Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          iFBwes/+ygLW3kQBewFtzACALMOc6+wjkQLUnf6w6xs=
Subject key identifier:   D4:A7:F5:6A:A8:C8:4B:94:09:8A:73:2D:69:9D:86:64:9B:4B:D1:97
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019F841F14753AC4EA24B410ED7777697454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          124A
Signing time:             Tue 21 Jul 2026 10:00:57 +0000
Manifest this update:     Tue 21 Jul 2026 10:00:57 +0000
Manifest next update:     Wed 22 Jul 2026 10:00:57 +0000
Files and hashes:         1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
                          2: 3hk8gZRTXeoThSESdUyXemIodyY.roa (hash: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc=)
                          3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: UI6c3Jx6BvzPFyRDa/ZbdMvtS20nmWSfhhnC+7sKNCU=)
                          5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
                          6: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
                          7: vUUgJIohg5SQneif_sUKDZs-FYo.roa (hash: O9F4ICaD35Dayn0PCg4Uohxoxcc4CWJ4HvxFQPiHF6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:1f:14:75:3a:c4:ea:24:b4:10:ed:77:77:69:74:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Jul 21 10:00:57 2026 GMT
            Not After : Jul 22 10:00:57 2026 GMT
        Subject: CN=d4a7f56aa8c84b94098a732d699d86649b4bd197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:33:58:28:cc:a9:51:a6:17:ae:92:78:b8:
                    8c:88:8a:b0:e6:5f:64:72:0a:53:09:21:af:c8:2a:
                    f5:96:51:ec:3a:03:39:f3:73:a9:f1:1b:ce:21:cf:
                    54:66:25:15:9c:54:21:f8:12:9d:d6:9a:51:33:5a:
                    42:f3:5b:e5:f0:d0:85:9b:ef:2a:3b:40:74:c9:65:
                    84:47:19:e5:b4:0f:11:5a:ca:1d:e1:7a:53:c6:8f:
                    38:d9:d1:ed:87:02:47:70:70:16:a0:32:3f:5a:8f:
                    b8:a0:a1:c4:15:12:4f:bf:bf:6f:9f:0a:35:75:d7:
                    22:90:9d:c7:35:4c:e5:25:6d:5f:b0:c1:73:8c:be:
                    e0:73:c3:05:d7:73:47:c4:1a:dd:55:40:e0:51:97:
                    00:26:72:b6:90:90:35:dd:01:03:a3:40:9b:49:30:
                    a8:e7:dc:5b:41:50:c2:28:12:69:2d:4e:ea:90:05:
                    dd:cd:84:f9:50:99:c5:cd:68:c8:25:72:e8:3e:a9:
                    02:49:d4:29:02:bf:e3:d2:8f:a5:62:60:8d:64:7f:
                    1f:31:c1:09:46:71:33:89:f4:ff:52:d8:8d:5a:de:
                    e8:41:a5:48:87:fb:ec:07:ce:0a:11:5d:45:e8:38:
                    81:fd:43:0d:12:f0:a8:a0:0b:aa:58:59:b1:a2:18:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A7:F5:6A:A8:C8:4B:94:09:8A:73:2D:69:9D:86:64:9B:4B:D1:97
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:e1:0e:29:a5:d1:7d:d2:6c:2f:88:c1:1f:f7:97:ff:a8:
         1e:31:2e:9b:56:17:43:2e:fa:76:50:2a:7a:42:cb:20:5c:6e:
         fd:e7:e4:09:ec:2b:55:ce:1b:fb:17:9e:64:52:69:f3:e6:4d:
         d4:ed:1f:02:ea:94:b3:0b:ea:7d:bb:43:c0:b3:48:07:47:cb:
         fa:e6:9c:b4:a2:5c:fb:63:46:b6:1d:f6:a2:d7:0f:6b:1a:1a:
         49:87:76:e1:f5:0b:4d:ea:c2:9a:ca:23:e1:68:0c:36:41:63:
         b8:0f:01:88:5c:23:01:6a:2d:a3:81:23:c4:57:4c:29:d7:1c:
         02:16:a9:bf:28:87:59:84:5e:ee:b0:f0:f0:50:3e:a6:4a:20:
         4d:c5:0f:46:c9:9f:fa:0f:c1:48:e4:91:0e:92:6a:32:21:47:
         23:07:eb:5e:cf:1c:38:e3:db:41:6f:e6:af:59:e6:5b:e5:e4:
         4b:3f:f3:ab:63:31:52:01:19:d2:69:66:04:95:ac:29:16:94:
         9a:2d:63:b3:da:28:50:2f:59:9a:7c:a8:2d:a0:8f:88:28:3a:
         f8:78:f8:eb:f6:75:03:49:4d:81:a7:6c:50:2e:8a:87:05:2a:
         ce:b7:40:2c:db:3c:6c:69:5b:d3:10:9a:ce:97:af:ab:29:6a:
         cf:70:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:42:21 2026 by rpki-client