Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File:                     zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier:          N6pZzM9mEmNdky0a3/x2pA19z0Ahb1FxR5jNS4FOcqw=
Subject key identifier:   87:7E:6E:53:37:BB:81:5E:E2:C0:FA:8D:EA:EF:5B:0C:6F:53:AB:FF
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer:       /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial:       019F8F7F5A349A8E273D46A19EC585FAD76E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number:          1157
Signing time:             Thu 23 Jul 2026 15:01:55 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:55 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:55 +0000
Files and hashes:         1: 0L1L67jVugXzE__lTJGfbb8-q-Y.roa (hash: Qt2g1ctMd8cFHOzrewKQ8FYPO0z3lmCYJaL3Sc8ATow=)
                          2: aULXxwpV3n01msELu6FKmFfUQt0.asa (hash: NByj/5BS6ETg8U2+SS44eCFMC2AU9TZ/aruJFrPVAYA=)
                          3: e0EdhFf01seKM2ee00Orq33djUI.roa (hash: CXwllvMBMtWoZlpgKk44gW6slpYawA4OLdB4YkoWj8c=)
                          4: rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa (hash: M2Sx/zjlYAhCYCRsT+YiI+82fP7xUoFDJFNJGn+EKeA=)
                          5: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: 5v05kMiebQvC7rVTKMBniJHM24Rnou6Vi9RlN/YPVm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:5a:34:9a:8e:27:3d:46:a1:9e:c5:85:fa:d7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
        Validity
            Not Before: Jul 23 15:01:55 2026 GMT
            Not After : Jul 24 15:01:55 2026 GMT
        Subject: CN=877e6e5337bb815ee2c0fa8deaef5b0c6f53abff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:d2:8d:b3:bc:51:d1:d8:45:e5:bf:68:dc:
                    fa:c9:3b:13:c1:f8:34:d2:3b:8f:d1:8b:05:21:e3:
                    47:8f:6c:a0:de:d7:b2:14:37:1a:79:47:17:01:48:
                    8d:44:d0:b4:24:a6:48:d1:9e:3f:09:7d:0e:43:8b:
                    24:e0:6b:d4:52:73:78:02:95:25:78:27:6b:9c:32:
                    02:f1:9c:c6:9f:0c:04:af:7d:aa:f4:45:9d:8a:25:
                    4a:90:f9:54:7d:f6:3f:b6:61:4e:d2:55:90:88:44:
                    ae:20:26:a1:36:94:8b:1f:2b:48:4d:24:97:6a:59:
                    6d:32:18:ba:5d:55:6b:db:e7:35:59:6e:e9:63:f7:
                    12:b1:63:26:09:20:1f:83:ad:9b:e2:f2:fb:78:5f:
                    67:37:46:64:53:7c:53:27:06:a6:4c:68:08:78:9b:
                    1a:fc:26:3d:0c:70:41:29:43:e4:15:a3:8d:16:cf:
                    e3:9c:66:5e:a6:bb:48:ad:ff:45:4e:97:dd:bb:65:
                    21:f5:f5:95:75:41:0a:81:4b:a6:70:66:5f:4b:a2:
                    dd:5f:31:aa:34:2c:7d:69:10:79:7f:18:bb:35:77:
