:8b:a5:68:88:68:e6:e0:e4:0a:cb:15:3d:f6:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C0:9A:DB:03:16:1B:C0:DA:B2:E1:ED:C5:73:80:24:31:B9:15:79
            X509v3 Authority Key Identifier:
                keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:e6:7a:18:9d:c0:a0:8a:ba:94:02:4b:b5:2f:85:a9:ed:
         c0:47:da:67:2b:97:9e:b0:5c:0b:97:f9:e6:e2:fc:8b:ab:3f:
         b2:c1:72:e1:df:9f:7f:6d:e5:28:81:2f:4a:be:c2:c8:d5:d7:
         cb:6d:8d:88:f7:72:34:71:cf:a5:f6:79:b5:bc:92:3a:04:50:
         6e:c1:9e:0f:ef:cb:fe:67:ba:17:b0:e3:e1:63:ef:b2:3d:01:
         ec:57:76:3a:3e:c3:27:43:e6:f5:7a:9f:1a:b5:9f:c7:46:a6:
         d4:95:29:a7:ec:dd:7a:e7:07:fe:97:e4:95:66:53:d9:03:8d:
         e5:c7:a1:a7:35:85:54:29:a8:a6:1e:4f:8e:0b:ff:e5:02:3b:
         86:4b:fd:d0:cf:8f:86:4d:53:f8:92:cc:8b:36:4f:f1:dc:64:
         0f:c1:e1:57:64:24:bd:5b:58:99:aa:53:18:ab:3c:44:51:c9:
         36:4f:06:1d:f1:f7:e0:ee:bb:e7:ec:31:58:1d:92:52:ce:6f:
         9c:85:5c:1f:a6:d6:e0:5d:33:23:32:b3:b3:cd:6e:08:6b:f3:
         c5:e8:f4:4c:d6:bb:f4:01:2d:90:c5:5d:c5:da:f2:eb:2c:72:
         97:ff:2e:c9:9a:b8:8d:8e:79:0c:67:7c:6c:f5:6c:c3:05:c7:
         17:f7:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:38:46 2026 by rpki-client