Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          ZMAf0b/9H5eYbzJR5qVvkg8rP7+N959Fg3U8Pfmf1iI=
Subject key identifier:   F5:96:55:BF:3F:B2:80:7B:16:9A:32:77:8E:AB:91:8F:14:AD:B1:F2
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       019F91DA9CB816CB365539B3FD5500BC9BCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          1519
Signing time:             Fri 24 Jul 2026 02:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:50 +0000
Files and hashes:         1: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (hash: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E=)
                          2: 143uR_Opu7Zeu7uxf8rhyVqs6pA.roa (hash: gnOcz10DzYsdv7a3eo6ReHVx6t0LmKA4aY2SFi+8K5g=)
                          3: 5GRL2xTwlhtB45CKu5VYBHVeCs8.roa (hash: xHs3aoTc2u94fp2p4GMEh09FXKLHJU4FJ23Xwrl2mb8=)
                          4: LImeWPjRU0bTYqqH-HKe4xkFuc0.roa (hash: zqLkD7GL5OBQzT/9VJg9wwwTHEy5OhmPX5ktJW+mT7A=)
                          5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: 995YliP/gK15v7YPjdTqUOJvNGf9PObGtV8MMplyTY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:9c:b8:16:cb:36:55:39:b3:fd:55:00:bc:9b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: Jul 24 02:00:50 2026 GMT
            Not After : Jul 25 02:00:50 2026 GMT
        Subject: CN=f59655bf3fb2807b169a32778eab918f14adb1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:5d:5b:18:4e:1f:33:7c:12:e5:5a:25:8a:
                    42:7f:f2:47:e6:77:52:1b:f9:01:e3:4e:15:56:28:
                    55:e7:29:3f:5a:3c:a8:00:46:80:31:f1:c2:f4:d0:
                    c4:37:da:3e:03:c7:93:fb:74:b0:f8:4d:a2:4f:04:
                    ac:65:26:07:5e:90:c5:44:51:bb:21:39:4f:da:b4:
                    c0:39:73:54:0b:8c:94:09:1c:a4:5f:41:98:cb:d1:
                    2b:83:b3:1a:d7:4e:b2:0f:0c:cc:26:43:9b:25:12:
                    33:88:a3:af:27:08:69:f1:42:5b:55:1e:86:75:fe:
                    c8:2d:eb:5e:08:cc:0f:0c:6a:a8:8a:2c:d5:dd:48:
                    77:43:6c:05:c3:aa:40:cf:8b:15:40:a4:68:0c:5e:
                    77:bb:a6:f5:bf:6e:09:d7:19:e2:66:3f:cb:cf:e5:
                    67:84:60:e3:13:f9:67:4d:8b:3d:66:2a:e1:62:43:
                    a2:65:40:3e:a4:e8:41:86:31:9b:f4:3d:88:36:59:
                    5c:09:fb:6b:8f:06:4d:3c:30:e7:41:e5:c6:4d:ea:
                    f7:06:51:a0:53:a0:19:06:18:58:b1:5c:df:8a:b7:
                    b1:c5:83:b8:39:61:2c:66:a1:e1:bb:3e:af:d7:5d:
                    cd:c4:4e:b0:f0:ef:85:77:17:10:2b:dc:2e:93:dd:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:96:55:BF:3F:B2:80:7B:16:9A:32:77:8E:AB:91:8F:14:AD:B1:F2
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7d:3b:82:7b:43:5e:b1:b1:f6:7b:23:6c:17:e8:e3:7f:ca:
         ef:43:0c:05:70:a8:66:20:43:d9:fb:96:55:63:de:0d:9b:7c:
         ec:59:42:a1:d2:d9:57:ce:7c:6b:05:15:dc:17:71:99:00:14:
         f9:53:e1:37:47:27:7f:ec:ae:24:9a:8c:df:46:dd:4d:11:d7:
         64:74:e4:60:a1:4f:a2:e4:1a:19:a3:70:62:0b:1c:d4:53:8c:
         56:f1:24:59:0a:78:5d:29:fc:f4:d2:fa:95:47:6c:58:70:75:
         f6:7b:62:38:c4:9b:66:12:f0:87:4f:de:01:79:bd:95:4a:3f:
         50:c5:41:f3:74:58:a0:e5:c1:6d:e2:0e:e8:08:28:c4:0f:c4:
         b9:91:84:dd:06:94:5e:45:8b:19:ea:42:aa:79:f4:05:4a:25:
         6b:ea:47:65:10:78:a3:11:2f:15:3f:fc:81:a3:01:59:81:93:
         0a:6d:4d:e7:2f:ff:47:8b:2e:58:9d:d7:06:6b:ed:83:27:1a:
         a9:bf:ba:d6:57:f8:11:d8:08:a1:11:cc:54:63:73:04:ea:c1:
         be:b3:7c:b6:65:c3:08:ff:12:9b:09:9e:42:a2:5e:aa:9c:37:
         05:1f:80:c9:ea:73:3c:14:b1:d2:8b:ed:e1:1f:64:93:46:19:
         27:3b:54:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2py4Fss2VTmz/VUAvJvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx
MThiODUwHhcNMjYwNzI0MDIwMDUwWhcNMjYwNzI1MDIwMDUwWjAzMTEwLwYDVQQD
EyhmNTk2NTViZjNmYjI4MDdiMTY5YTMyNzc4ZWFiOTE4ZjE0YWRiMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMRdWxhOHzN8EuVaJYpCf/JH5ndS
G/kB404VVihV5yk/WjyoAEaAMfHC9NDEN9o+A8eT+3Sw+E2iTwSsZSYHXpDFRFG7
ITlP2rTAOXNUC4yUCRykX0GYy9Erg7Ma106yDwzMJkObJRIziKOvJwhp8UJbVR6G
df7ILeteCMwPDGqoiizV3Uh3Q2wFw6pAz4sVQKRoDF53u6b1v24J1xniZj/Lz+Vn
hGDjE/lnTYs9ZirhYkOiZUA+pOhBhjGb9D2INllcCftrjwZNPDDnQeXGTer3BlGg
U6AZBhhYsVzfirexxYO4OWEsZqHhuz6v113NxE6w8O+FdxcQK9wuk93RZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWWVb8/soB7Fpoyd46rkY8UrbHyMB8GA1UdIwQY
MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt
MGRiYjNiOGRiMTVmLzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUtMGRiYjNiOGRiMTVm
LzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH07gntD
XrGx9nsjbBfo43/K70MMBXCoZiBD2fuWVWPeDZt87FlCodLZV858awUV3BdxmQAU
+VPhN0cnf+yuJJqM30bdTRHXZHTkYKFPouQaGaNwYgsc1FOMVvEkWQp4XSn89NL6
lUdsWHB19ntiOMSbZhLwh0/eAXm9lUo/UMVB83RYoOXBbeIO6AgoxA/EuZGE3QaU
XkWLGepCqnn0BUola+pHZRB4oxEvFT/8gaMBWYGTCm1N5y//R4suWJ3XBmvtgyca
qb+61lf4EdgIoRHMVGNzBOrBvrN8tmXDCP8SmwmeQqJeqpw3BR+AyepzPBSx0ovt
4R9kk0YZJztU6A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:16 2026 by rpki-client