Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File:                     ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier:          AzJfUSO0PqS06R2OWKykKhpLSm7CfPgCDOpQwYouXEY=
Subject key identifier:   99:C1:2B:B0:69:14:3C:55:CA:63:89:60:49:4C:8D:CF:91:5D:5F:13
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer:       /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial:       01A030368786F6D2775EE47FDA5C1C8D0330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number:          1931
Signing time:             Sun 23 Aug 2026 20:01:15 +0000
Manifest this update:     Sun 23 Aug 2026 20:01:15 +0000
Manifest next update:     Mon 24 Aug 2026 20:01:15 +0000
Files and hashes:         1: J-e1EK_LAkajkxzNj6LSi_DOMCQ.roa (hash: 2wHbXc4iH7fDMwb/pEgkJZF38SGZEaDWW6KVL/qYSzQ=)
                          2: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: DVGXUhxWvfSJbJHcUTHzveICwbmKEySRreTdp/+eRxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 20:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:30:36:87:86:f6:d2:77:5e:e4:7f:da:5c:1c:8d:03:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
        Validity
            Not Before: Aug 23 20:01:15 2026 GMT
            Not After : Aug 24 20:01:15 2026 GMT
        Subject: CN=99c12bb069143c55ca638960494c8dcf915d5f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:9b:eb:18:4f:f6:fe:77:0c:25:57:8e:5f:
                    cc:1d:d3:4c:0d:9c:4d:cf:2d:81:10:d6:07:9a:d9:
                    c1:21:1f:70:f4:49:53:53:1a:95:14:c6:18:60:16:
                    5f:47:39:b5:2a:a9:f0:83:a0:10:40:99:36:fd:b6:
                    24:d0:4a:ba:23:38:19:2f:96:af:29:65:51:8d:0a:
                    64:88:f2:cc:1a:3e:96:80:c0:94:7c:9d:26:b2:c9:
                    6a:f4:fd:47:7f:96:43:f6:5f:69:f9:b3:ad:38:f2:
                    a3:6e:03:3d:55:cf:09:c5:f0:85:90:95:55:a8:65:
                    8c:eb:2c:bc:16:64:4d:8f:29:bf:32:dd:bf:93:36:
                    8b:7b:d3:6d:cd:86:f4:3d:15:db:6e:97:14:7c:b7:
                    81:17:da:f3:1d:1c:8d:8a:8b:73:b6:f5:09:53:aa:
                    aa:4e:4a:6a:d2:b5:dc:d3:ea:f2:81:15:11:66:b5:
                    f3:59:6f:f4:d6:06:3f:42:60:5b:c8:4a:73:ec:43:
                    00:b8:fc:6e:3d:2c:ca:38:fd:6b:83:a5:4a:01:f8:
                    28:23:12:c5:f4:80:cf:81:1f:d9:8e:77:52:8a:e7:
                    39:c4:6e:2a:58:fa:c9:41:a9:34:ac:16:32:9d:45:
                    c6:41:dd:fa:bf:50:2c:09:06:4f:71:44:80:95:5e:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:2B:B0:69:14:3C:55:CA:63:89:60:49:4C:8D:CF:91:5D:5F:13
            X509v3 Authority Key Identifier:
                keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:cc:f4:68:55:03:c8:9d:0a:85:0b:f6:2f:fb:fe:67:16:
         13:c4:16:70:f6:77:3c:3e:93:31:83:77:a3:6a:c5:68:64:75:
         98:6d:92:23:2e:64:5d:48:4b:da:03:9d:c8:24:0e:8f:e8:c8:
         fd:f6:08:53:85:09:0c:1c:d9:cf:ad:aa:a3:93:09:14:66:a0:
         37:65:51:1e:c7:9c:93:55:a3:ba:f0:d8:c6:fa:b7:00:dd:e8:
         90:e3:97:af:8d:15:46:67:46:6b:a3:e7:46:41:fc:0c:be:f7:
         d2:c4:17:c2:2b:83:f1:ae:40:17:39:a3:89:42:4d:76:44:8c:
         b1:0a:59:35:dc:01:00:b3:fc:fb:a7:19:10:c2:e2:00:e3:30:
         a7:e1:49:d4:8d:98:fc:f6:96:14:0a:3e:f6:59:1d:6c:13:e3:
         29:e6:7e:ea:9f:0a:6d:38:5a:53:5c:c4:29:1c:22:63:a4:96:
         65:67:54:34:19:b8:35:b3:02:d9:d5:1d:57:78:ef:89:ad:5f:
         10:31:0b:c5:42:05:79:13:3b:c8:b9:1b:21:09:d3:c5:8d:af:
         bc:49:3a:66:ff:99:48:3c:f6:80:2f:70:3d:c3:ed:39:ad:b4:
         b7:8d:5c:fd:f4:fe:a9:1f:6a:f7:f3:70:4c:64:fc:9f:e0:7a:
         db:59:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 02:38:06 2026 by rpki-client