Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
File:                     ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft (raw, json)
Hash identifier:          Kjs9lYxQEp6iWfxJIcyH2q0/TjgwehubrZ0tLQyUx90=
Subject key identifier:   35:78:18:63:11:5F:9B:C2:0F:12:50:A0:D8:94:0C:8E:2F:5B:BE:7D
Authority key identifier: 66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
Certificate issuer:       /CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Certificate serial:       019FCF3951DA148FB9F27441E4B326D76793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
Manifest number:          97
Signing time:             Wed 05 Aug 2026 00:01:07 +0000
Manifest this update:     Wed 05 Aug 2026 00:01:07 +0000
Manifest next update:     Thu 06 Aug 2026 00:01:07 +0000
Files and hashes:         1: XCBgBb40KAFNV8_NTuAh4kKrwoc.roa (hash: zjjSUJaypws5+cHHwDC46HZi6SOAqaNmSSp20fnQ/zo=)
                          2: ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl (hash: joSBEfBNZB7YtPzkWIamDmifNb1sZOclXCbhHEJVEI4=)
                          3: enNwWa_tjEADj60hMM9KCK674dI.roa (hash: jbZhyNpL/OUred4wU6osJUOuoDw7EZkVk6iISt/NlJo=)
                          4: mvMfPRH6Mk3EjG0E4WCshPoSRK0.roa (hash: wR4V3iYm4lRZUfpxuBz7lXadGQ4ppLA7EP2UVUE9PYw=)
                          5: urNZqraMe24QrD8E6aBXbm8Rda8.roa (hash: 8iEEx3bYaRsI09sBEMgTKSlraFYwfmKRddI/LwDyHYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 00:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cf:39:51:da:14:8f:b9:f2:74:41:e4:b3:26:d7:67:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
        Validity
            Not Before: Aug  5 00:01:07 2026 GMT
            Not After : Aug  6 00:01:07 2026 GMT
        Subject: CN=35781863115f9bc20f1250a0d8940c8e2f5bbe7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:c4:4c:43:d7:7b:f0:60:d7:5d:34:52:ff:
                    7c:f5:1a:c9:f3:7a:9b:13:28:b1:fc:9c:8d:ce:aa:
                    f7:64:89:b5:2a:80:e5:4f:1d:a0:cc:89:dd:d1:bb:
                    4a:9a:6e:ce:a1:91:b3:09:2a:05:f2:25:e1:60:26:
                    a3:7b:b7:84:21:b7:cb:e0:c4:b7:19:50:ea:fd:a4:
                    fe:7d:f1:69:14:1f:2a:d9:f5:ce:fd:00:00:6a:ab:
                    4a:df:2d:c6:6c:12:0e:45:df:1c:70:6f:8a:06:6a:
                    33:15:71:3b:5f:3e:37:d6:87:d8:9d:c4:6c:77:d0:
                    20:c2:93:26:19:41:bb:be:c6:e0:93:28:3a:44:1e:
                    f2:1f:b1:79:8c:d3:92:01:07:32:29:ec:31:fa:4e:
                    3e:fe:39:8d:79:89:f2:9f:9f:ec:9b:b3:c7:8a:bb:
                    2e:43:d1:7c:b6:93:30:ab:0a:bb:47:96:fc:0c:b5:
                    08:ba:aa:0c:60:93:e3:51:88:ef:c6:35:5e:ab:76:
                    8f:4a:e4:d5:58:2b:41:a8:84:0b:e0:d9:78:c3:cd:
                    70:6a:fb:e5:0c:c8:1e:da:a6:17:e1:48:69:0c:23:
                    92:e5:08:83:52:42:72:bc:d1:f4:89:2a:b9:c5:62:
                    12:53:bf:ec:b2:de:24:3f:12:9e:bc:04:3f:38:79:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:78:18:63:11:5F:9B:C2:0F:12:50:A0:D8:94:0C:8E:2F:5B:BE:7D
            X509v3 Authority Key Identifier:
                keyid:66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b4:10:a2:e6:a9:3f:08:79:07:3c:4c:3f:85:f5:a0:6a:31:
         41:06:fe:14:38:07:02:29:0a:e0:1f:7d:43:2c:8c:2e:a5:7e:
         f7:e1:e2:63:4b:17:7d:0a:4a:70:56:19:84:40:9c:79:be:12:
         f0:e2:54:bf:c2:8d:1c:4b:f5:3b:09:d9:50:e8:76:76:d6:23:
         ef:54:8d:02:a7:17:27:81:c9:00:39:d8:95:be:8f:58:80:1d:
         c2:70:a8:13:14:05:7d:38:28:0c:38:de:a4:5c:da:c7:86:c5:
         57:d3:6c:00:12:67:34:d1:9e:53:77:e4:f2:ee:a2:d2:7c:56:
         02:0c:8a:8a:bd:a1:e9:45:c1:0a:9c:ba:e5:f4:f3:5a:7c:99:
         10:d3:c3:5f:16:71:7a:4b:b3:cf:5f:57:f9:67:3e:7c:68:d4:
         ad:5d:fd:57:e5:da:32:90:8c:96:21:46:33:40:fa:b2:1e:9e:
         f6:63:71:89:0a:93:15:2b:ef:12:f5:c2:69:f2:41:25:1e:f2:
         9b:08:30:dc:aa:bb:51:dd:d3:4a:be:31:eb:33:c0:12:5d:39:
         6b:b2:a2:03:94:26:2e:29:3e:2a:d8:43:fd:24:46:15:29:37:
         59:e2:62:e2:95:9c:17:aa:74:95:07:22:7a:68:e8:eb:da:85:
         f8:e0:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 06:37:19 2026 by rpki-client