Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File:                     sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier:          BWdCDpSu1m2YhTAOoeOhfhKIxZYRrSr1as6TiyEVeVM=
Subject key identifier:   F4:EC:75:73:3E:59:EF:27:A4:D9:9C:05:77:43:C9:E3:D3:C0:BB:24
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer:       /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial:       019F8EA23AA55CFC3869188F4B653824A0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number:          0162
Signing time:             Thu 23 Jul 2026 11:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:24 +0000
Files and hashes:         1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
                          2: WLZwejPiTsGj3L9WWmyBlMUa03Q.asa (hash: NvnlIzfI7uEtt14QTA2ioVybslPnmkhw44zqG8hYsrI=)
                          3: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
                          4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: sON1bzHOJi3NgYJ7Nl04RBbpy/l3Cpyb3e0PXARf4F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:3a:a5:5c:fc:38:69:18:8f:4b:65:38:24:a0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
        Validity
            Not Before: Jul 23 11:00:24 2026 GMT
            Not After : Jul 24 11:00:24 2026 GMT
        Subject: CN=f4ec75733e59ef27a4d99c057743c9e3d3c0bb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:18:20:ae:2e:4a:85:d6:fc:ca:18:1a:69:
                    d0:a6:b4:fe:31:3f:b6:4e:a4:86:1b:1a:f1:ad:2b:
                    2e:fd:02:9b:55:c4:9a:2a:67:42:17:6c:70:bd:ea:
                    cc:1d:94:81:29:ff:24:7c:42:3f:39:55:24:52:da:
                    4b:cb:d4:49:f0:eb:8b:66:46:43:d0:86:32:8a:72:
                    fb:2f:4c:2a:a2:64:bc:40:e4:e4:61:51:fe:dd:06:
                    a9:50:83:dc:ea:75:53:5d:cb:d9:cd:98:a8:33:c3:
                    62:51:0a:f2:b0:d7:70:77:b5:f4:62:d3:54:3f:29:
                    5f:4a:04:fd:12:87:68:65:2d:4d:71:bc:41:9e:4b:
                    41:f7:f0:e3:0b:28:18:d3:40:3e:79:46:24:44:58:
                    8f:b2:0c:eb:fe:c1:78:e9:fe:e7:06:31:1d:d4:0e:
                    e4:45:6a:6b:be:f9:ce:f4:cd:0f:f7:2f:1b:dc:ff:
                    f4:d9:e8:e8:1b:fd:f0:d1:c4:5e:8a:53:d5:36:ad:
                    4d:bc:47:fd:5f:10:67:6c:e6:fa:58:3d:61:ce:df:
                    2b:00:c5:8d:63:c2:fc:5f:f2:b7:62:55:de:13:2b:
                    93:d8:fc:8f:2b:90:32:c1:dd:e2:c0:61:f3:e6:6e:
                    3d:f6:a9:f6:ad:a3:e4:fc:97:d9:f3:73:ca:fb:da:
                    7c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EC:75:73:3E:59:EF:27:A4:D9:9C:05:77:43:C9:E3:D3:C0:BB:24
            X509v3 Authority Key Identifier:
                keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:56:b1:8e:f2:6f:5b:ac:6f:0d:5f:ea:37:02:0d:12:8a:
         f7:c9:1c:e6:72:cc:57:39:2b:93:ba:6e:3d:12:11:59:0f:4e:
         df:bc:24:7e:1d:f0:4b:a2:4d:bd:86:bf:2f:0f:7c:d4:8e:e8:
         7b:42:51:01:26:04:7d:c3:1d:7c:08:4c:a4:49:ca:8c:c4:84:
         48:59:c5:af:07:e8:be:0b:0a:05:04:3f:ce:ca:27:5f:bd:3f:
         ac:09:42:09:3e:18:3a:8c:ff:5f:34:be:3e:6b:21:cd:dd:c4:
         6e:6d:d3:36:8c:4b:d7:79:f8:d0:2a:5f:f2:8f:4e:db:5b:e1:
         c8:14:ea:3d:00:c5:ff:c3:9f:fa:53:1a:36:66:ff:95:e7:c7:
         6e:ae:5d:fd:4e:81:5a:24:92:b6:85:92:96:f0:cc:cf:e3:76:
         4c:88:c0:c4:26:3f:20:76:8a:12:4f:af:07:39:a1:07:5c:d6:
         ad:85:44:55:b5:02:1c:f4:39:f8:e5:a5:df:fe:b4:b0:17:89:
         3d:8c:9d:4b:54:a2:e6:c7:2f:5c:55:bf:06:65:00:59:e9:b1:
         77:d8:ef:cd:40:f5:3b:0c:6d:fb:3b:95:a5:73:fb:cf:c3:64:
         45:c8:f1:82:80:64:10:b7:51:5f:a1:b4:61:b8:4a:6c:c9:c4:
         19:28:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:54 2026 by rpki-client