Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
File:                     ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft (raw, json)
Hash identifier:          XkxsYVdMOp6ea6NAzC0nyuljdUrOXgLx+3uX5EGhZFE=
Subject key identifier:   A8:FB:27:F1:A7:1B:0F:4E:1D:DA:8C:F4:8E:C6:E4:FD:CF:0C:57:CA
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Certificate issuer:       /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial:       019F9400362F2C9B2A4D5BD5526E3F4A80E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
Manifest number:          97
Signing time:             Fri 24 Jul 2026 12:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 12:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 12:01:09 +0000
Files and hashes:         1: 3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa (hash: sT+SSBni7dZcvlHSV+3jhOFDUsj7LFoenmqYmqUNvq8=)
                          2: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl (hash: nAOmsxFJWZetaUdR4PvU8fp0iwcxlc5Y90UkM/TplSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:00:36:2f:2c:9b:2a:4d:5b:d5:52:6e:3f:4a:80:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
        Validity
            Not Before: Jul 24 12:01:09 2026 GMT
            Not After : Jul 25 12:01:09 2026 GMT
        Subject: CN=a8fb27f1a71b0f4e1dda8cf48ec6e4fdcf0c57ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a1:c2:c9:5e:39:e9:c1:3e:07:57:b2:d9:74:
                    07:5f:de:f3:8f:be:ae:34:c7:e9:80:cb:47:41:d6:
                    15:2e:7e:89:17:7a:e1:e3:da:8a:39:5e:e3:ed:89:
                    b1:35:72:f5:eb:53:20:ec:1f:03:5d:f7:16:69:5f:
                    1d:80:39:93:f2:2b:e7:eb:99:e5:1d:4f:82:94:9f:
                    35:cc:8a:a5:8b:ef:ee:99:3a:3b:e8:bc:16:11:29:
                    a2:7e:a4:24:b2:c9:56:cd:77:52:84:04:f9:32:cc:
                    aa:4a:22:a7:0b:a2:e2:40:c3:90:69:6e:da:7f:ba:
                    34:4a:7d:4a:fd:61:b6:e9:41:f0:e5:ee:1b:fd:7b:
                    5c:f7:e7:47:64:56:a8:98:01:f3:87:2c:36:c1:62:
                    7a:04:22:48:3a:18:35:c0:9c:98:41:04:96:0a:80:
                    3d:82:14:4d:f5:37:5f:d6:1b:79:2e:53:d2:fb:0a:
                    93:ad:34:80:c9:87:0c:20:d6:36:8a:51:7f:4e:cd:
                    37:3f:30:6d:de:96:de:a0:25:ad:47:a3:2f:b4:9d:
                    4c:f3:42:94:c6:2a:22:a3:a2:29:59:b8:af:2c:81:
                    d1:24:8c:11:f2:c4:cc:94:a0:ff:1e:68:a0:11:fc:
                    af:a1:08:f5:6b:7a:ea:bf:49:02:74:92:73:fc:83:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FB:27:F1:A7:1B:0F:4E:1D:DA:8C:F4:8E:C6:E4:FD:CF:0C:57:CA
            X509v3 Authority Key Identifier:
                keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c4:a7:6a:93:8e:e7:16:e9:09:b5:30:4a:8c:4a:93:b1:9f:
         be:eb:f2:72:b1:81:15:39:ee:af:d9:a5:31:84:2e:7a:04:92:
         aa:79:f6:f6:b3:6e:e3:5e:6c:88:73:6c:ee:40:e0:fa:3f:72:
         f7:27:d8:f9:b6:0f:0c:11:15:45:be:72:78:fa:a0:a0:70:b3:
         7f:4b:dd:49:eb:e0:ec:59:19:09:68:68:e5:78:74:0d:c7:19:
         46:c4:69:f5:8b:a2:3e:ea:10:40:a4:1c:66:40:e2:c8:61:f0:
         50:64:35:a5:9a:43:52:27:d9:43:ee:fe:74:6b:92:62:4d:a3:
         b2:ed:ec:fe:02:42:c9:10:f6:15:a2:be:72:40:38:28:2c:6f:
         0d:08:85:77:7d:ef:e5:91:ec:f2:3b:c0:89:e1:b2:00:0c:10:
         df:7a:d3:38:c7:ac:e0:88:de:a5:20:32:75:4c:cd:27:9b:7a:
         ab:4b:e5:d8:f2:5c:8e:24:c7:cc:8f:52:84:62:09:07:d8:8c:
         5e:a9:37:b0:59:6c:39:60:eb:f7:bf:c8:93:51:92:c7:db:ea:
         0b:3b:07:23:b6:4f:d3:d0:41:09:60:d5:e3:f9:38:d1:b3:6c:
         7c:09:84:90:6c:96:44:bc:18:e8:6b:5f:00:c9:20:57:3b:d8:
         ce:7b:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:38 2026 by rpki-client