                    d1:bf:82:7f:e5:54:39:7b:11:6b:12:d9:a7:e7:f7:
                    00:f6:6b:46:ac:3d:f4:7a:d9:c4:c0:e7:39:5a:ff:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7E:6E:53:37:BB:81:5E:E2:C0:FA:8D:EA:EF:5B:0C:6F:53:AB:FF
            X509v3 Authority Key Identifier:
                keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1a:e7:cd:e2:b3:43:73:88:d6:d2:f8:6c:e8:48:a6:49:e1:
         8e:2e:df:56:86:1b:24:46:ce:c8:0f:c6:88:33:20:91:45:d9:
         b4:77:0f:4f:72:cc:48:04:43:83:26:8b:5f:18:e8:0f:8c:d0:
         76:4c:ee:70:b8:0d:46:92:0f:21:14:1f:66:a9:53:5f:76:35:
         19:64:69:d6:6e:e4:ba:2c:7b:d4:56:99:cd:bc:7f:b3:90:71:
         6d:2f:d2:aa:a0:fd:81:ba:ad:47:28:bf:d4:75:99:b0:af:64:
         ac:97:3d:57:7e:0e:95:72:cd:73:42:fc:96:b1:a8:df:19:be:
         85:9a:15:33:a1:6a:37:fb:5d:96:af:80:eb:41:b2:f6:5a:5c:
         83:e3:94:62:7c:65:13:6e:de:e6:27:12:7f:f2:72:62:1a:f2:
         48:18:e5:5b:51:ac:7a:ac:f5:e9:22:88:95:cc:61:eb:2b:54:
         9a:2b:21:1e:88:f4:62:6c:f2:11:90:f0:4e:42:e0:29:db:53:
         b1:70:3c:02:c6:26:52:71:85:d8:b8:9a:af:af:74:6c:e8:25:
         28:d0:68:f9:86:5b:92:89:43:cf:06:13:f2:b0:53:f3:c1:cd:
         e3:f5:e8:a7:3d:00:c4:4a:ff:27:9c:02:62:18:df:97:56:b4:
         71:50:0c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf1o0mo4nPUahnsWF+tduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGI2ZjEwMDMwZTI3NmY4MzE2Mjc2ZjQwYjNkNGE0MTg0
ZDk0ZGQwHhcNMjYwNzIzMTUwMTU1WhcNMjYwNzI0MTUwMTU1WjAzMTEwLwYDVQQD
Eyg4NzdlNmU1MzM3YmI4MTVlZTJjMGZhOGRlYWVmNWIwYzZmNTNhYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn3SjbO8UdHYReW/aNz6yTsTwfg0
0juP0YsFIeNHj2yg3teyFDcaeUcXAUiNRNC0JKZI0Z4/CX0OQ4sk4GvUUnN4ApUl
eCdrnDIC8ZzGnwwEr32q9EWdiiVKkPlUffY/tmFO0lWQiESuICahNpSLHytITSSX
alltMhi6XVVr2+c1WW7pY/cSsWMmCSAfg62b4vL7eF9nN0ZkU3xTJwamTGgIeJsa
/CY9DHBBKUPkFaONFs/jnGZeprtIrf9FTpfdu2Uh9fWVdUEKgUumcGZfS6LdXzGq
NCx9aRB5fxi7NXfRv4J/5VQ5exFrEtmn5/cA9mtGrD30etnEwOc5Wv82mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId+blM3u4Fe4sD6jervWwxvU6v/MB8GA1UdIwQY
MBaAFM3bbxADDidvgxYnb0Cz1KQYTZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2Ut
ODBiMmQyNWJmOWM4LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2UtODBiMmQyNWJmOWM4
LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARrnzeKz
Q3OI1tL4bOhIpknhji7fVoYbJEbOyA/GiDMgkUXZtHcPT3LMSARDgyaLXxjoD4zQ
dkzucLgNRpIPIRQfZqlTX3Y1GWRp1m7kuix71FaZzbx/s5BxbS/SqqD9gbqtRyi/
1HWZsK9krJc9V34OlXLNc0L8lrGo3xm+hZoVM6FqN/tdlq+A60Gy9lpcg+OUYnxl
E27e5icSf/JyYhrySBjlW1Gseqz16SKIlcxh6ytUmishHoj0YmzyEZDwTkLgKdtT
sXA8AsYmUnGF2Liar690bOglKNBo+YZbkolDzwYT8rBT88HN4/Xopz0AxEr/J5wC
Yhjfl1a0cVAM6g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:08 2026 by rpki-client