Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          egzEmz56KawUEv1ZUJ34lcBc5bRxOWHanefxPX2hS0o=
Subject key identifier:   FC:98:0B:6D:54:17:11:B3:60:87:D9:46:EF:C8:60:1D:90:14:D6:96
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       019FA33C5BA308F0D9535E3F4CDC9F83718E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          090B
Signing time:             Mon 27 Jul 2026 11:01:09 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:09 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:09 +0000
Files and hashes:         1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
                          2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: 4WDPZgBHvi1otBy5NwBSckJD8Wl0zIDtiT+atrBlr0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:5b:a3:08:f0:d9:53:5e:3f:4c:dc:9f:83:71:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Jul 27 11:01:09 2026 GMT
            Not After : Jul 28 11:01:09 2026 GMT
        Subject: CN=fc980b6d541711b36087d946efc8601d9014d696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:0e:ae:7c:23:77:f2:c8:13:7e:c7:a3:72:
                    64:41:32:d5:eb:4f:95:2f:14:8e:7f:40:7a:dc:af:
                    34:cf:96:b4:6f:1e:cb:36:3e:af:f2:13:78:04:90:
                    c2:31:bb:f7:25:db:5a:53:38:5b:98:40:33:1e:ae:
                    1f:a4:bd:e4:97:d6:cf:a2:1e:53:c0:6b:04:49:c6:
                    b2:f7:bd:7f:51:11:01:03:5f:6f:e4:7e:53:5b:a8:
                    99:9c:4a:d4:db:e3:da:a3:f7:3a:ba:e2:b6:08:cb:
                    f6:4e:92:0c:09:2d:75:88:67:ba:bb:90:25:0b:63:
                    a2:73:b5:73:e1:f9:de:09:ef:8c:eb:1c:d4:fc:ca:
                    a3:6d:3c:22:9b:e4:d4:ff:a9:53:e5:8b:7d:2c:3e:
                    4a:ab:cb:88:82:06:51:db:ad:c6:7d:7e:71:f2:db:
                    df:6c:1e:dd:d3:b3:8a:c6:73:78:05:82:37:5c:34:
                    35:71:a1:3c:ff:4b:a1:82:0f:16:8c:47:f4:35:b7:
                    9e:ae:3a:ed:0b:ab:da:1f:c6:9d:f2:80:7f:5d:24:
                    97:cb:57:54:2c:1f:e9:50:08:bc:82:0d:a9:10:56:
                    e0:25:d1:45:32:65:71:8e:db:24:94:1e:e9:c7:68:
                    50:0c:18:c1:b9:61:75:02:41:20:40:2a:6d:e4:49:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:0B:6D:54:17:11:B3:60:87:D9:46:EF:C8:60:1D:90:14:D6:96
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d2:17:c8:5a:6a:73:3c:12:f9:34:8f:51:cb:2d:9d:b9:31:
         21:6d:cb:87:25:9c:b1:0b:9c:8a:e8:f7:fd:9d:f9:f1:3a:01:
         04:f6:13:c3:a1:9c:8a:5a:24:72:0b:94:21:9c:18:f0:9d:26:
         70:00:ff:8d:8c:09:19:aa:27:a0:75:89:8b:d1:1a:72:0c:de:
         8c:db:0f:0e:df:a0:ea:08:21:4f:92:a4:fb:f5:13:13:3d:e8:
         65:5c:73:52:38:45:fe:d3:1b:e8:cc:20:dc:64:5f:bb:7c:75:
         51:7e:c0:03:69:4f:52:42:ed:4b:4f:3b:7c:3e:a2:f0:86:b7:
         12:b8:fe:6d:84:de:c5:b9:96:19:2c:93:d3:3a:47:96:a4:cc:
         7d:2c:4f:d5:4c:61:58:90:6a:91:b0:13:25:e6:26:54:64:d0:
         14:ce:52:31:0c:95:b1:f3:2b:63:fc:e1:e6:15:04:14:ec:e8:
         fa:de:82:44:d8:69:35:a7:f6:73:db:10:a0:0a:f6:b5:3c:28:
         9f:71:50:7d:43:81:ac:74:b3:32:06:fb:c5:cf:2f:59:a5:0f:
         75:b9:69:fa:4b:17:18:ff:45:9a:81:87:40:6a:51:3b:df:41:
         45:be:74:1e:c0:a0:76:37:2d:e0:52:76:d4:69:70:1c:bb:58:
         20:4a:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:18:36 2026 by rpki-client