Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File:                     Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier:          5RzNpQeaB4UDQ/9JeSYrNJWwa0RYduF/TxTC8uoNEUo=
Subject key identifier:   51:05:72:EF:2A:51:18:E0:27:87:74:01:B9:53:EB:31:AD:60:A0:14
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer:       /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial:       019F85D6823F37FC3A567C4F9C90604D2472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number:          16DD
Signing time:             Tue 21 Jul 2026 18:00:55 +0000
Manifest this update:     Tue 21 Jul 2026 18:00:55 +0000
Manifest next update:     Wed 22 Jul 2026 18:00:55 +0000
Files and hashes:         1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=)
                          2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: 3eLgCSbQ/NwcZpYsZoGa9ezrnwynzXuY5e+K1gfCgxQ=)
                          3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d6:82:3f:37:fc:3a:56:7c:4f:9c:90:60:4d:24:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
        Validity
            Not Before: Jul 21 18:00:55 2026 GMT
            Not After : Jul 22 18:00:55 2026 GMT
        Subject: CN=510572ef2a5118e027877401b953eb31ad60a014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:75:b9:d0:57:4a:f8:b6:c9:8c:c6:f4:ec:
                    22:65:6e:19:99:3a:ea:8c:5c:11:66:f9:02:8b:f5:
                    e8:6f:03:0a:0c:b5:55:1d:02:80:75:4c:8c:a9:47:
                    62:ea:e1:6b:28:38:a4:79:64:43:8a:29:0c:c2:b7:
                    e6:e9:89:14:57:39:48:9a:77:1f:db:fd:56:bb:b4:
                    f4:49:f0:5a:c0:bb:f3:c0:72:9c:f7:2a:bd:75:a0:
                    ef:e3:77:33:6a:f8:9f:ac:36:a0:a1:97:8e:08:da:
                    cd:83:7e:ec:e0:f4:15:98:e9:38:34:8a:78:0b:df:
                    73:89:a8:86:22:85:e7:da:ad:66:35:d0:c5:18:ae:
                    b0:e6:c9:c1:83:56:ee:17:46:f0:b1:0e:f8:ce:cb:
                    fd:97:f4:87:d1:5b:25:45:bc:93:76:1e:50:8a:87:
                    b7:20:8f:0e:1b:5b:a4:e0:78:df:d6:f7:71:b8:b9:
                    b1:69:8d:81:e3:78:69:ce:6f:c8:af:63:3b:29:f6:
                    84:5a:f8:25:86:bf:50:8a:f7:9e:2b:49:d6:2b:d8:
                    84:5e:18:2c:28:2a:40:0c:f1:f0:8a:39:73:24:e0:
                    09:fd:5a:e7:a6:c8:cd:eb:b4:de:f6:93:3a:93:1a:
                    a4:da:43:13:72:16:73:86:b7:df:50:51:98:70:8a:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:05:72:EF:2A:51:18:E0:27:87:74:01:B9:53:EB:31:AD:60:A0:14
            X509v3 Authority Key Identifier:
                keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:21:36:03:43:49:05:98:f1:2c:9e:48:1c:96:21:96:03:18:
         f2:27:86:32:fb:1f:58:4e:13:77:65:f5:9d:0f:6f:17:1c:59:
         f1:78:a0:e3:ca:cb:73:4c:73:40:0f:e5:1c:4c:c7:da:d5:88:
         71:23:11:76:db:52:73:c5:bf:f9:18:00:38:aa:14:01:2d:aa:
         c7:e2:34:5b:0f:d0:89:6f:d4:b8:e6:56:50:19:a0:49:30:91:
         2a:96:67:b6:26:ff:41:d0:61:4c:72:85:47:53:7b:9f:dc:4e:
         dc:0d:d8:88:95:10:61:f4:0b:95:0c:ea:7a:7b:f2:58:24:7b:
         f7:4c:33:87:57:be:8d:49:0f:ba:93:0e:38:a5:47:1c:00:a5:
         a7:bd:9f:b9:bd:77:21:ea:9b:a9:da:ed:59:2f:cf:59:8f:f1:
         04:43:87:ed:a4:a7:5b:6d:f1:9e:f1:ee:bd:6b:db:e2:d0:aa:
         a6:a9:56:20:d1:18:ab:ce:24:f3:d1:7c:7d:ff:1e:b8:af:b4:
         7a:3c:ff:13:68:61:ee:19:66:23:4b:0c:26:5e:c5:76:56:93:
         61:49:d4:e0:73:0f:18:6d:7d:5a:76:e8:4a:d8:0c:b9:8f:5e:
         19:58:0c:25:63:a7:45:69:54:fc:18:dd:46:81:09:ac:bd:c6:
         78:43:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:41 2026 by rpki-client