Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
File:                     Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json)
Hash identifier:          TJDyuc+HSHOThi88E4E8miPMHFq7gmR0L0pKldR++sE=
Subject key identifier:   A8:E5:24:CB:D9:ED:CC:B7:BD:46:56:58:DB:9E:41:D2:50:C0:84:34
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Certificate issuer:       /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial:       019FA2CE90082A9A6B5732785CBA83F2E547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
Manifest number:          19CC
Signing time:             Mon 27 Jul 2026 09:01:14 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:14 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:14 +0000
Files and hashes:         1: 7Scik-X8N5D-2aMEU2Z1kPCqKhM.roa (hash: NGWgIYynYlQ1UVE8iCJVPsg4/pEPdgtPoDN8hUbSWAQ=)
                          2: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: dY3oONZLR7bqcV/9ruxVNxKITZbO+2r4Pe2/2xoL27w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:90:08:2a:9a:6b:57:32:78:5c:ba:83:f2:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
        Validity
            Not Before: Jul 27 09:01:14 2026 GMT
            Not After : Jul 28 09:01:14 2026 GMT
        Subject: CN=a8e524cbd9edccb7bd465658db9e41d250c08434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:4e:56:ae:00:75:94:91:d8:6e:1f:99:2c:
                    cc:ab:ef:6f:c9:4b:8d:5a:f3:e6:f3:75:56:ac:10:
                    85:13:f8:60:63:3a:7a:e4:ad:7b:37:cb:ec:33:93:
                    88:d9:50:a2:b5:26:84:0f:ff:ea:13:45:48:e0:96:
                    5f:ad:92:ce:b7:f9:6b:de:72:9f:ea:38:30:22:bd:
                    ac:9f:b2:8e:36:02:ae:fc:b3:00:a7:ca:fa:ec:35:
                    e1:c3:09:61:5c:82:e2:84:1d:c9:53:95:8e:79:5b:
                    94:c0:0a:e0:99:ac:74:18:16:f7:eb:07:a9:6f:49:
                    a5:4e:ad:cc:77:05:1a:a1:7f:7c:23:3d:cf:13:ce:
                    c7:fa:c6:5b:a9:e2:8f:3a:a8:a1:71:8c:83:e6:fb:
                    3a:99:78:a1:f7:c6:51:be:b8:a7:66:70:14:e3:83:
                    3f:b0:df:e8:88:2c:b5:f9:e5:6c:ab:4b:80:ae:b0:
                    57:01:2e:35:c3:27:ef:4a:44:24:6b:ea:ce:f2:46:
                    da:d5:28:4d:66:c9:e5:56:8a:1a:18:11:64:5b:b6:
                    ce:bc:20:09:e8:6b:a2:48:e2:35:0d:d6:85:1f:31:
                    8a:e7:ba:2a:6c:a3:10:09:98:43:f9:d1:78:eb:0e:
                    c3:90:75:39:31:94:4b:c0:5a:c9:85:ec:d6:c7:77:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E5:24:CB:D9:ED:CC:B7:BD:46:56:58:DB:9E:41:D2:50:C0:84:34
            X509v3 Authority Key Identifier:
                keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ef:a2:68:08:56:49:64:d7:2b:45:3d:fe:2c:33:f7:50:a1:
         9a:51:d5:f2:cd:92:16:98:c0:f3:db:9c:95:ac:cc:f3:59:1d:
         bf:a9:2b:52:11:c5:55:7c:62:6c:a4:6f:45:a5:1b:76:25:7b:
         eb:bb:dc:92:9f:5d:1b:f8:b4:97:b1:1d:f6:5d:5d:99:36:a9:
         38:a1:5e:75:f7:47:03:2e:31:c1:66:41:e8:9d:bf:b5:13:1a:
         d9:ed:f7:c3:44:ff:3c:e4:6c:c9:11:af:9c:b1:a0:3d:a4:18:
         1c:0e:70:83:78:b9:22:a2:a1:52:eb:c3:23:18:ff:3f:68:bb:
         4d:9c:2b:93:5e:11:93:ef:d7:d4:50:a8:3d:9f:54:52:76:fc:
         12:c1:9a:77:5e:fd:cb:e0:1a:b9:0f:b4:31:e4:6d:d8:fc:0a:
         a7:ac:9a:59:94:45:0c:d3:a3:3e:11:1e:fc:42:ef:2b:c8:bd:
         d5:c7:d0:13:ab:3c:1f:36:42:44:53:1a:b4:f4:2d:c1:2b:0b:
         5f:60:2d:dd:7d:30:be:5d:e0:b9:92:10:bd:ad:4a:ba:6e:97:
         86:71:2b:f6:88:9a:cc:3a:34:0e:fb:5e:1a:a5:58:e5:c9:b6:
         40:0d:39:bd:e2:7a:61:08:f2:5a:b3:bb:fd:08:ee:0d:30:04:
         7b:9a:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:44:05 2026 by rpki-client