Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File:                     ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier:          f6sY087Z2Uht4XjfRdKHkR2ZQlN+Xzfg5BtJX6DbfN8=
Subject key identifier:   5B:7F:3E:06:C7:3D:5D:D5:B2:7A:29:8B:9F:B5:23:C8:EB:40:8D:EE
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer:       /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial:       019FA2975BAF6118B39A0B5C307488FD71FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number:          15B8
Signing time:             Mon 27 Jul 2026 08:00:55 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:55 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:55 +0000
Files and hashes:         1: R4biYlru54aTOhXabFWJZhdtNlE.roa (hash: wWEd9TpnYbM1KpOe7QAvs/pg0aALtJHWzooiwoOKRvU=)
                          2: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: b0eReNdhl7u/mM7fu+Nl5F9WCadsgJ5mmw8gbGb2OZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:5b:af:61:18:b3:9a:0b:5c:30:74:88:fd:71:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
        Validity
            Not Before: Jul 27 08:00:55 2026 GMT
            Not After : Jul 28 08:00:55 2026 GMT
        Subject: CN=5b7f3e06c73d5dd5b27a298b9fb523c8eb408dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:ae:50:eb:ef:f0:a9:28:01:b4:f3:04:e6:
                    00:b6:80:b1:d4:e8:e5:14:10:1f:34:1f:74:7b:55:
                    e7:73:19:a5:b0:52:f3:fa:8c:f7:1f:82:f2:82:42:
                    4b:7b:e7:64:52:8b:b1:93:17:96:e7:96:e9:d9:73:
                    d5:81:f5:f2:4e:75:32:62:3e:5e:30:95:e7:5b:b8:
                    20:96:a5:b7:86:60:f4:5a:59:f0:b9:54:e6:50:ef:
                    f5:6b:09:3e:ed:1b:51:c6:ac:87:b9:00:51:fd:c0:
                    d8:dc:e8:8c:f5:0f:6e:db:ce:a4:d7:27:de:cf:f9:
                    c1:3e:1e:8f:93:e0:13:32:d0:06:b3:11:90:8f:4f:
                    73:26:1a:05:15:52:67:c1:ab:6d:76:1f:79:26:8a:
                    d1:79:02:8c:63:23:0d:83:3f:12:9e:e8:a6:6e:b2:
                    78:4d:21:de:79:ba:17:fe:88:61:ea:7d:6d:80:09:
                    b2:e6:be:e2:3b:4f:d5:d8:7f:92:01:2c:f3:81:29:
                    fe:97:a4:ee:a1:b5:4f:18:c6:ce:db:68:24:53:86:
                    45:c4:e6:d8:21:30:9f:d3:f9:a4:49:32:3d:b3:5c:
                    4b:9c:f8:55:36:36:f6:6e:11:22:94:c0:cb:ed:38:
                    2f:80:bb:b8:f8:81:fc:21:7c:a8:c3:75:bc:62:fe:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:3E:06:C7:3D:5D:D5:B2:7A:29:8B:9F:B5:23:C8:EB:40:8D:EE
            X509v3 Authority Key Identifier:
                keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9d:10:17:26:e6:40:34:2a:db:76:f1:fc:bb:62:74:01:e3:
         1e:19:d1:bd:ad:90:e8:f4:62:c9:76:75:4b:ac:b1:9c:ae:14:
         d3:5b:26:0e:02:a1:7d:7c:f8:9d:a3:f6:17:2d:12:75:3e:75:
         82:05:43:54:d3:c2:d7:f9:6f:db:a7:72:2e:f5:85:fc:34:25:
         8a:f3:ed:3f:95:99:ed:2d:f6:e1:ff:9b:21:cb:ac:8f:c7:1e:
         7f:89:8a:bb:ad:0a:04:0c:63:86:7b:02:de:75:3d:73:ce:88:
         7d:b2:2d:b5:8b:14:f2:58:ba:27:ab:01:39:89:1f:54:d1:f7:
         61:d1:cb:4f:36:5e:ec:48:a0:da:bf:02:c1:4e:f4:a8:e8:6a:
         e1:b7:b8:44:3d:fe:3c:de:1e:35:a7:ba:07:4f:ef:99:41:45:
         20:85:e7:45:11:cf:06:59:04:47:36:70:81:ec:82:76:b1:e7:
         d1:6d:c7:11:1a:a4:0a:b1:3d:e3:05:e0:a2:f5:30:a4:0b:da:
         12:6c:1a:2f:74:52:9b:a1:9c:17:52:e3:54:8a:30:9f:51:a1:
         d0:08:9e:1a:dc:91:92:80:be:d5:4a:08:db:98:ae:cc:0e:97:
         b2:5f:53:5d:2f:11:bf:5b:0b:95:73:df:af:57:8e:ac:d6:b2:
         a9:5d:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:25:17 2026 by rpki-client