Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          nBPqSzgr6E6v8x30ciEGBLH3s5//B0s15L8lNlOiT04=
Subject key identifier:   6D:CE:74:67:97:B9:E4:6B:E0:6B:9D:46:60:AA:A6:61:C0:19:24:E3
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       019FA304F2F843D2DA52BA4AD7DE23017204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          0CC2
Signing time:             Mon 27 Jul 2026 10:00:38 +0000
Manifest this update:     Mon 27 Jul 2026 10:00:38 +0000
Manifest next update:     Tue 28 Jul 2026 10:00:38 +0000
Files and hashes:         1: EUcrUeuArUfiLjyJq2CCJJXEbH0.roa (hash: j5ECLl2Rm4cPawtaMzFLRoWoVbB08uj29AlH0bIyc5s=)
                          2: ImCcU51kmp7ZNuk8BkyjSggDVFA.roa (hash: n45aVak3x5Ct/6DqnZqytEQSgKOpMfagR6z98qYO7lY=)
                          3: OHcQVOiDzKC_wv6FNo8ZwPwzleA.roa (hash: xT0LBnbL9kaBG9ZFdkmrq9KOkjCUtUhM0nWVPUAZpOU=)
                          4: cneDK9wIJto0L8FIGybxXTkN7-g.roa (hash: /ZPU5CDQJmj0WcWpNTND51Omeqs1E74D4tLVOwv5dwM=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: +zGHvE7a19zy43eForFH1sblQYCv39JpFhwM3nhvgw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:04:f2:f8:43:d2:da:52:ba:4a:d7:de:23:01:72:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: Jul 27 10:00:38 2026 GMT
            Not After : Jul 28 10:00:38 2026 GMT
        Subject: CN=6dce746797b9e46be06b9d4660aaa661c01924e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:94:b1:95:e2:a7:56:ca:bb:8a:e5:5f:fa:
                    50:c7:db:9f:62:04:4a:d5:dd:14:fd:a2:eb:5b:7e:
                    42:64:c5:a2:e9:b5:46:c6:79:53:c2:3a:93:29:ef:
                    e0:08:2e:65:5c:78:53:50:27:4f:50:4a:f4:e8:ef:
                    a4:0e:02:55:cc:e1:fc:86:65:61:ab:72:cf:f5:2d:
                    0e:ab:91:18:ad:0b:4a:c9:42:0d:33:9e:35:5e:98:
                    ca:3f:30:8c:02:8e:43:f4:0c:43:9a:40:e8:ec:49:
                    05:ed:f0:c5:36:30:e8:c7:c7:56:09:25:83:af:00:
                    3c:5a:d8:37:b7:4a:32:a8:96:fc:bd:91:95:eb:f7:
                    f7:9b:2c:e9:62:49:f2:73:c5:54:d5:21:6d:a8:6b:
                    e2:eb:c5:09:43:83:d2:c8:81:88:ff:28:03:28:2a:
                    7a:2f:83:62:c3:2a:f3:9e:b2:a7:c5:0c:6a:35:40:
                    0f:19:95:32:c3:7d:8a:0b:fb:d2:49:94:35:f0:b2:
                    5b:22:fa:19:87:85:35:18:ea:e2:d2:8a:e8:cd:a2:
                    0a:9a:17:25:9f:79:33:12:a7:0e:98:57:0b:10:9c:
                    58:76:10:65:3c:aa:41:f5:78:a8:f1:c3:fc:fc:c3:
