Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          IjZy1mQzqu/QohOjeweIS2poQ87wW2WhPLGpsSP0n00=
Subject key identifier:   49:4E:F8:1F:F0:1C:24:B0:FE:FA:02:99:2A:70:1B:D3:56:11:E4:FC
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       019F58C7118A7239CB433BB915DD565A85D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          07E5
Signing time:             Mon 13 Jul 2026 00:01:08 +0000
Manifest this update:     Mon 13 Jul 2026 00:01:08 +0000
Manifest next update:     Tue 14 Jul 2026 00:01:08 +0000
Files and hashes:         1: 8vgRQVd50Rm3giCvTHM9dYeprUI.roa (hash: ZqKjZ1U3B0KeN2GviCp+mRJZ8NNTVw+srqTGM9NBsTk=)
                          2: GOVhumxEPoL4neQZjjckJeN-KNI.roa (hash: z0Kl7cRQ4EqgIEyAr3hQ9onG9NvsLkz7qIrC+ywOwnQ=)
                          3: JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa (hash: mtH7HEjcUoSWBPqGTrN+mDrgbsMUT6MnlsAyD0vzcjQ=)
                          4: MvgVDAqPSE3okj5m3PcFfzXBk1w.roa (hash: WTJgxLOGGaH3LR8ATwMwf+dORKDlRpVth28vAu1Woxg=)
                          5: epSW8Zh20G3Tyl52-dTL3yz-KVs.roa (hash: q6R7O5ajy86FRw9ExVqpE0uX2CxkIe39LhaQU39GNTs=)
                          6: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: CxQUMU3AmC1IWHj+Fa5ttoNuizeH3fwCX3AN5kSHei0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:58:c7:11:8a:72:39:cb:43:3b:b9:15:dd:56:5a:85:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Jul 13 00:01:08 2026 GMT
            Not After : Jul 14 00:01:08 2026 GMT
        Subject: CN=494ef81ff01c24b0fefa02992a701bd35611e4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:04:cc:70:77:7c:76:a8:fb:6b:c8:3c:7e:
                    24:ee:f7:0c:90:1c:be:fd:8e:7a:a4:32:04:26:b9:
                    bf:6b:c7:3e:cf:be:d2:d9:43:8a:b2:3f:40:76:09:
                    df:f8:c1:02:2f:d1:f6:c1:7e:81:60:c6:60:75:da:
                    18:af:a4:46:56:cc:ac:78:ba:c6:85:2c:90:86:91:
                    cb:cb:40:c1:a3:6d:d6:81:68:b3:52:e3:5a:a3:99:
                    b6:c3:0c:dc:6c:2b:da:cc:fb:ea:92:6d:57:60:7c:
                    0a:3a:58:37:01:15:62:49:0e:78:a5:e4:4a:62:1d:
                    f3:06:3a:76:d8:46:e6:a7:67:38:a5:07:59:00:b9:
                    e6:09:b8:f7:f1:74:45:37:3d:e7:2b:77:c0:f0:de:
                    76:60:dd:64:e0:d1:7e:e9:fb:0c:1c:67:e7:63:f3:
                    d0:f9:64:3d:13:80:81:7b:17:26:fb:38:62:3f:44:
                    81:60:58:29:cd:2e:57:22:97:20:e8:d4:28:17:86:
                    eb:72:4a:ee:9d:6a:9e:81:16:4e:42:43:fe:02:35:
                    46:21:90:d1:24:97:2c:ef:52:8c:89:e4:bd:72:3a:
                    ac:80:19:5f:2d:56:24:c8:6c:3d:84:2d:72:a1:50:
                    fe:aa:d4:02:cf:22:05:cd:56:38:89:60:67:a6:5b:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4E:F8:1F:F0:1C:24:B0:FE:FA:02:99:2A:70:1B:D3:56:11:E4:FC
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:70:d0:5a:dc:7b:81:a4:b0:cc:5a:00:35:ea:ab:5c:6e:6e:
         1a:53:d3:19:5a:c9:a5:5c:63:16:fe:2c:96:45:69:2d:a4:4f:
         bf:5d:29:4e:d7:09:c8:e0:68:04:9e:cd:66:7c:73:2e:d0:99:
         5c:36:05:6a:8a:59:c4:4a:62:de:02:64:13:1b:e2:2e:57:ce:
         d1:d3:f6:92:e3:24:1e:40:e6:d4:06:ba:15:51:28:02:e4:4b:
         ef:85:ed:78:0e:22:2e:02:50:45:32:1f:83:14:dc:74:f7:b5:
         9a:c9:ae:33:4a:13:66:58:aa:d9:74:60:3f:3c:07:26:07:6c:
         68:3e:fb:d4:50:0e:76:59:3e:e7:18:a2:70:c1:ff:04:e2:d7:
         dc:02:82:02:b0:70:a3:ab:4f:22:7d:e8:46:63:ed:d5:e3:e4:
         3e:5e:be:a4:31:fd:3e:99:e9:0f:63:fa:99:18:20:7b:66:dd:
         75:d8:ea:e5:82:b1:b7:dc:75:f9:f7:9a:fb:50:77:7a:6b:9e:
         2b:c2:d9:df:a6:83:90:ee:13:2a:cd:25:91:9d:68:ae:b6:0d:
         9a:5c:03:89:c0:41:db:86:af:28:a0:62:3b:17:9f:1b:97:56:
         93:6f:99:d8:d8:84:66:21:e4:a5:a3:f9:4a:de:75:71:7f:5f:
         37:62:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:22:19 2026 by rpki-client