Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File:                     ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier:          JTgAFUauB2osAeelc7EhkguhIqdphyZqxog/7dsHIf8=
Subject key identifier:   C5:28:45:F9:C5:4B:41:AB:66:13:D2:22:BA:4D:23:ED:94:30:56:84
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer:       /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial:       019FA1842BE19D44B56AB1D46A2FB56A471E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number:          19D5
Signing time:             Mon 27 Jul 2026 03:00:21 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:21 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:21 +0000
Files and hashes:         1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
                          2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
                          3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
                          4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: FiTBgb9wKzHw0UDNnYEqN8Dos5NcpgKSBLcsl1KD6x4=)
                          5: nfa8lcMTUWIbtIpuf80s2YziubY.roa (hash: hUm8YjaYLbHJUISE3EmfzpSWnBzmCV6l9EAAD3oXKsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:2b:e1:9d:44:b5:6a:b1:d4:6a:2f:b5:6a:47:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
        Validity
            Not Before: Jul 27 03:00:21 2026 GMT
            Not After : Jul 28 03:00:21 2026 GMT
        Subject: CN=c52845f9c54b41ab6613d222ba4d23ed94305684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:97:31:c7:52:f0:77:01:39:df:51:9e:68:
                    47:10:a7:6f:2a:24:6c:a3:c1:c1:cc:4e:ed:85:7a:
                    fe:b4:3f:ca:2c:a5:a8:21:d7:c1:f9:ab:d1:0a:1b:
                    07:da:21:25:51:14:84:e5:07:4e:9d:ce:1f:11:c3:
                    bb:60:a6:8d:77:9c:c8:b2:5f:82:03:60:92:f8:03:
                    80:a3:5a:59:dc:37:fa:9b:e4:c5:09:b9:d2:8e:fb:
                    8a:e8:20:f0:56:de:2c:d1:75:72:89:7f:35:8d:cb:
                    a5:0f:18:24:64:de:ff:69:9c:43:ad:33:ee:99:d7:
                    43:e1:8c:96:c6:b3:d3:13:db:56:4c:c8:6b:06:1f:
                    b7:83:53:75:22:91:23:e3:b0:03:ad:58:b5:fd:8f:
                    5c:c5:45:d6:d0:33:75:dd:1e:a5:a3:10:f1:76:ae:
                    bb:d1:68:73:6a:66:75:f8:2e:ac:0e:ee:df:13:cb:
                    80:68:d3:f5:74:79:b2:48:3f:8d:b6:e8:ad:30:b6:
                    38:c1:2d:c9:6e:7a:3e:8e:41:70:55:ce:c8:bf:95:
                    cf:74:38:8b:de:a7:2f:11:6e:04:f5:0f:fb:10:bf:
                    cb:0f:53:af:1b:a2:64:44:a3:c5:1f:45:3e:41:59:
                    64:3b:d8:55:d4:47:0d:a2:75:63:e9:f3:b2:39:11:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:45:F9:C5:4B:41:AB:66:13:D2:22:BA:4D:23:ED:94:30:56:84
            X509v3 Authority Key Identifier:
                keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:24:70:5a:40:10:c3:a3:8a:84:60:6d:21:be:09:46:85:89:
         4b:a9:de:6b:c5:db:67:5e:f0:62:94:6e:68:7c:20:d1:4a:3b:
         0c:46:fa:8d:bb:0d:22:3c:f7:b1:7b:cb:12:d7:48:e5:78:2b:
         e4:33:47:3f:c3:c9:7d:9d:46:19:13:3a:43:8b:52:5c:3e:8f:
         35:8d:fb:03:f3:69:8f:dd:03:fe:62:35:06:32:9c:19:b0:19:
         d8:59:ec:b0:40:f0:d4:c2:ec:66:e8:69:a2:20:fb:5a:c4:7d:
         b1:0e:a9:ff:b7:4f:f1:fd:e6:49:6f:bf:67:08:05:75:01:b9:
         36:12:4d:44:3b:6b:e2:2f:07:ae:fa:6b:4c:ba:52:a9:84:e7:
         04:1c:9b:1b:26:f4:a1:96:a6:49:43:f8:de:f7:2b:52:ad:6c:
         fb:6b:d2:4c:44:dc:24:84:f0:2c:d5:5f:53:9f:6a:1e:0c:f1:
         74:71:11:37:6a:eb:6c:e8:41:38:8c:e8:84:b3:07:f5:74:a6:
         c3:b4:58:eb:b9:b0:ca:96:ee:01:f6:67:8e:ac:a2:3e:46:9e:
         d8:d7:28:51:1a:1e:b2:12:94:b1:83:a7:ad:4c:dd:64:b3:6a:
         2c:57:3c:f4:66:60:71:4f:f7:f1:89:aa:8f:fe:55:d1:a0:05:
         92:e3:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:49:24 2026 by rpki-client