                    ab:37:3b:e1:9c:67:cc:44:62:07:ce:d3:b8:fe:a7:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CE:74:67:97:B9:E4:6B:E0:6B:9D:46:60:AA:A6:61:C0:19:24:E3
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:92:7c:bd:c8:c3:32:7e:b2:4f:99:d8:83:25:a7:25:17:cf:
         56:c1:9f:2b:33:5d:51:ad:41:16:5a:3f:f8:c1:7b:fa:88:93:
         52:ab:7a:85:b3:2f:ae:68:ba:49:37:a0:f6:cb:5f:83:a1:60:
         21:67:25:31:ba:c6:d3:85:b5:78:41:4a:0b:d5:9d:e3:7e:ad:
         4e:5e:31:6e:dc:ea:9f:2c:37:98:db:bc:fd:e2:7f:e2:54:9a:
         e4:95:75:c4:a2:71:6d:38:82:6c:e9:62:3e:32:08:12:10:ac:
         66:c4:22:d6:c7:d9:67:bb:e9:09:25:80:d3:8a:82:47:ff:e9:
         85:be:db:a7:7c:c5:e1:57:78:be:33:aa:a9:43:45:5d:eb:cd:
         5a:09:3a:9d:3a:de:44:ca:64:47:14:24:f0:a5:1d:26:b4:fe:
         9e:69:4b:83:92:42:34:51:be:04:d3:75:32:2e:ef:a3:d6:64:
         81:78:14:b4:ef:f7:e2:7c:fe:c7:2a:c9:36:21:e3:2f:87:68:
         69:b9:2f:27:88:15:86:e8:16:59:e2:92:0f:9c:45:a1:c1:08:
         3f:34:76:89:ad:fd:ce:14:d5:d7:d5:35:2e:4d:84:cb:f5:78:
         fa:00:64:09:c1:53:8c:87:d6:67:26:c7:45:f4:28:db:21:12:
         71:a0:4f:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBPL4Q9LaUrpK194jAXIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNGE3MTdmOGZhMWJiMDM1OTI3NDIyM2FjZGFlMjJiNzBl
NjZiZWMwHhcNMjYwNzI3MTAwMDM4WhcNMjYwNzI4MTAwMDM4WjAzMTEwLwYDVQQD
Eyg2ZGNlNzQ2Nzk3YjllNDZiZTA2YjlkNDY2MGFhYTY2MWMwMTkyNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEOUsZXip1bKu4rlX/pQx9ufYgRK
1d0U/aLrW35CZMWi6bVGxnlTwjqTKe/gCC5lXHhTUCdPUEr06O+kDgJVzOH8hmVh
q3LP9S0Oq5EYrQtKyUINM541XpjKPzCMAo5D9AxDmkDo7EkF7fDFNjDox8dWCSWD
rwA8Wtg3t0oyqJb8vZGV6/f3myzpYknyc8VU1SFtqGvi68UJQ4PSyIGI/ygDKCp6
L4NiwyrznrKnxQxqNUAPGZUyw32KC/vSSZQ18LJbIvoZh4U1GOri0orozaIKmhcl
n3kzEqcOmFcLEJxYdhBlPKpB9Xio8cP8/MOrNzvhnGfMRGIHztO4/qcpDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3OdGeXueRr4GudRmCqpmHAGSTjMB8GA1UdIwQY
MBaAFM9KcX+PobsDWSdCI6za4itw5mvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTkt
NmFhYTZiMDIxNjBkLzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTktNmFhYTZiMDIxNjBk
LzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpJ8vcjD
Mn6yT5nYgyWnJRfPVsGfKzNdUa1BFlo/+MF7+oiTUqt6hbMvrmi6STeg9stfg6Fg
IWclMbrG04W1eEFKC9Wd436tTl4xbtzqnyw3mNu8/eJ/4lSa5JV1xKJxbTiCbOli
PjIIEhCsZsQi1sfZZ7vpCSWA04qCR//phb7bp3zF4Vd4vjOqqUNFXevNWgk6nTre
RMpkRxQk8KUdJrT+nmlLg5JCNFG+BNN1Mi7vo9ZkgXgUtO/34nz+xyrJNiHjL4do
abkvJ4gVhugWWeKSD5xFocEIPzR2ia39zhTV19U1Lk2Ey/V4+gBkCcFTjIfWZybH
RfQo2yEScaBPqg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:21:22 2026 by rpki-client