Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File:                     Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier:          zReBnL93NQlTSV4rsZv7TYlo7thRtEaj82swvVJ9aVU=
Subject key identifier:   F6:14:B8:B5:6D:EC:DC:88:26:51:08:7C:BE:20:D0:23:58:EC:DE:04
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer:       /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial:       019F9324135C722F60548ED6F8ED18D01CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number:          05BD
Signing time:             Fri 24 Jul 2026 08:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:42 +0000
Files and hashes:         1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
                          2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: UiKOw5LwxRP0ygv1zeN5NFvONDYS4J1vSYpUaMpWiLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:13:5c:72:2f:60:54:8e:d6:f8:ed:18:d0:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
        Validity
            Not Before: Jul 24 08:00:42 2026 GMT
            Not After : Jul 25 08:00:42 2026 GMT
        Subject: CN=f614b8b56decdc882651087cbe20d02358ecde04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:64:2b:2d:c5:4e:6d:e2:c8:6a:03:e8:bb:
                    ff:04:16:97:5d:ae:8e:d8:c2:2a:69:ce:fb:d4:81:
                    93:78:16:da:c9:83:ff:b2:93:1b:e3:8a:39:da:c4:
                    08:11:d0:e7:03:55:02:da:c4:09:74:ee:00:d5:5b:
                    b2:d0:05:1c:58:65:34:ea:f3:c3:6f:ef:5e:bf:89:
                    1c:86:3b:50:a9:88:b1:3e:f8:ed:2f:58:bb:49:75:
                    03:77:f6:ec:c5:80:a6:27:bf:ff:c9:25:67:9b:36:
                    c6:1b:70:2b:1c:84:43:5a:77:12:db:f3:d5:aa:b2:
                    cd:e5:22:db:b7:9c:9c:7b:82:c9:64:91:d8:82:cf:
                    23:c8:c3:17:7b:71:98:df:49:89:21:ca:e6:fd:5d:
                    7f:7c:93:47:bd:83:e9:be:43:1e:f1:1e:78:40:d0:
                    6f:91:f2:43:41:55:c2:38:57:d0:cf:8b:54:16:00:
                    4f:06:cc:ae:48:93:a8:6c:9b:1d:4e:93:59:89:6d:
                    00:20:e8:0d:42:64:d7:6e:9d:b0:3e:66:18:1c:b9:
                    c9:c1:66:59:2c:3a:bb:ac:69:98:41:e8:24:cf:a3:
                    bb:00:ac:b7:9c:64:79:1b:75:46:6f:42:67:7b:25:
                    3e:6d:01:e2:eb:35:42:6a:db:a0:97:f5:36:b5:9a:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:14:B8:B5:6D:EC:DC:88:26:51:08:7C:BE:20:D0:23:58:EC:DE:04
            X509v3 Authority Key Identifier:
                keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:99:6e:db:61:f4:77:2d:d8:6f:ca:92:ef:cc:45:ba:8c:18:
         19:c0:1f:40:88:4f:98:91:8d:38:13:f9:8a:c1:b4:3d:dc:30:
         a8:5a:85:a8:66:a4:83:c7:ff:70:50:38:fb:5d:be:7a:17:c0:
         0c:91:b4:15:51:05:a3:8b:b3:ac:d6:87:eb:33:28:b3:61:2a:
         d6:34:97:51:9b:20:94:9b:6e:d0:79:78:01:80:ef:d5:f0:40:
         b1:fe:47:13:22:dd:cd:9f:1a:86:cb:59:c5:15:e9:6f:ca:c3:
         99:d1:b2:ff:6a:09:65:f8:fc:82:16:ff:57:71:6e:7e:57:77:
         6a:67:79:f3:40:43:96:7d:e8:6b:c4:71:b7:3e:85:d2:a9:85:
         30:64:92:46:85:86:76:fc:59:69:d1:79:84:b1:6c:f6:ca:f7:
         23:c1:85:3d:4f:e5:16:89:f3:06:99:e5:dc:85:45:b0:26:d0:
         2d:fd:cb:74:08:33:45:ea:59:c4:82:b0:99:2e:99:21:69:97:
         46:c4:9a:ab:11:6a:fc:d3:e9:2e:60:5d:77:21:30:6a:63:3f:
         28:6c:79:cf:c3:22:c8:69:ae:74:90:a5:7e:2b:0e:58:2e:3c:
         a3:7b:e0:76:46:dd:05:54:b3:c5:57:76:d4:8b:96:25:8f:d8:
         1d:6b:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:23 2026 by rpki-client