Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File:                     zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier:          EuyFcoiLS63dH++TmgBXkOwH3p1pIHUkUAIBe12J4to=
Subject key identifier:   01:4D:D3:29:45:8D:15:31:12:CC:F4:0A:DD:DE:80:B2:8A:51:14:33
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       019F37F22A7F5817C65A1988E891031D6F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number:          199C
Signing time:             Mon 06 Jul 2026 15:00:45 +0000
Manifest this update:     Mon 06 Jul 2026 15:00:45 +0000
Manifest next update:     Tue 07 Jul 2026 15:00:45 +0000
Files and hashes:         1: 8q97JD8tJUeeOn9fKUKNm7YiLwU.roa (hash: +XZNxuku4QOLJPqFzFk8t0v4pn8/FyRgMW7pvdNX3CU=)
                          2: MDkPOpYz1CFhy53GuyXV7mJS25Y.roa (hash: JdEyxxhM+8u/dWlLfW1Caxnykc4bJ7pVq4kK7m8J+m0=)
                          3: sPvIT2OpPdfQUjumOhMItUZScLE.roa (hash: 3ub5VhGbB2HUNoD3TI7D0yCIQk+I5O7LDn2pAlXC/k4=)
                          4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: rGZHmIeY3t0fivvIchr3e2t3QUT6yB15vJZn4EiL47k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:f2:2a:7f:58:17:c6:5a:19:88:e8:91:03:1d:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: Jul  6 15:00:45 2026 GMT
            Not After : Jul  7 15:00:45 2026 GMT
        Subject: CN=014dd329458d153112ccf40addde80b28a511433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:48:99:0c:18:38:11:35:2b:71:c1:1a:a4:
                    ae:fe:59:04:d7:6e:0b:78:8c:92:da:af:2a:74:b1:
                    62:9a:37:86:09:85:42:b8:0b:e5:33:89:43:e9:7e:
                    7b:4f:ea:27:c0:1b:4d:eb:bd:a6:11:e3:6d:30:11:
                    a5:98:82:0e:fd:ff:51:e9:d9:4b:50:0b:a3:3e:58:
                    41:3d:32:32:8f:6d:03:31:2e:55:69:3a:eb:e8:e0:
                    17:fb:64:12:52:3d:5f:38:85:f0:bc:85:81:6f:13:
                    35:56:24:e4:73:76:e6:8d:a6:25:85:3c:c9:9b:9c:
                    7c:d2:b7:5d:a3:b4:b8:28:fc:1b:fd:45:c1:c0:85:
                    64:85:70:28:d9:0d:a3:8e:75:39:8e:ea:df:19:f1:
                    f7:55:3f:58:c5:b7:8b:09:86:3b:20:0b:63:46:6d:
                    5a:50:7f:40:34:c3:ff:33:86:83:22:33:3b:f6:d6:
                    68:13:3d:0e:88:14:1a:93:e1:61:45:b6:a0:d1:38:
                    09:13:40:6e:09:81:a4:fe:d2:32:cf:42:84:ca:4c:
                    48:cd:ca:88:35:a4:e5:24:ca:b2:5d:55:cd:6e:d1:
                    40:21:0c:5e:2a:03:f6:61:c4:c0:da:d7:86:b3:c9:
                    d5:fd:2b:fb:aa:8f:06:20:c5:47:25:01:b6:bc:3c:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:D3:29:45:8D:15:31:12:CC:F4:0A:DD:DE:80:B2:8A:51:14:33
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ca:fc:58:31:8d:7e:bb:a4:b1:e1:f6:b1:5c:bf:39:6e:b4:
         1e:5d:a1:84:96:c5:36:b9:99:a8:91:2a:f6:b5:2c:c5:d5:42:
         2f:96:d3:1a:45:55:6d:fc:83:b1:f8:fd:89:ea:78:9e:21:e6:
         cf:f4:e2:17:f1:b3:ae:1a:d2:1f:70:4b:66:8c:28:e0:3d:0d:
         a8:d3:39:79:ba:b0:af:76:2f:00:c1:78:51:b7:51:1d:a5:2a:
         12:b6:30:ac:fb:f9:9c:93:bb:1a:96:40:2d:4d:3e:8b:5d:e8:
         c7:96:63:9a:19:c6:90:e9:bf:0b:73:92:c8:87:b7:e6:8f:d0:
         78:aa:c8:28:18:de:e5:28:55:69:11:52:67:7a:13:52:12:f0:
         58:8f:89:93:9a:87:f6:6f:d9:7e:3d:d2:2a:27:af:4b:fd:de:
         70:e9:9c:d3:11:94:1d:18:42:8c:7c:ec:92:d9:c2:7a:e1:96:
         a3:3f:5e:e9:23:08:fa:ad:b4:6d:96:e3:cb:87:ad:bd:2b:83:
         7c:4c:4b:7a:2b:1a:44:7a:5b:14:0a:e1:9c:15:8a:c1:24:9b:
         b5:64:f8:f6:b2:c9:a9:f6:ef:79:f5:de:d0:18:83:e3:f4:56:
         53:a7:21:3c:6b:5b:52:07:ac:a6:e2:87:2a:4d:26:28:20:8a:
         35:41:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:27:23 2026 by rpki-client