Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File:                     zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier:          dT4dLS7LI+Y+bugeutP4GD0paGGIvXDqnIZptII4MU4=
Subject key identifier:   3F:57:74:19:48:2E:0C:81:EA:DA:A8:BC:C5:CB:8B:F7:6F:F6:8E:39
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer:       /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial:       019F87C5379793F74958C16E2B4407DAC7C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number:          020C
Signing time:             Wed 22 Jul 2026 03:01:16 +0000
Manifest this update:     Wed 22 Jul 2026 03:01:16 +0000
Manifest next update:     Thu 23 Jul 2026 03:01:16 +0000
Files and hashes:         1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
                          2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
                          3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: Fjwe1cmrjqVfdr9r/y7mG1LgAKlm9pu6/pzAh+9Botg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:87:c5:37:97:93:f7:49:58:c1:6e:2b:44:07:da:c7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
        Validity
            Not Before: Jul 22 03:01:16 2026 GMT
            Not After : Jul 23 03:01:16 2026 GMT
        Subject: CN=3f577419482e0c81eadaa8bcc5cb8bf76ff68e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:75:26:7a:42:52:a8:36:35:3e:f9:cd:89:
                    ca:29:5b:e2:f2:1d:8e:03:80:4e:43:cf:21:e0:d8:
                    d9:ad:88:8c:13:fb:95:f7:76:cc:94:54:2f:fc:33:
                    b6:bb:75:61:2d:b2:a6:41:19:e7:d2:d7:3f:f9:2a:
                    29:69:f7:6b:35:82:ec:de:80:d7:31:d7:c6:ab:32:
                    76:a0:cf:07:39:e3:a2:dd:e4:e6:08:cc:44:5d:77:
                    54:e8:d8:5d:34:8c:3e:a0:7c:f3:08:e9:fb:cd:59:
                    05:0a:b5:23:bb:23:8a:94:77:32:7e:69:86:35:5c:
                    d2:d2:24:64:97:24:c4:0e:3c:ab:39:98:63:7e:e4:
                    5d:c7:27:0d:59:e3:a0:5b:18:61:18:b6:b2:00:74:
                    63:c4:d9:0d:cc:17:c9:e0:09:c6:e9:ee:28:c4:82:
                    7b:4b:70:88:aa:13:d3:42:99:f1:ed:8e:08:16:7a:
                    25:63:69:53:67:92:d3:2b:e9:9b:f6:a2:c7:1a:18:
                    ff:9e:34:f6:bb:0a:a7:97:c4:be:e2:f4:49:94:9e:
                    ed:6e:54:b9:fc:86:75:08:a8:a7:5d:77:8e:44:83:
                    fc:c0:a7:72:92:2c:06:06:33:da:11:cc:f1:b7:a1:
                    b3:e5:0c:db:12:5a:19:26:06:66:b3:88:ca:65:d6:
                    fc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:57:74:19:48:2E:0C:81:EA:DA:A8:BC:C5:CB:8B:F7:6F:F6:8E:39
            X509v3 Authority Key Identifier:
                keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:69:f4:b7:21:fb:f5:ea:23:81:93:6c:f5:cc:a3:db:49:e1:
         2a:ee:af:ff:0d:c6:05:8c:16:c5:6f:97:84:c4:d1:4a:f0:2a:
         29:c1:2a:1a:6d:00:5e:f7:14:13:f1:cc:e4:6d:0d:c4:ff:02:
         54:fd:b4:40:e9:a4:20:e1:49:76:38:17:b1:7c:de:dd:f5:0d:
         7d:b2:19:d9:4d:85:f8:5e:41:e1:bf:ce:35:d7:bb:8d:27:3b:
         61:91:83:8f:4b:8b:e6:6c:1b:ac:92:10:13:bb:12:47:ad:93:
         d7:8e:cc:03:7d:ed:2c:28:c2:ae:58:0f:64:6d:c0:15:a7:e4:
         dc:87:7c:13:12:58:af:1e:44:ee:69:6a:da:6a:8d:19:02:03:
         90:3f:a0:eb:25:ee:dc:97:8e:09:72:e0:73:ed:21:72:fe:7a:
         1f:61:63:3a:0a:a3:d4:28:4f:40:e9:08:f4:72:57:1a:a6:10:
         b4:73:45:a7:77:3b:e2:5a:c0:92:9e:2a:fa:64:56:60:ea:7e:
         5b:b8:e5:62:0b:46:3b:a3:71:40:c7:b2:1d:db:b0:5f:af:ff:
         7b:ed:38:bc:9a:86:c5:85:58:ae:9c:81:e2:f7:f7:fe:73:32:
         98:c1:63:14:1c:2e:01:51:97:67:85:43:2f:11:b1:a5:e8:b6:
         98:ac:6a:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+HxTeXk/dJWMFuK0QH2sfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWRjNWZhMGRiNmMyNjdjMGI5ZDk2ZTRkZTcwOTRiMzE1
NjYyZjgwHhcNMjYwNzIyMDMwMTE2WhcNMjYwNzIzMDMwMTE2WjAzMTEwLwYDVQQD
EygzZjU3NzQxOTQ4MmUwYzgxZWFkYWE4YmNjNWNiOGJmNzZmZjY4ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscJ1JnpCUqg2NT75zYnKKVvi8h2O
A4BOQ88h4NjZrYiME/uV93bMlFQv/DO2u3VhLbKmQRnn0tc/+SopafdrNYLs3oDX
MdfGqzJ2oM8HOeOi3eTmCMxEXXdU6NhdNIw+oHzzCOn7zVkFCrUjuyOKlHcyfmmG
NVzS0iRklyTEDjyrOZhjfuRdxycNWeOgWxhhGLayAHRjxNkNzBfJ4AnG6e4oxIJ7
S3CIqhPTQpnx7Y4IFnolY2lTZ5LTK+mb9qLHGhj/njT2uwqnl8S+4vRJlJ7tblS5
/IZ1CKinXXeORIP8wKdykiwGBjPaEczxt6Gz5QzbEloZJgZms4jKZdb8YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9XdBlILgyB6tqovMXLi/dv9o45MB8GA1UdIwQY
MBaAFMwdxfoNtsJnwLnZbk3nCUsxVmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZGVhNzItNmUxMS00NzFlLWFhZTIt
ZDhmYzYxNDdiNTA0LzEvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ZGVhNzItNmUxMS00NzFlLWFhZTItZDhmYzYxNDdiNTA0
LzEvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGn0tyH7
9eojgZNs9cyj20nhKu6v/w3GBYwWxW+XhMTRSvAqKcEqGm0AXvcUE/HM5G0NxP8C
VP20QOmkIOFJdjgXsXze3fUNfbIZ2U2F+F5B4b/ONde7jSc7YZGDj0uL5mwbrJIQ
E7sSR62T147MA33tLCjCrlgPZG3AFafk3Id8ExJYrx5E7mlq2mqNGQIDkD+g6yXu
3JeOCXLgc+0hcv56H2FjOgqj1ChPQOkI9HJXGqYQtHNFp3c74lrAkp4q+mRWYOp+
W7jlYgtGO6NxQMeyHduwX6//e+04vJqGxYVYrpyB4vf3/nMymMFjFBwuAVGXZ4VD
LxGxpei2mKxqBA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 11:33:39 2026 by rpki-client