Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File:                     Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier:          aAkj7zjFopPicgQjKqajAo4gsNukdAWrjiRC2byPe3o=
Subject key identifier:   85:E8:4D:EC:EE:81:59:4B:25:B3:9F:3A:07:4F:E0:64:B3:A8:50:7A
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer:       /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial:       019F85694700A9A189E774A0E86F560AD06C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number:          091C
Signing time:             Tue 21 Jul 2026 16:01:36 +0000
Manifest this update:     Tue 21 Jul 2026 16:01:36 +0000
Manifest next update:     Wed 22 Jul 2026 16:01:36 +0000
Files and hashes:         1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: K+ga8A4Db0e26mDrs2rjKpMUezVCusKwYFFtQytWKqU=)
                          2: lD0Wwhw0gpihU_arbUQK_IQqs4c.roa (hash: 6HIhfJOZXKPxqB9WM2oez5Dgrzz0kzJpo4+10uPExmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:69:47:00:a9:a1:89:e7:74:a0:e8:6f:56:0a:d0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
        Validity
            Not Before: Jul 21 16:01:36 2026 GMT
            Not After : Jul 22 16:01:36 2026 GMT
        Subject: CN=85e84decee81594b25b39f3a074fe064b3a8507a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:59:f9:4f:46:4c:ed:af:29:6a:30:38:fe:
                    d0:9f:c9:22:b0:3a:cc:37:b2:8c:ac:04:bd:02:e2:
                    6e:26:a7:db:a6:5c:d5:17:29:45:14:f8:fc:1b:f6:
                    36:73:fb:5f:f6:0c:c7:e2:82:6d:ff:8e:e7:48:2f:
                    6b:17:94:a0:1c:83:ad:f4:73:48:89:5f:2c:ff:45:
                    5c:c2:17:86:6f:9b:d5:7c:f7:35:b8:7a:9d:9b:9c:
                    ed:cf:0e:63:d8:8e:a2:cb:d2:2f:fc:df:b3:b5:aa:
                    18:51:ee:ed:b0:ea:7b:18:db:99:4a:45:8e:e6:ed:
                    db:ca:cb:fe:a8:10:22:03:1a:f8:1e:fd:e7:44:3c:
                    41:d5:7f:ab:4a:c7:7c:ab:ee:39:db:c3:54:8c:7e:
                    2d:dc:29:2d:cb:33:a3:94:b2:24:b0:2a:a3:00:ba:
                    42:3b:fb:b3:85:9f:45:9b:f8:e5:6b:dc:2b:7d:57:
                    a1:39:5b:b2:4a:cd:b2:42:f0:d1:fa:f4:99:07:d5:
                    68:9c:ae:93:df:ac:a5:f6:14:14:aa:ef:a5:2f:82:
                    8d:6c:09:f7:7b:a5:07:ba:90:a4:96:0a:fd:53:c6:
                    a0:31:32:62:66:aa:ee:aa:5d:cc:91:ff:75:78:aa:
                    92:97:26:8d:6c:f2:01:93:a6:cf:0f:54:ce:b6:df:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:4D:EC:EE:81:59:4B:25:B3:9F:3A:07:4F:E0:64:B3:A8:50:7A
            X509v3 Authority Key Identifier:
                keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:60:7f:67:16:95:99:93:aa:b2:03:1a:0a:43:60:9d:1b:b8:
         05:01:fd:85:7d:b8:62:ff:fd:38:17:33:50:c5:e1:b5:46:14:
         02:7e:34:d3:47:b8:c1:65:83:a6:31:f3:d5:65:60:31:49:1c:
         b2:39:6d:c6:f7:08:f1:5c:ae:fb:7f:35:0a:da:07:9e:a9:49:
         d3:1d:c2:4c:07:3d:f8:7a:5f:dc:66:e8:2f:15:2d:3b:25:d0:
         2f:05:6c:2a:df:b7:ee:dd:3f:72:9f:0d:70:14:7d:e3:10:5b:
         d2:40:af:23:2a:6f:ef:79:ac:68:85:2e:d5:d3:36:90:8b:4c:
         6c:04:4a:a6:79:56:24:b0:79:12:79:1d:f7:b5:33:a9:d2:c8:
         e2:53:03:af:d9:f1:92:c6:8c:7a:1c:cc:45:15:7c:7c:dc:94:
         f1:d7:b4:8b:34:40:ec:c7:f0:1c:47:0e:dc:d2:e3:d3:b9:34:
         4c:0b:bd:54:0b:88:ab:31:f1:93:f3:ee:fb:b6:30:f6:51:29:
         c7:9a:3b:c3:1f:1a:c4:23:eb:98:f4:a3:a4:a1:e4:a2:30:be:
         63:8a:04:99:b4:5e:72:52:f8:87:f0:c0:b1:77:56:fe:a2:29:
         10:11:19:cd:41:b2:56:7c:bf:16:5a:54:87:57:b5:fa:e8:45:
         37:60:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:54 2026 by rpki-client