Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File:                     ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier:          BwcSHR5e85fPM/Lh4O5b3JGmtwpVP/aRyHgGKJo5OWw=
Subject key identifier:   42:80:35:9D:0E:1E:35:2E:04:55:C1:36:6E:CA:F1:07:4C:25:30:2B
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       019F8E6C233E6B314B65D259E51CAB907FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number:          19D9
Signing time:             Thu 23 Jul 2026 10:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 10:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 10:01:19 +0000
Files and hashes:         1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=)
                          2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=)
                          3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=)
                          4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=)
                          5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=)
                          6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=)
                          7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=)
                          8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: pA7e6UnmL8vmrf8XGC2Q5XgAupEQsmyTfph341om4vU=)
                          9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=)
                          10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=)
                          11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6c:23:3e:6b:31:4b:65:d2:59:e5:1c:ab:90:7f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Jul 23 10:01:19 2026 GMT
            Not After : Jul 24 10:01:19 2026 GMT
        Subject: CN=4280359d0e1e352e0455c1366ecaf1074c25302b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:63:d2:bd:c1:c1:a9:c8:a1:82:48:6c:60:
                    da:bc:5c:31:58:ab:a3:02:b0:fa:13:a2:d3:97:a8:
                    7a:ad:50:5d:c4:b3:df:ea:8f:44:65:06:3e:45:53:
                    bd:43:67:89:3e:d1:a8:35:f0:b5:d1:93:59:89:65:
                    16:ba:99:4e:9c:13:38:9d:0a:bd:09:9c:3a:c2:39:
                    16:a3:67:46:c3:28:31:0b:ca:c7:7d:a3:37:74:61:
                    ac:67:a4:81:12:1e:49:13:bd:5d:31:45:0e:69:22:
                    67:57:cf:91:dd:92:31:1e:b3:7f:54:3c:41:73:38:
                    f7:5e:7e:56:ba:69:8b:23:96:ef:fc:c1:9c:74:69:
                    a9:64:ef:90:43:b0:01:d1:31:c8:cf:48:4d:77:c2:
                    fc:48:b2:ca:6b:bd:85:a0:3c:d9:57:92:75:87:95:
                    0b:f8:9c:42:22:31:fa:1d:6c:65:d3:e3:6f:83:16:
                    27:06:c2:d9:ce:47:0e:82:53:db:30:32:1e:44:87:
                    0a:e6:a0:1d:90:90:fe:62:88:da:be:d5:6b:b6:50:
                    4f:fb:fe:c7:1e:b7:7d:2b:9e:ef:4e:e6:9e:be:80:
                    93:c6:ed:45:1e:38:4b:95:3a:d6:db:3e:92:f5:f3:
                    fe:c5:db:9d:dc:0a:58:a0:fc:61:24:26:3c:0a:0e:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:80:35:9D:0E:1E:35:2E:04:55:C1:36:6E:CA:F1:07:4C:25:30:2B
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:57:64:89:0e:60:ac:00:da:e0:da:61:fa:7b:42:d2:00:f5:
         79:69:04:25:11:3c:9b:91:cb:60:fb:3b:6b:66:2e:91:12:2b:
         6d:bd:f8:46:4f:11:f3:db:3b:31:31:49:c0:b3:d2:2d:0c:4b:
         bf:b2:ea:a9:f8:1f:2b:9b:44:31:6b:96:3c:71:ef:4d:79:ae:
         72:3b:51:f4:df:3d:50:36:2c:66:6e:f3:e8:aa:73:91:99:f7:
         2d:70:33:dc:64:80:cc:45:10:44:93:c0:34:08:fc:b4:79:f5:
         ad:d7:8e:cc:4d:1c:da:8f:91:ad:9e:dd:dc:df:a0:68:3e:ac:
         76:02:9f:6b:c3:d0:4a:57:f0:37:ed:e7:bd:c0:10:c3:0e:49:
         d9:c9:31:53:ce:a3:d8:dd:29:ad:98:19:be:50:97:f6:b4:56:
         07:f0:c3:b6:59:6f:8f:25:12:68:06:3f:d7:c4:dd:03:4b:cc:
         3e:99:2d:b2:a4:1a:d0:ed:0f:71:dd:e8:91:0e:f6:7a:d8:ea:
         cf:51:d9:eb:00:59:ef:02:38:ad:57:64:e9:c8:2e:d3:b7:84:
         7f:4b:6d:15:f5:b0:8a:62:4c:5d:c1:3b:33:10:25:94:82:a3:
         78:da:27:6a:97:04:b4:cb:73:90:e3:7d:0f:77:53:0f:59:da:
         b2:ea:31:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:17 2026 by rpki-client