Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File:                     ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier:          p11vcRm0d1fCThilQZXXjmlR8Zh7oMhv6ocgp7mM8rk=
Subject key identifier:   D2:93:B6:33:BA:F6:5A:54:2F:2C:7E:00:E9:1E:BC:B4:8B:B6:E9:6A
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer:       /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial:       019F913553E23374398BF9DF204EA3881883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number:          054B
Signing time:             Thu 23 Jul 2026 23:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:18 +0000
Files and hashes:         1: 5_mNKvnFKLC3DW1kpn5M97s_rV8.roa (hash: YSn080K1AyDozT4ZZIR3FUMOs0H/Uq7H2U6XVLEbIes=)
                          2: NS4bJSf8JtisPPo4E4AUvgYiJkI.roa (hash: kNAqy7sfsX/DzrejY1IHLtdhRNkU/dXjQEKN71zDd5M=)
                          3: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: YsZoG4eEnsicewP6sKWG3qQokfmONNRGNQz4e3nwk8c=)
                          4: m0S48tEBv9nFzVOV38xvVb-7W24.roa (hash: kgq2gT5y50cbq7aH/NdH+FdCNYhuUI9iaSWsZs757h0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:53:e2:33:74:39:8b:f9:df:20:4e:a3:88:18:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
        Validity
            Not Before: Jul 23 23:00:18 2026 GMT
            Not After : Jul 24 23:00:18 2026 GMT
        Subject: CN=d293b633baf65a542f2c7e00e91ebcb48bb6e96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:ea:bf:5e:7c:c6:39:23:f1:b3:8e:c4:cd:
                    0e:c9:a8:30:e7:32:f5:16:84:12:13:d5:a0:51:5a:
                    37:01:29:f8:4d:fa:bf:88:1d:4e:c2:83:75:60:ca:
                    d7:35:73:8c:db:db:c4:c8:e9:54:eb:db:fc:33:c1:
                    e5:d9:0b:52:c3:2d:7c:ea:47:15:5f:a6:bc:f2:84:
                    d1:67:27:38:e5:e2:42:9b:af:11:7a:99:2a:18:cc:
                    f6:7f:bf:4d:65:39:a5:14:e4:b6:cb:b6:b6:99:76:
                    b6:82:ac:86:71:7a:66:24:0c:7d:68:14:aa:e0:40:
                    55:3f:a9:af:e0:5a:86:cd:d6:90:c6:bf:07:5d:48:
                    90:ed:42:da:0c:56:2e:07:74:ca:ae:1e:01:d5:48:
                    6e:40:07:e6:eb:b2:60:4b:dd:99:9e:72:d3:10:be:
                    d9:10:4f:07:80:ff:c9:f4:4a:fd:bd:1b:c1:ac:67:
                    2e:65:0e:33:88:2a:cf:9d:54:4a:4f:b3:8c:a3:a3:
                    b8:34:8a:b8:aa:7f:ec:f8:0c:f0:30:b3:b6:2f:ac:
                    b2:b7:72:a4:8e:d5:d8:7b:2d:f4:42:87:06:da:ce:
                    e6:3f:3f:76:34:1d:09:01:fc:cb:52:74:6e:7f:43:
                    7c:26:e4:7c:cd:32:aa:37:eb:d6:1f:25:45:d9:44:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:93:B6:33:BA:F6:5A:54:2F:2C:7E:00:E9:1E:BC:B4:8B:B6:E9:6A
