Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File:                     mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier:          JhHa1fW2QncliIysB6UiDK/yBse71o1LOdh0Mk36D0o=
Subject key identifier:   13:E9:5D:06:EB:24:82:AE:74:85:C4:6F:72:6B:8C:AE:77:D5:89:B5
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer:       /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial:       019FA072BF636C6A3AF64F48754F7C683CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number:          05F2
Signing time:             Sun 26 Jul 2026 22:01:42 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:42 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:42 +0000
Files and hashes:         1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
                          2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: yd2w5JKR9w0VRGhj9ACj1wxrMEL0mEait1Yt9BE5h7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:bf:63:6c:6a:3a:f6:4f:48:75:4f:7c:68:3c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
        Validity
            Not Before: Jul 26 22:01:42 2026 GMT
            Not After : Jul 27 22:01:42 2026 GMT
        Subject: CN=13e95d06eb2482ae7485c46f726b8cae77d589b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:2f:8f:4e:67:ab:8b:91:86:b9:7e:2c:c0:
                    af:e9:03:1c:68:4a:62:ed:ce:ec:8d:56:b9:ff:6a:
                    23:f8:29:05:56:82:ef:07:ba:b9:4e:ee:54:01:27:
                    48:4e:19:be:77:23:2c:9f:cd:f7:0a:d8:83:15:75:
                    1d:e3:8f:9d:d3:f4:d6:17:bd:83:ad:1e:ec:64:e3:
                    a7:92:28:fd:45:04:7d:a8:3c:74:ae:a2:b2:e1:28:
                    50:3b:1b:f7:21:59:56:b9:bc:a1:0a:10:62:af:bb:
                    07:70:fd:00:6a:52:d8:5b:2e:96:41:84:ea:91:91:
                    99:27:5b:40:00:e0:c0:ce:d4:06:96:4c:96:f3:83:
                    3c:c2:f9:50:0a:1d:f5:1f:8f:44:ed:f4:24:e6:e0:
                    8d:92:34:b0:c6:0b:ee:83:a9:08:b5:6f:7f:38:6b:
                    44:ee:d3:ca:50:75:34:c9:b7:fd:09:5e:01:3d:50:
                    4e:66:a7:df:81:88:77:ce:28:22:eb:02:e2:cc:33:
                    c5:72:6c:d2:8e:82:7f:31:7c:68:08:75:d6:b5:a2:
                    95:94:a2:42:55:c4:db:cb:fc:61:3e:f0:e2:e0:52:
                    42:0a:a7:d8:75:9e:64:15:77:ba:83:f0:ce:d4:cb:
                    e6:9e:cd:57:4d:2e:13:80:9a:70:27:5f:b2:fe:b9:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E9:5D:06:EB:24:82:AE:74:85:C4:6F:72:6B:8C:AE:77:D5:89:B5
            X509v3 Authority Key Identifier:
                keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c5:51:61:4a:48:cb:6e:48:38:38:73:0b:f2:39:b6:ca:c4:
         54:08:1b:d1:4e:6b:69:e3:34:74:04:ab:cd:3a:b3:00:fc:f7:
         38:87:0d:00:33:12:57:11:a6:eb:ba:54:8a:b8:da:5b:d0:51:
         36:f5:9b:0f:44:fb:06:0d:c8:72:d3:39:d5:2b:d3:f5:5e:c6:
         d4:cb:a7:d4:d5:eb:66:95:7c:39:70:20:57:25:ab:97:37:ad:
         ff:b1:4e:bf:b9:cb:fc:22:01:de:e3:6c:42:02:17:60:ac:2e:
         87:49:1f:ba:36:27:e1:1c:58:06:76:89:23:5d:32:3c:27:54:
         7b:6c:fb:8a:b3:1c:78:59:39:1f:5a:a1:3f:e4:b0:d7:ae:89:
         74:e1:fb:86:37:e8:2a:6c:d5:fb:79:ca:2e:2e:28:de:b0:d2:
         8a:9c:5e:cc:2c:da:a6:7d:c1:4b:a0:bf:e2:1f:d5:d3:29:9e:
         59:b3:10:ba:6e:8f:78:71:bf:3f:fd:46:33:1b:45:b9:47:12:
         0c:90:32:e3:8e:9e:6d:fe:0f:37:a6:df:93:0e:36:47:79:25:
         32:2f:16:f6:13:89:41:86:34:f5:ab:22:01:02:19:8c:15:f5:
         82:47:6f:e9:a8:51:8f:81:2c:32:2d:59:7b:d3:c5:15:6c:76:
         30:a9:1e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:21:51 2026 by rpki-client