Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          VDVHVzWdUADmyVaB9y8xUayEtYGXbHasQwrhShze/XY=
Subject key identifier:   1D:CE:D6:4B:28:7F:C6:31:FF:14:2F:B5:B2:AB:AA:12:1F:32:F1:2A
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       019F645D641A2371A62C975ADBA533E8411F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          1318
Signing time:             Wed 15 Jul 2026 06:01:09 +0000
Manifest this update:     Wed 15 Jul 2026 06:01:09 +0000
Manifest next update:     Thu 16 Jul 2026 06:01:09 +0000
Files and hashes:         1: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: vmBJcdKFFCQjf98+DA2uJfDoznHKhVoKGVRJ2b6IcoU=)
                          2: __i6sIYUIBe7mo2fXsSB58_KDR8.roa (hash: xm+A31I7Z/MMOUkoqOHD6xRyGTCyQb2nbbsP/I4N0LQ=)
                          3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:64:5d:64:1a:23:71:a6:2c:97:5a:db:a5:33:e8:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: Jul 15 06:01:09 2026 GMT
            Not After : Jul 16 06:01:09 2026 GMT
        Subject: CN=1dced64b287fc631ff142fb5b2abaa121f32f12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:ce:72:e6:f8:d1:e0:d7:43:ce:cf:45:31:
                    c6:96:c3:59:7b:8a:8c:45:e0:4f:3d:58:33:70:22:
                    28:ca:46:f8:22:5b:ed:23:c0:03:e0:62:40:24:97:
                    0e:22:aa:b5:f0:7a:fe:2d:3b:de:55:7d:bf:aa:b6:
                    bb:48:d9:79:ed:dd:f7:3d:a6:47:6f:20:1d:bc:10:
                    45:b2:2c:d0:9b:ce:dd:06:55:82:c5:2e:5b:4f:61:
                    94:db:d4:14:b3:d9:cf:a6:04:42:ad:5c:74:7d:6a:
                    90:a2:18:91:1f:48:90:13:18:ea:41:21:f8:5e:0c:
                    a8:4d:b1:85:a2:b3:cc:c6:b0:e7:e7:ea:18:a2:86:
                    03:e1:23:fe:15:84:30:fe:78:a7:73:4e:f8:85:bd:
                    04:bc:3a:28:20:59:21:49:f6:5e:b8:40:d1:36:57:
                    29:37:ac:25:da:10:df:59:88:e3:bb:b1:ad:b3:79:
                    b4:d3:8a:4a:e7:00:34:14:56:db:6e:82:9c:6b:ac:
                    62:f4:43:60:27:9d:b3:69:21:02:4e:ab:a9:e2:e5:
                    93:16:e4:4c:a9:9f:8d:c1:59:c6:c2:68:f0:01:0a:
                    c5:55:47:01:cc:4b:b6:ee:38:ed:08:41:ac:ae:99:
                    41:1b:1c:e7:37:6a:93:2a:b0:2a:2c:e7:f8:84:85:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:D6:4B:28:7F:C6:31:FF:14:2F:B5:B2:AB:AA:12:1F:32:F1:2A
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:57:4a:4c:f7:11:bc:8a:d4:ee:61:bd:13:fe:c5:c3:22:74:
         90:f4:21:7b:a5:72:ba:46:15:92:e2:4b:a6:f0:0d:5c:79:df:
         3c:88:ec:cd:1f:b6:2a:9d:04:5b:09:d3:3b:2f:57:98:89:9d:
         94:10:b4:56:f3:46:c8:bd:e7:84:7a:f1:43:cf:a6:41:00:36:
         e7:4d:96:68:5a:a0:95:2d:d5:9c:04:05:19:50:51:b7:fc:8b:
         cf:70:7f:94:11:53:01:29:17:21:42:b7:ae:31:76:17:bd:46:
         a4:bf:c2:31:de:d3:2e:53:db:e4:1f:34:1c:97:65:d5:1c:3e:
         4a:0b:0a:bd:36:da:ef:12:f6:44:0a:34:d2:81:0a:a4:3e:f0:
         08:19:20:2c:af:33:a4:ef:a3:d8:3e:11:ea:a1:12:11:bd:80:
         14:76:67:47:74:aa:7c:2a:8d:b9:ec:55:a0:91:30:b6:1d:6e:
         ed:1c:97:6d:11:34:42:2d:6a:12:4c:2e:44:c1:1f:3b:72:aa:
         b5:65:9e:7d:57:de:96:1b:36:0b:17:78:71:f4:c3:94:fc:45:
         82:0d:e5:b8:37:72:7e:ff:1b:d5:dc:c4:f0:93:e6:0c:53:12:
         b6:e1:f5:fa:b9:e0:88:9e:5c:4a:d5:4b:d6:c8:0c:d0:1f:e0:
         28:f5:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 15:39:07 2026 by rpki-client