Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File:                     Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier:          pXRp88xuiG8kpXTwAwITjMq5kmUuY9E+zry54R8ecrA=
Subject key identifier:   5B:0D:C2:6F:C5:86:1E:0D:A6:E3:05:32:4F:7D:8D:1E:15:FF:5C:A3
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer:       /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial:       019F859F35B8BC4898147A9D8028C432F341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number:          047F
Signing time:             Tue 21 Jul 2026 17:00:31 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:31 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:31 +0000
Files and hashes:         1: 7eUHBGs5-5ccLiuJle7ggH6TQjE.asa (hash: Bnt40cDgGP9nDvETNeaVD27iCk/Fc7R7LcRjaxb8Cnw=)
                          2: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: KhBd7KgSu7Dbha7iHF7xo/7rvunOgGLCnP1BlSkkF78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 17:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:35:b8:bc:48:98:14:7a:9d:80:28:c4:32:f3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
        Validity
            Not Before: Jul 21 17:00:31 2026 GMT
            Not After : Jul 22 17:00:31 2026 GMT
        Subject: CN=5b0dc26fc5861e0da6e305324f7d8d1e15ff5ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:a7:e4:a4:db:4c:f8:80:82:5c:1c:83:33:
                    a2:fc:a9:53:24:61:be:41:f9:77:13:6f:52:d1:50:
                    b4:b1:e0:b3:72:3a:80:9a:fc:f4:96:16:78:18:f4:
                    aa:6f:11:b1:05:9f:c7:d0:87:21:35:b7:72:55:e5:
                    26:fc:77:2b:7a:7d:10:80:9e:93:5a:58:bb:e7:f3:
                    f0:bb:13:62:35:ca:58:22:e7:53:bf:49:d7:43:8a:
                    da:cc:b3:6e:de:e6:dd:e6:91:7e:16:4c:d8:c7:b8:
                    c7:79:84:f1:92:06:b8:2b:3d:fe:07:69:fa:5c:d6:
                    95:e7:36:af:c5:9e:94:26:e0:52:b5:9f:2a:05:26:
                    f0:97:3b:40:09:8a:d3:6d:59:56:cc:fc:d1:11:45:
                    46:69:d7:b3:ef:92:c2:ea:f6:c8:44:d7:c2:ce:9e:
                    3f:ed:b0:01:3c:44:d4:ca:f9:ff:64:0a:db:95:a7:
                    10:d7:d8:36:c6:1d:53:62:c3:da:3d:f0:ac:09:6f:
                    39:15:75:0d:5b:e5:ec:f3:a9:f6:3d:c3:28:3c:eb:
                    05:cf:2d:87:06:3f:1c:6c:53:ea:b5:bc:40:20:b1:
                    96:54:5f:ec:c9:f7:cb:bc:9d:14:6e:d7:df:47:45:
                    51:19:27:71:9e:2b:22:b0:88:b8:e8:57:59:41:1a:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0D:C2:6F:C5:86:1E:0D:A6:E3:05:32:4F:7D:8D:1E:15:FF:5C:A3
            X509v3 Authority Key Identifier:
                keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:29:f8:89:fd:ed:35:ae:ed:46:62:50:8f:42:1e:86:d5:b6:
         54:c7:a6:8e:61:6d:63:7f:0f:6f:e8:de:d3:cb:36:c4:13:e9:
         b5:ea:33:92:71:07:46:26:dc:19:23:16:7a:3e:8c:3a:c2:82:
         d3:b6:f1:7c:53:64:39:9e:81:a1:2d:a7:23:4e:d2:a8:9a:fa:
         30:93:6f:56:fe:d6:97:fd:bb:be:2a:98:c1:9c:51:c1:18:9b:
         02:3d:ee:41:e3:86:3d:44:d6:b9:a2:70:8f:5c:33:17:b4:23:
         bc:9f:ba:a9:22:19:68:0b:10:ab:35:ba:6f:cc:e1:b0:a5:dc:
         a0:17:cb:ca:6d:2d:90:3c:32:4b:b9:cd:59:b4:ae:f3:37:de:
         70:31:64:4e:2e:16:38:b1:77:5e:00:c2:ce:b3:5e:b3:9f:ec:
         86:7a:aa:73:d3:af:f3:3d:d8:4e:b7:a4:20:67:68:70:2b:95:
         40:23:50:c1:ff:16:69:8a:b7:4f:d7:f2:ac:d3:82:57:fe:3a:
         79:56:4d:c8:96:fa:6b:a2:2f:a8:87:7b:11:ec:ed:19:75:39:
         dc:9b:a2:b9:b8:9f:7b:7b:aa:e7:50:92:22:a2:1d:2e:2d:c1:
         f9:45:a4:95:b6:3a:82:02:0f:e9:ac:7e:aa:95:d8:ff:d7:ff:
         77:94:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:06:50 2026 by rpki-client