Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          q4ANdI+IhzIbW5CtpwLdw5ds3JMlfVsJKnke4FCvxF8=
Subject key identifier:   C0:46:92:CB:28:16:5E:C3:D6:D6:97:49:B3:95:CA:EC:1E:24:42:0E
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019FF8354D57257EEC84857D511062FC419B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          0A2A
Signing time:             Wed 12 Aug 2026 23:01:10 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:10 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:10 +0000
Files and hashes:         1: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          2: Otz-lRLGypvf7TIwVms5jHBwxYQ.roa (hash: DTvEpHl+5nUpwx5mYYuodxVy4t8FUL7YR0GMpNyL6AA=)
                          3: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          4: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: /FqXFHoYNp7ZLZD0jM8oQb8mwnziMYV8jLUY4+kqhfI=)
                          5: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:4d:57:25:7e:ec:84:85:7d:51:10:62:fc:41:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Aug 12 23:01:10 2026 GMT
            Not After : Aug 13 23:01:10 2026 GMT
        Subject: CN=c04692cb28165ec3d6d69749b395caec1e24420e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:fb:5f:93:fb:25:80:73:a0:22:8e:2c:21:
                    bc:bd:a6:0a:95:cb:4d:23:d6:24:30:84:a9:2d:1f:
                    4d:cc:f3:2d:f1:b1:22:fb:8a:42:e4:91:e2:bb:8c:
                    c5:9a:1d:ed:b2:5e:96:97:4a:d5:d5:a6:32:96:f1:
                    4d:ba:52:17:52:20:b0:46:b2:ad:59:da:67:52:e8:
                    88:e8:22:38:e9:bc:52:92:eb:b3:b9:2a:ae:bc:70:
                    d6:49:ef:3b:88:bb:2e:7a:aa:1d:0c:25:72:31:a0:
                    44:43:51:93:a8:f1:10:c8:c7:0d:ce:32:61:44:61:
                    36:01:3d:07:82:f4:2b:20:22:b0:40:a7:83:78:a1:
                    e2:43:37:4f:92:51:91:81:9f:e1:d3:6f:84:e6:08:
                    da:31:6f:e9:21:57:bf:2f:5b:f1:35:ef:92:9c:0b:
                    e7:d5:ad:77:7b:9c:3b:56:34:4e:0d:d4:a2:1e:2c:
                    b1:04:79:b0:b7:b0:7a:c2:b0:61:c3:14:bd:a1:6f:
                    19:b6:40:c3:0b:3d:21:f2:26:49:8e:cf:9f:86:f6:
                    ef:6d:21:1c:63:39:0e:ec:56:9c:a9:13:4c:d6:f8:
                    3f:64:27:e9:a5:47:94:87:e6:4f:5c:e3:71:4f:b1:
                    a9:cb:3a:09:a0:8a:70:e7:58:26:12:6d:e5:49:2f:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:46:92:CB:28:16:5E:C3:D6:D6:97:49:B3:95:CA:EC:1E:24:42:0E
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:67:a7:d6:e0:0c:a3:f1:e1:33:e4:55:e9:98:5c:9f:74:55:
         8e:c0:e4:7f:60:c5:24:a1:4d:63:40:b6:b8:01:d3:5e:7a:4d:
         49:65:7a:f9:e1:a9:2e:2f:c6:20:c2:df:78:fc:73:b3:2f:08:
         5e:36:d5:ef:9c:d5:e1:7f:d2:99:e0:1f:3d:08:67:d7:75:83:
         15:e0:5a:1d:50:b8:b6:f8:84:e4:fe:07:21:26:18:d0:95:f5:
         ac:b7:88:f0:f1:12:47:37:ba:f7:ec:ba:c0:ee:63:62:c7:c9:
         80:9e:3f:28:a0:79:3f:43:a2:d1:e2:bd:7d:d4:43:1c:ca:11:
         58:80:10:b3:a1:7b:1c:c9:97:35:eb:35:46:93:ac:2b:6f:e8:
         60:a3:95:d9:5f:6c:9c:35:f7:1b:5d:bc:82:26:e0:95:ed:7a:
         ca:6f:a5:e4:b6:54:11:b2:af:91:e5:94:0a:80:f1:39:39:53:
         4a:5e:98:0f:9c:ff:d0:e9:9b:f1:22:66:94:68:00:82:98:5f:
         f2:4c:b5:64:ce:00:61:13:cd:6f:a3:0a:82:be:7b:40:85:ab:
         d8:1e:a8:3a:dd:49:52:08:56:fe:57:26:8a:7a:43:94:0d:48:
         e0:3d:7d:f9:da:e2:bb:e2:55:bc:8c:97:5a:63:71:f3:5a:c0:
         e6:60:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:21 2026 by rpki-client