Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File:                     Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier:          S3cYicDgM92xXhu44mTGopNd8CHEzDUCLOJRwqoNkak=
Subject key identifier:   44:DA:B8:1E:51:9D:77:28:04:93:C4:E5:21:B4:1E:67:A2:C6:44:C2
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer:       /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial:       019F37BC6B7DB767911F04A6BF80AEEC0E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number:          19A2
Signing time:             Mon 06 Jul 2026 14:02:02 +0000
Manifest this update:     Mon 06 Jul 2026 14:02:02 +0000
Manifest next update:     Tue 07 Jul 2026 14:02:02 +0000
Files and hashes:         1: 8fgtqwCkJq8DgaM9f569Bs0xaxc.roa (hash: QEUkALn73LxSmFsf5evgpfdPqAtmFu8hMHpLqd8W8OA=)
                          2: YytdvmUqMlUYaz2rUM4035jtC1g.roa (hash: shR9sZHCpyT2KbYpD+KESwIQfMOwq9VzuzMQm7Ip8Tg=)
                          3: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: 96ctdnc2e4zkS5wFQIZXV6NLDm4CKpzfyXGvYmsX4ks=)
                          4: _rX0Pp7-maFWlmqvdtFQDE9VMd4.roa (hash: JcwoPPYbwcTSP2znNESFrTnQNOV0v0WHsf0jgmgiH6I=)
                          5: by-UGjZnPxHASghfMrX3xMxAH0U.roa (hash: E+h5Wx406s4BfDje+75V+He27RZ6hOR4CfZDRt1lPHI=)
                          6: npI4kx8XN3dD9EUfXLup5Uxufpo.roa (hash: Wo/f0yd4mja7w18dDAZVOFDWsGvRVUgoh4pNDEcSTNk=)
                          7: zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa (hash: fhJgy4L5lI5bxEqwJcc/VgO0/xvWjnY5mfId21lwGRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:bc:6b:7d:b7:67:91:1f:04:a6:bf:80:ae:ec:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
        Validity
            Not Before: Jul  6 14:02:02 2026 GMT
            Not After : Jul  7 14:02:02 2026 GMT
        Subject: CN=44dab81e519d77280493c4e521b41e67a2c644c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:97:be:09:ea:4a:4c:73:28:b4:61:b8:e9:
                    71:2c:58:1a:73:07:ad:62:70:eb:83:d9:79:27:6a:
                    da:b9:8c:44:0f:7d:ec:a4:d4:f8:2d:7a:02:72:11:
                    90:28:4e:25:fb:2d:8d:15:05:91:47:4f:31:15:04:
                    af:a4:00:f2:1a:00:d8:0e:f7:e3:eb:64:fa:26:05:
                    3e:8d:42:2e:13:be:b0:d2:a3:8d:3e:30:39:8c:aa:
                    b1:9e:fe:61:46:b7:fe:a0:08:c3:5c:c5:63:cb:b0:
                    34:c7:4d:5c:d5:0e:65:9b:96:04:e0:bf:fc:de:ed:
                    7d:1e:f8:23:76:5b:73:d3:ef:0f:dd:45:8d:06:b3:
                    91:f2:2c:04:54:ed:34:ac:55:51:2d:55:7a:2f:5f:
                    94:19:03:ae:4b:47:f6:3f:61:a7:80:58:ce:a4:32:
                    5f:fa:af:a7:56:cd:97:4c:96:df:a8:40:48:01:5d:
                    9f:e2:29:30:58:5a:7d:8c:a2:0b:ea:04:8b:c9:fe:
                    9e:d0:05:22:c8:00:e2:78:88:79:28:6a:d8:9f:af:
                    45:44:58:1c:74:df:de:35:dc:b0:13:ee:a9:c6:6b:
                    74:72:df:2c:79:57:cd:0e:89:52:3f:69:7a:24:66:
                    41:85:24:48:be:e2:3c:01:ba:4c:6b:de:b6:2a:17:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DA:B8:1E:51:9D:77:28:04:93:C4:E5:21:B4:1E:67:A2:C6:44:C2
            X509v3 Authority Key Identifier:
                keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:28:c7:d3:88:9c:01:bb:c2:77:5e:e3:c5:d4:20:0c:db:
         91:e3:2f:76:4c:2a:19:95:6e:98:e0:0c:b5:06:d6:57:22:68:
         9c:ba:a3:05:8c:38:9f:af:da:ba:d7:de:e5:fe:55:e1:3f:d1:
         5e:6a:19:04:1b:2b:eb:b0:52:29:4e:11:30:4e:06:e7:52:5e:
         be:41:86:b7:18:0d:9d:6e:ef:cd:90:a1:86:75:34:6f:08:c0:
         a5:42:1f:53:18:a5:62:54:d5:2c:14:b9:b8:e4:2d:36:3a:81:
         06:9f:34:62:2d:22:5a:33:3b:52:24:55:b6:27:e9:50:d6:58:
         ff:1e:d4:29:2d:86:f8:f8:62:4a:28:07:df:2f:af:7c:b7:3e:
         31:d7:48:24:e3:25:13:ef:59:f8:e0:f3:4e:af:dd:00:6b:d8:
         18:1a:5a:cf:d8:14:f2:38:6e:78:0b:15:bf:04:cd:d1:54:f1:
         34:f5:e1:69:b0:23:af:fe:53:18:9c:33:99:06:6e:c7:4b:fb:
         63:9d:2c:f9:f5:9d:ca:a2:d6:88:94:e7:ea:6d:eb:44:50:86:
         65:0d:1f:0d:5c:58:50:e3:80:9a:67:01:74:ef:73:46:6e:d4:
         5c:8a:9b:93:42:33:4d:7b:bf:44:c3:44:52:19:a7:fb:9c:88:
         2d:fd:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:24:54 2026 by rpki-client