            X509v3 Authority Key Identifier:
                keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:78:ba:dc:9e:1e:03:d9:e7:6e:4f:71:b2:70:ca:56:9c:2d:
         dd:91:c2:31:86:82:d9:ca:3e:32:51:3b:2e:b1:9b:b7:73:c5:
         17:93:ef:2d:b7:b8:51:b5:a1:86:67:23:0c:33:ad:8f:6b:93:
         56:29:fe:85:50:87:02:c4:0f:40:89:5d:da:ee:4d:7b:03:f3:
         e8:70:50:d8:24:30:30:c7:e1:b9:2d:24:9e:43:42:6c:b1:ba:
         e4:c2:ec:08:d8:2a:61:b6:81:57:3c:13:fc:16:61:f0:75:91:
         45:d4:32:9a:3a:f9:65:c7:e4:1b:5b:4e:db:a7:b5:0d:17:e2:
         8c:bb:78:32:95:76:89:e1:de:31:50:d4:02:3a:ba:1c:cb:e0:
         d2:72:ab:79:c2:4a:06:9f:f1:24:b7:90:a0:1d:fd:50:d9:d4:
         0d:24:47:c7:40:2d:ae:4f:f7:6f:fb:a1:b1:ba:d0:bb:18:5c:
         5b:77:5b:af:17:6b:42:56:f6:b3:c9:a6:12:e4:24:89:f3:c7:
         63:8b:c2:b5:e2:99:58:41:1b:15:da:58:2d:1c:85:5e:d2:89:
         80:70:ad:54:ce:d4:af:b6:e3:02:77:60:52:a8:47:5a:ec:6f:
         dc:20:7b:b0:9d:4d:7b:ef:32:a6:ed:2a:ef:f5:89:88:74:2c:
         1d:52:d0:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNVPiM3Q5i/nfIE6jiBiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Y2YxZWU5MDY1M2I3YjgxNGQ2YjU0NTk0OWJkOTRkZGUw
ZmM2YTEwHhcNMjYwNzIzMjMwMDE4WhcNMjYwNzI0MjMwMDE4WjAzMTEwLwYDVQQD
EyhkMjkzYjYzM2JhZjY1YTU0MmYyYzdlMDBlOTFlYmNiNDhiYjZlOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuzqv158xjkj8bOOxM0Oyagw5zL1
FoQSE9WgUVo3ASn4Tfq/iB1OwoN1YMrXNXOM29vEyOlU69v8M8Hl2QtSwy186kcV
X6a88oTRZyc45eJCm68RepkqGMz2f79NZTmlFOS2y7a2mXa2gqyGcXpmJAx9aBSq
4EBVP6mv4FqGzdaQxr8HXUiQ7ULaDFYuB3TKrh4B1UhuQAfm67JgS92ZnnLTEL7Z
EE8HgP/J9Er9vRvBrGcuZQ4ziCrPnVRKT7OMo6O4NIq4qn/s+AzwMLO2L6yyt3Kk
jtXYey30QocG2s7mPz92NB0JAfzLUnRuf0N8JuR8zTKqN+vWHyVF2UTVzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKTtjO69lpULyx+AOkevLSLtulqMB8GA1UdIwQY
MBaAFGTPHukGU7e4FNa1RZSb2U3eD8ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yOTljYWEtOGNjZC00OWMxLTkwMjkt
ODgwNGRhZDc4MGExLzEvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yOTljYWEtOGNjZC00OWMxLTkwMjktODgwNGRhZDc4MGEx
LzEvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJni63J4e
A9nnbk9xsnDKVpwt3ZHCMYaC2co+MlE7LrGbt3PFF5PvLbe4UbWhhmcjDDOtj2uT
Vin+hVCHAsQPQIld2u5NewPz6HBQ2CQwMMfhuS0knkNCbLG65MLsCNgqYbaBVzwT
/BZh8HWRRdQymjr5ZcfkG1tO26e1DRfijLt4MpV2ieHeMVDUAjq6HMvg0nKrecJK
Bp/xJLeQoB39UNnUDSRHx0Atrk/3b/uhsbrQuxhcW3dbrxdrQlb2s8mmEuQkifPH
Y4vCteKZWEEbFdpYLRyFXtKJgHCtVM7Ur7bjAndgUqhHWuxv3CB7sJ1Ne+8ypu0q
7/WJiHQsHVLQlw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:56 2026 by rpki-client