Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          HxqY0J+xAe8Jlevm+50q+qEFeQimbi2JhU8ODLTm3eQ=
Subject key identifier:   F6:32:92:F7:33:3B:D5:06:4D:CF:AB:61:40:8E:8A:46:8B:B0:2F:AF
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       019F1944439600BC828DE1BA28C6298824C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          1989
Signing time:             Tue 30 Jun 2026 16:02:11 +0000
Manifest this update:     Tue 30 Jun 2026 16:02:11 +0000
Manifest next update:     Wed 01 Jul 2026 16:02:11 +0000
Files and hashes:         1: dyIfoHvYEfN77rehdk6Hr_OLRAE.roa (hash: xcmHvUmEQ2Xk7WqYhP6N4oZ9W7Pc6AjsjVYgGRTZexw=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: tPk2fQCddePhn407x1YjDzhHKlD2Tvabd7dk7foioKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 16:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:43:96:00:bc:82:8d:e1:ba:28:c6:29:88:24:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: Jun 30 16:02:11 2026 GMT
            Not After : Jul  1 16:02:11 2026 GMT
        Subject: CN=f63292f7333bd5064dcfab61408e8a468bb02faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:ab:bc:ac:0d:03:d4:4f:37:6d:a8:7b:49:
                    e6:31:4b:15:65:2a:ed:f3:a7:4e:95:ed:d3:d4:4b:
                    8e:bc:72:a1:f2:15:db:e7:03:78:ba:8f:7f:0a:f0:
                    4f:ac:07:72:49:90:33:75:89:24:73:9f:e7:a6:eb:
                    66:63:92:4e:44:a9:f8:26:0e:4f:e3:fe:38:69:06:
                    c6:6d:5f:ff:94:e7:63:2a:c8:02:c7:3a:2f:58:8d:
                    d9:ce:a8:4c:15:00:cb:46:3f:e0:f4:31:b1:d7:f5:
                    26:46:61:6e:ce:94:fb:6f:69:c0:ed:30:e4:a3:b5:
                    b7:4e:bc:f5:c3:98:89:fd:0c:1e:50:98:e6:ec:2c:
                    57:06:9c:0c:94:e7:66:1e:9a:b1:5d:08:37:30:a4:
                    4d:59:f4:3f:a1:37:d6:ae:17:28:b1:7e:44:fc:21:
                    7e:25:42:c2:c3:e9:42:3c:10:bc:69:14:7c:89:89:
                    cd:4f:ee:bc:51:6c:4c:62:13:39:04:2c:fb:af:54:
                    6d:63:08:b0:09:95:0f:bf:f9:c4:bf:54:c6:16:3d:
                    f1:84:51:6b:0b:1a:3b:9d:30:27:ff:82:dc:92:81:
                    b4:1f:b9:13:91:89:0f:4a:e7:d2:30:4d:03:bc:33:
                    0e:c1:63:9c:79:25:70:79:1a:42:2e:7d:68:16:4d:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:32:92:F7:33:3B:D5:06:4D:CF:AB:61:40:8E:8A:46:8B:B0:2F:AF
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7a:51:09:cb:53:f6:b9:0e:29:ff:a0:70:ff:5e:bb:1d:1b:
         ff:d6:2a:43:0c:be:a3:3c:7a:3c:38:0e:4e:af:39:6f:e8:d1:
         42:e5:b5:03:8f:ba:ae:68:19:b7:7c:c2:43:00:66:ac:77:2c:
         7e:5a:32:97:7c:71:d8:62:e6:86:93:1c:04:02:8b:10:39:84:
         4b:e8:a1:9b:37:49:d0:9d:00:67:47:7a:aa:17:c4:75:0b:84:
         27:de:18:f0:87:40:bd:e8:96:99:f7:ab:0c:cd:b5:b3:3e:b7:
         a5:9e:91:ac:c6:25:3e:57:20:2e:6a:28:64:c0:29:6b:dd:18:
         8a:dc:96:75:31:ed:fa:5a:15:29:c8:74:71:08:c7:6a:a3:28:
         4b:54:08:70:ad:57:8b:b5:f4:75:73:7d:49:7f:46:85:fd:8f:
         ac:33:51:fe:2d:83:5b:f1:03:0e:83:cc:0f:38:b4:d0:cb:67:
         9c:91:d8:a8:77:bb:4b:fb:f5:9e:6c:67:2c:30:90:9f:06:55:
         09:bf:51:b9:98:e4:83:41:7c:89:75:45:94:46:cc:fa:a3:40:
         22:5c:76:e9:ea:e2:9f:6b:5f:e6:30:92:68:8b:8b:b3:d8:89:
         c9:98:d7:78:f9:3e:26:19:dd:03:7e:83:4b:a2:fd:7e:8e:70:
         13:7e:e2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZREOWALyCjeG6KMYpiCTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMWM1YmVhNTk1ZDg5MGYyMTMwN2MxYjMzNjUxOWZiMGVk
YzA4OWMwHhcNMjYwNjMwMTYwMjExWhcNMjYwNzAxMTYwMjExWjAzMTEwLwYDVQQD
EyhmNjMyOTJmNzMzM2JkNTA2NGRjZmFiNjE0MDhlOGE0NjhiYjAyZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSmrvKwNA9RPN22oe0nmMUsVZSrt
86dOle3T1EuOvHKh8hXb5wN4uo9/CvBPrAdySZAzdYkkc5/nputmY5JORKn4Jg5P
4/44aQbGbV//lOdjKsgCxzovWI3ZzqhMFQDLRj/g9DGx1/UmRmFuzpT7b2nA7TDk
o7W3Trz1w5iJ/QweUJjm7CxXBpwMlOdmHpqxXQg3MKRNWfQ/oTfWrhcosX5E/CF+
JULCw+lCPBC8aRR8iYnNT+68UWxMYhM5BCz7r1RtYwiwCZUPv/nEv1TGFj3xhFFr
Cxo7nTAn/4LckoG0H7kTkYkPSufSME0DvDMOwWOceSVweRpCLn1oFk1EzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYykvczO9UGTc+rYUCOikaLsC+vMB8GA1UdIwQY
MBaAFM4cW+pZXYkPITB8GzNlGfsO3AicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMt
MDViMTVmNWVlOGMzLzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMtMDViMTVmNWVlOGMz
LzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3pRCctT
9rkOKf+gcP9eux0b/9YqQwy+ozx6PDgOTq85b+jRQuW1A4+6rmgZt3zCQwBmrHcs
floyl3xx2GLmhpMcBAKLEDmES+ihmzdJ0J0AZ0d6qhfEdQuEJ94Y8IdAveiWmfer
DM21sz63pZ6RrMYlPlcgLmooZMApa90YityWdTHt+loVKch0cQjHaqMoS1QIcK1X
i7X0dXN9SX9Ghf2PrDNR/i2DW/EDDoPMDzi00MtnnJHYqHe7S/v1nmxnLDCQnwZV
Cb9RuZjkg0F8iXVFlEbM+qNAIlx26erin2tf5jCSaIuLs9iJyZjXePk+JhndA36D
S6L9fo5wE37iPA==
-----END CERTIFICATE-----
Generated at Wed Jul 1 02:40:06 2026 by rpki-client