Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File:                     ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier:          FAhnZhxhMVirIMwaO3BM8cNfDqAvYG91bX+5x0gyi60=
Subject key identifier:   84:55:4A:54:03:62:6A:81:9E:C9:59:B6:22:94:27:BC:3A:CF:2E:01
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer:       /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial:       019F9FCD6784B537BA5A017088F5B103C1AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number:          19CF
Signing time:             Sun 26 Jul 2026 19:01:06 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:06 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:06 +0000
Files and hashes:         1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
                          2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
                          3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
                          4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: oO+sg1dwapFYq2Ly18kO8RT4GvHpC56xfZ2qyQUmmM8=)
                          5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:67:84:b5:37:ba:5a:01:70:88:f5:b1:03:c1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Jul 26 19:01:06 2026 GMT
            Not After : Jul 27 19:01:06 2026 GMT
        Subject: CN=84554a5403626a819ec959b6229427bc3acf2e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:36:24:96:49:12:ee:f9:ad:e2:7d:14:c1:
                    64:47:e2:76:6b:45:12:6b:4c:62:fe:e1:40:20:f2:
                    2f:a1:84:79:2b:da:0f:ee:6f:68:6a:08:21:fc:55:
                    1b:aa:44:12:fb:59:06:40:17:af:1f:26:cd:92:2c:
                    f6:c4:fe:3d:c3:a2:ab:39:3f:60:18:f4:ff:4f:b5:
                    2f:49:80:02:aa:67:90:4f:51:9b:44:d7:f2:b7:42:
                    b4:15:2c:43:b9:e5:dd:0c:48:7c:81:17:fc:ba:38:
                    82:11:b2:2b:78:a5:3e:6d:0a:04:a5:78:25:0c:63:
                    7e:c2:86:4d:cd:de:8c:b5:d2:3b:5c:20:52:24:e7:
                    aa:2d:c3:b6:6b:61:93:76:9a:c9:97:95:58:cb:e6:
                    30:0e:3f:1d:01:03:33:5e:85:1c:cd:87:96:87:57:
                    c8:93:b8:90:99:40:b6:98:e3:d4:db:94:70:04:7d:
                    bd:4d:fb:e8:a7:6c:f4:c4:24:bf:c9:c8:6c:ec:dd:
                    96:fa:a7:0e:df:db:c2:72:41:46:5a:9c:aa:3f:f4:
                    60:86:99:51:3a:b1:57:a2:e3:ce:3a:4c:97:a5:4f:
                    38:d0:54:b6:c1:53:75:52:b4:3d:02:db:ba:bc:06:
                    04:52:1b:dc:16:7f:f4:f5:08:ed:4c:a5:b5:6b:d9:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:55:4A:54:03:62:6A:81:9E:C9:59:B6:22:94:27:BC:3A:CF:2E:01
            X509v3 Authority Key Identifier:
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:76:92:62:51:0d:fe:7c:a7:99:d8:96:36:05:d4:09:2e:
         d2:87:0d:f0:a0:6e:58:8f:90:d7:64:2f:0e:bf:ce:bd:fa:40:
         31:65:13:0e:e6:2a:9b:dd:c2:7a:18:13:0c:38:4a:98:5b:fc:
         af:4d:86:4d:a9:52:51:ce:f0:41:40:59:1b:b8:00:fe:97:76:
         f3:39:54:d2:c6:25:6d:e5:bf:1e:68:d6:d6:4f:7c:6c:f0:1a:
         ec:73:10:f9:76:e1:dc:47:5d:07:e3:46:a3:5a:51:3a:d0:3b:
         46:4d:34:53:b9:7c:ec:eb:b2:e3:8a:dc:6c:c0:3f:73:b5:1e:
         67:e1:fe:cc:79:6c:fe:e0:16:92:de:b6:84:fa:2c:45:79:a5:
         5b:fc:6f:78:77:0e:fa:f4:fc:d9:a8:33:e6:dc:51:c2:6d:a3:
         0c:61:20:87:1c:c4:5d:ed:6e:44:62:31:4e:27:2f:31:0a:c6:
         5a:1d:10:84:54:12:b7:e6:d9:62:63:ea:7d:fb:5e:70:cf:e0:
         d1:19:9b:cc:8e:eb:76:02:66:19:06:b3:d0:1a:01:6d:c6:06:
         60:07:71:46:94:b9:87:e1:fe:10:60:37:03:f8:96:d4:07:4a:
         22:81:12:d6:ad:12:4e:d0:23:1d:07:eb:85:08:76:cc:2e:38:
         60:aa:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:21 2026 by rpki-client