Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File:                     ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier:          9gQs5Qh58KgpAy44n/V0IZpvp8rJwTNUXwGnGfH0jVI=
Subject key identifier:   ED:58:E6:09:A1:BE:76:EC:FB:42:0F:A3:EC:E1:54:A2:26:94:42:EF
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer:       /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial:       019F91DA7B63AE0C5CA03962885D1BE09EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number:          19D2
Signing time:             Fri 24 Jul 2026 02:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:42 +0000
Files and hashes:         1: 1-RWTcjebB00EEPXrCQe14UhdpaU.roa (hash: xcBiWpi6+uT5sbN5EOtc0NeFtZPbsGISgJTOn56/et0=)
                          2: Ke8kTxOnrDSRnbMan8QsXJ_XEkU.roa (hash: CPpeXl3+kqfUGFSBaMiqr+IqI4glRjRTWo/lOcIIFFo=)
                          3: XFkubg9wfX84ABip8hpjo9juzcU.roa (hash: RFSGBBaYL7X28QtoqEmxImOKkYGxx+hir2PVsN+RGjY=)
                          4: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: 8AlQfIy19vk5i/D3rKM5NEDv5WHHYQs954h81cWesxs=)
                          5: aoxQba3i7QUm65BfMLv96JuOb74.roa (hash: QIB1S/gkkRQGrocEZtGs9uUeW1n+BujIUCxe8lcxHAw=)
                          6: j_e68P-AYa2rmUhuYOkm9hzEeD4.roa (hash: fu5OUQBQJIV8KAmP0Ju9hs+ANS87d5jd3QwiV+u9mQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:7b:63:ae:0c:5c:a0:39:62:88:5d:1b:e0:9e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
        Validity
            Not Before: Jul 24 02:00:42 2026 GMT
            Not After : Jul 25 02:00:42 2026 GMT
        Subject: CN=ed58e609a1be76ecfb420fa3ece154a2269442ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:77:72:00:a1:4f:e4:f0:4c:5c:2a:2c:60:75:
                    5d:1d:a8:e9:ad:6a:d9:98:78:fb:50:c4:1e:e2:fb:
                    4b:cf:30:f4:eb:2d:f9:85:b3:48:3d:5b:bb:ea:9b:
                    ca:08:4d:b0:2f:23:3b:03:22:bd:1e:71:f6:16:df:
                    01:d5:da:7b:62:83:f1:79:06:b7:68:91:9b:3a:d2:
                    07:7c:06:93:ee:c3:15:2d:ec:36:84:a4:dc:3a:59:
                    de:a8:26:ce:ee:f1:df:3a:96:44:b0:bf:27:42:3e:
                    a7:58:63:ed:65:31:e8:f2:cc:88:38:21:59:38:8e:
                    b8:79:5b:57:c6:bd:fe:31:eb:60:fb:ee:b7:9f:81:
                    9c:1d:0a:e0:9a:0f:7e:b8:bf:56:dd:61:89:a3:38:
                    d9:4a:37:db:ed:ac:e7:7a:d2:4a:87:3c:bb:43:06:
                    1c:6c:dc:32:ca:e9:04:89:e1:99:ab:8a:fe:42:d1:
                    31:cb:7f:67:5c:23:9c:90:d6:39:4d:bf:4c:f3:db:
                    11:52:75:12:d0:d9:50:f0:14:c9:79:9a:93:01:7d:
                    0c:14:34:4d:d0:64:f8:c9:c8:c4:9d:8d:ab:48:79:
                    36:f2:d9:5a:86:a5:c5:b8:0a:17:43:93:4e:72:db:
                    0d:6e:d4:52:a9:64:2c:3e:63:50:e6:a8:65:14:12:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:58:E6:09:A1:BE:76:EC:FB:42:0F:A3:EC:E1:54:A2:26:94:42:EF
            X509v3 Authority Key Identifier:
                keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:06:d2:c1:d9:ef:59:3c:6b:d5:69:ad:5b:4a:d8:62:3e:b1:
         a7:ba:02:76:e5:78:a5:60:f8:44:a9:93:37:02:c6:44:ae:b8:
         ea:78:5e:b7:60:ba:b3:2d:5d:59:03:39:5b:2d:91:3b:57:5b:
         c0:85:bc:ba:b5:80:e8:0a:c0:25:38:60:30:55:ae:83:76:49:
         17:ca:52:6d:0e:16:ac:43:c5:2a:45:92:94:ea:96:f9:1a:83:
         b7:74:2e:07:4f:bd:2a:56:26:5a:ab:44:01:59:48:3d:ff:33:
         d3:f9:1e:8a:80:99:69:ee:d0:42:cb:f2:f8:64:16:29:2f:75:
         07:88:bf:8a:98:b4:7d:97:15:16:e2:0a:67:1e:00:a4:00:f2:
         1d:6c:a9:46:f8:3f:67:f5:80:e3:81:87:82:bf:6e:12:58:dc:
         74:ed:c6:72:e8:f9:f4:f5:3f:73:77:48:e2:14:e2:af:ed:3d:
         5a:00:80:76:a5:2f:4d:d4:7c:b5:d6:6c:31:06:7d:e3:81:b8:
         10:d6:bc:d6:48:72:a0:79:ba:03:0c:e8:ca:d6:be:37:f8:8a:
         56:46:96:c6:b1:55:38:a9:ef:6d:0c:f8:42:20:4d:e8:41:94:
         31:03:1f:1f:46:bc:32:b9:44:0c:d1:fe:51:d6:17:4d:51:57:
         cb:65:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:10 2026 by rpki-client