Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File:                     1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier:          xcpGe00VC4cvvUYZTqRvpGkRfmu/PPsGVcR8aGBDUdk=
Subject key identifier:   E0:42:7C:50:5B:85:9C:3F:D7:85:4E:01:5D:E1:F8:BB:E3:4F:E8:91
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer:       /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial:       019FA2290180DC055913F038E132D0823FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 06:00:24 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:24 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:24 +0000
Files and hashes:         1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: /j/Anj9iKnU1WP1VR41bnEQTuFwNp/UBam4s9kIDkSs=)
                          2: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (hash: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:01:80:dc:05:59:13:f0:38:e1:32:d0:82:3f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
        Validity
            Not Before: Jul 27 06:00:24 2026 GMT
            Not After : Jul 28 06:00:24 2026 GMT
        Subject: CN=e0427c505b859c3fd7854e015de1f8bbe34fe891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:50:58:f8:00:12:fd:62:18:fe:4d:43:de:
                    e5:66:38:79:09:33:80:92:28:7d:e1:25:98:ed:ee:
                    82:66:c4:f7:9a:f8:4f:70:e2:c9:21:0f:2c:93:f7:
                    84:b7:1b:3b:3c:c9:de:04:0f:df:52:fc:d5:29:35:
                    bb:b4:70:48:f1:9d:fd:15:39:7f:cb:15:9a:4e:1d:
                    5c:72:23:29:ca:3c:5a:4a:7b:0e:0c:9c:78:65:95:
                    d3:33:36:a8:5e:b9:d8:9d:6b:bb:65:e1:22:e4:09:
                    d6:41:b2:ed:cc:4a:64:05:db:10:30:91:d3:d5:41:
                    d5:08:7b:58:f0:6c:7f:b7:43:8a:d0:11:03:a4:17:
                    b0:4c:f5:c0:4c:f7:f2:0d:dd:1a:5a:a0:dc:bb:3e:
                    08:4f:9c:4d:75:59:5f:ba:fa:74:42:ef:6b:dd:a1:
                    f7:64:12:27:53:a2:d7:01:a1:fa:e7:c9:3c:97:49:
                    71:a0:2f:a8:b7:ae:74:3b:27:b2:32:b0:b3:0b:6d:
                    f9:ef:05:43:4f:59:9b:6d:d1:94:2a:76:1c:35:7d:
                    6e:02:d0:e1:9e:a0:e1:ad:d1:1b:c3:4f:54:55:f2:
                    72:26:f2:12:eb:6e:8e:92:42:ba:08:17:6e:29:3f:
                    b3:6c:fd:cc:1e:cd:02:1a:4e:d1:02:cc:b3:77:95:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:42:7C:50:5B:85:9C:3F:D7:85:4E:01:5D:E1:F8:BB:E3:4F:E8:91
            X509v3 Authority Key Identifier:
                keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:29:b6:76:ed:87:f3:96:72:1c:00:51:d8:25:bd:b4:99:c5:
         55:7c:6f:fe:7f:0d:27:5d:c6:25:3c:7f:71:9f:97:db:53:7e:
         3f:9b:0b:51:51:ba:b8:c2:6f:b1:6d:d6:e9:4b:83:7a:62:4a:
         e9:0d:bf:9f:93:5f:a8:e6:39:8d:8e:d1:ef:84:d1:10:cf:c8:
         a4:8a:28:5c:c3:73:8e:90:33:f1:96:7a:ff:f7:96:9e:06:c9:
         43:47:90:7a:77:28:b1:94:b4:f8:da:c4:81:b6:d1:c2:1c:e0:
         99:0a:b0:18:72:2f:bc:72:d2:8a:e6:4c:90:45:3d:1e:4c:99:
         80:f5:b9:92:80:6f:31:ce:dc:9f:b6:b5:cd:b6:f5:b5:a3:37:
         32:13:80:b9:b3:cf:11:29:d4:85:25:3c:7e:86:b2:c3:b8:6a:
         7c:fb:35:53:ce:81:11:c8:ea:62:69:10:6b:40:28:ad:7e:93:
         7e:ce:80:11:4f:89:bb:c0:40:66:b3:00:64:6c:a0:94:1d:d4:
         9b:52:da:23:8a:70:fb:b0:6d:fb:ac:de:23:0d:09:f2:73:cd:
         e5:81:74:2e:63:ea:06:09:1b:a9:2e:7f:5b:3e:cb:c9:a4:1f:
         c7:f2:32:9c:e8:c5:7a:33:61:95:4b:39:19:b6:05:5d:87:7c:
         c5:1a:94:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKQGA3AVZE/A44TLQgj+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzY3ZmMyNGQwMDRmNzFkZDJhZWYwM2Y5Y2I0ZjJlM2Y5
MDg2YWEwHhcNMjYwNzI3MDYwMDI0WhcNMjYwNzI4MDYwMDI0WjAzMTEwLwYDVQQD
EyhlMDQyN2M1MDViODU5YzNmZDc4NTRlMDE1ZGUxZjhiYmUzNGZlODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE5QWPgAEv1iGP5NQ97lZjh5CTOA
kih94SWY7e6CZsT3mvhPcOLJIQ8sk/eEtxs7PMneBA/fUvzVKTW7tHBI8Z39FTl/
yxWaTh1cciMpyjxaSnsODJx4ZZXTMzaoXrnYnWu7ZeEi5AnWQbLtzEpkBdsQMJHT
1UHVCHtY8Gx/t0OK0BEDpBewTPXATPfyDd0aWqDcuz4IT5xNdVlfuvp0Qu9r3aH3
ZBInU6LXAaH658k8l0lxoC+ot650OyeyMrCzC2357wVDT1mbbdGUKnYcNX1uAtDh
nqDhrdEbw09UVfJyJvIS626OkkK6CBduKT+zbP3MHs0CGk7RAsyzd5X1mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBCfFBbhZw/14VOAV3h+LvjT+iRMB8GA1UdIwQY
MBaAFNc2f8JNAE9x3SrvA/nLTy4/kIaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQt
YjljNzk0ZTAzY2JhLzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQtYjljNzk0ZTAzY2Jh
LzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhym2du2H
85ZyHABR2CW9tJnFVXxv/n8NJ13GJTx/cZ+X21N+P5sLUVG6uMJvsW3W6UuDemJK
6Q2/n5NfqOY5jY7R74TREM/IpIooXMNzjpAz8ZZ6//eWngbJQ0eQencosZS0+NrE
gbbRwhzgmQqwGHIvvHLSiuZMkEU9HkyZgPW5koBvMc7cn7a1zbb1taM3MhOAubPP
ESnUhSU8foayw7hqfPs1U86BEcjqYmkQa0AorX6Tfs6AEU+Ju8BAZrMAZGyglB3U
m1LaI4pw+7Bt+6zeIw0J8nPN5YF0LmPqBgkbqS5/Wz7LyaQfx/IynOjFejNhlUs5
GbYFXYd8xRqUqQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:32 2026 by rpki-client