Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File:                     ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier:          PGNTqwHyhDSV4XrLPPd6pBuBGtQCMC5ac+1/XPCtZ/c=
Subject key identifier:   CF:CC:D6:DD:63:29:B6:D8:98:6F:7D:2E:8F:3A:47:F2:E3:47:7C:C4
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer:       /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial:       019FA14E3FAB136D38B9AB0BD9A4ECB0F5D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number:          19D9
Signing time:             Mon 27 Jul 2026 02:01:27 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:27 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:27 +0000
Files and hashes:         1: 6gLAIABcMM0BdKdW8K02igz9kr0.roa (hash: uk7i7GXwXWp1hyZWUWTNojb3ILfyYgcAcHJXlD/riPs=)
                          2: Ig_zAXCn9vbFw7KxbkjMl45qbh4.roa (hash: VV7LhTzcbYlq8rfyk66GOg6XaES1MuVkOsiFHAWaNpk=)
                          3: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (hash: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=)
                          4: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (hash: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=)
                          5: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: Bk9Tl3hdaRBuNZdoT2hoaQaEFIgBZt5dxlH7c+0Udto=)
                          6: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4e:3f:ab:13:6d:38:b9:ab:0b:d9:a4:ec:b0:f5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
        Validity
            Not Before: Jul 27 02:01:27 2026 GMT
            Not After : Jul 28 02:01:27 2026 GMT
        Subject: CN=cfccd6dd6329b6d8986f7d2e8f3a47f2e3477cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:06:af:ea:08:67:7a:d6:98:cc:af:d2:af:
                    bf:13:2c:4f:8f:d1:0f:28:7b:07:a0:db:8b:03:b9:
                    9c:54:6b:c9:11:c0:dc:77:53:4c:fe:1c:20:e3:b6:
                    04:67:c6:d9:9a:ce:56:33:fc:4e:41:d7:0e:18:6f:
                    e7:7d:cb:d9:6d:01:02:a3:c7:c8:d7:f2:86:ca:01:
                    7a:68:f8:d3:16:44:72:35:ed:f4:32:70:a9:3d:17:
                    b4:38:ea:92:fa:51:26:d6:3c:21:49:21:55:a6:ff:
                    e5:ee:fb:26:6a:d4:ce:cc:3c:23:9e:29:f8:41:f2:
                    1e:d3:a3:25:3b:18:ed:34:66:96:b3:35:7b:c2:55:
                    70:0f:eb:71:f0:27:8b:d8:6c:97:fb:a6:8c:a6:4d:
                    a9:6c:7e:33:94:fb:32:43:1a:fe:8e:12:a4:37:02:
                    7e:14:9b:02:1a:fc:7d:a9:5f:f5:d4:7c:94:6c:25:
                    85:33:08:78:ae:a7:a0:f5:e9:fa:6c:ad:d8:be:3c:
                    59:49:db:a4:dd:8d:df:65:8c:ba:24:6d:fc:da:1b:
                    22:e0:b2:bc:89:d0:59:f9:31:57:37:71:db:84:54:
                    82:b3:a3:50:20:6a:c2:74:2f:dd:c3:95:8d:38:87:
                    98:49:00:d1:d0:c1:64:c2:98:41:5c:62:bd:eb:1d:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:D6:DD:63:29:B6:D8:98:6F:7D:2E:8F:3A:47:F2:E3:47:7C:C4
            X509v3 Authority Key Identifier:
                keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:16:63:f0:f3:5f:7c:98:01:b2:3f:f0:22:c3:86:f9:9c:18:
         68:4d:40:c3:95:ec:27:d8:8b:2c:20:da:71:47:51:e2:0b:47:
         47:a1:0e:e7:3b:cb:01:48:50:99:56:c1:32:d8:73:05:4b:1b:
         75:e6:1e:a9:d0:0d:2d:70:2a:43:fa:be:7e:02:7a:a6:26:0e:
         8c:85:98:28:4e:ab:d5:05:e7:d7:38:6d:e0:9c:60:b4:58:3f:
         7d:6e:1d:5e:88:cd:74:c7:b3:73:c6:f4:b8:d1:b1:5b:a0:d2:
         b7:d9:14:b2:77:d5:3a:2b:21:fc:1b:de:c4:05:46:e4:db:2f:
         49:46:2a:5a:5c:cb:74:73:6e:c5:f4:ef:1d:bc:cf:49:36:3f:
         33:86:a9:8d:de:5c:58:51:cc:e9:79:f4:98:92:5a:a4:16:44:
         5a:6c:3a:60:62:7e:6d:8a:05:cf:8e:c9:22:e4:72:12:ea:64:
         4b:39:71:1f:38:db:5a:be:20:39:b7:1b:24:f8:ea:d9:e8:87:
         cd:e6:05:82:e2:85:21:f9:0a:ef:69:f0:8e:5f:84:93:ae:63:
         74:30:0a:85:b1:f1:c5:da:9f:10:15:9d:b1:4e:9c:0a:94:7b:
         9f:63:a4:23:d2:21:98:72:10:04:14:20:bf:93:0a:c9:7f:11:
         44:12:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:05 2026 by rpki-client