Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File:                     zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier:          Q1QtgXE5Nr4gxOKmMalCpch+9EeacSZzN4CTa50G6Sc=
Subject key identifier:   0E:4A:8D:7B:D6:F7:60:3C:60:3B:35:67:86:D3:9D:7F:60:D8:A9:FD
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       019FA03A9FAAC2E91BE2DDE5FEA14747008E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number:          19D6
Signing time:             Sun 26 Jul 2026 21:00:24 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:24 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:24 +0000
Files and hashes:         1: LyD-byAqHkCId2X413D2X1Z2qHU.roa (hash: X3jzbRpGbv2O4J/HEOEG5KsHYAnqovf/BVNCZIBzGEc=)
                          2: NciFosUTZQjh8wuLeV_tqda00bY.roa (hash: zOA4Wef7GnD51/XhXMPfbgxKu5akVCbUSUyI9R7xcbI=)
                          3: Y8fFR3SR2JFo5SN-QHUy1g5AXnQ.roa (hash: rcBm3Sru1/9gzs1C6m5Kf+QWRSXdM9HmkBd/Rq/ayVk=)
                          4: gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa (hash: HeuNS/isx5Ir7rrhD9rHIdV2SzMR1qCm5KBXOXdXtqU=)
                          5: np_2_SKmGfgCwircPk4_KpAxetI.roa (hash: EXS4ryAU66idTchghJIvxISW9h87H73QFGZzRNJ0+zI=)
                          6: uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa (hash: xSRJcjd0eLR5MNbT/qQW4MnOH8NKSKy8VGBBsMm1Rj4=)
                          7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: hKXwjekPIXS07CKpAY2yhoZMYn8yqc4CwRHoTdoTehk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:9f:aa:c2:e9:1b:e2:dd:e5:fe:a1:47:47:00:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Jul 26 21:00:24 2026 GMT
            Not After : Jul 27 21:00:24 2026 GMT
        Subject: CN=0e4a8d7bd6f7603c603b356786d39d7f60d8a9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:2c:42:19:cf:0b:c7:2f:d2:f7:92:30:5a:
                    ee:fa:e2:5e:d6:95:7a:e2:49:68:83:8c:69:2d:e4:
                    5d:3d:0f:ad:b4:d5:0d:2e:6f:c6:2d:dc:c6:c4:e9:
                    69:50:e7:a3:f0:94:c6:75:1a:a4:50:d5:82:fe:09:
                    8c:04:e4:99:a3:aa:70:2d:d1:b7:e0:a0:c6:d8:12:
                    b4:49:1e:cc:fa:94:58:de:1f:c3:7f:fa:66:7a:b3:
                    fb:6f:7d:20:79:eb:3a:c3:a4:e0:06:92:e4:64:d0:
                    5d:47:6c:c1:b2:a3:4e:d5:01:f6:ce:d2:63:ac:c9:
                    4e:b2:bf:5f:e1:cc:1d:e6:13:e5:19:90:18:b4:65:
                    0e:e0:92:1e:32:ae:5e:0d:d5:80:e0:9f:84:00:4e:
                    e5:87:67:81:dc:7c:38:72:0a:27:4f:6e:ac:9b:40:
                    c0:91:6f:d5:cb:09:02:79:7c:37:51:a8:e9:d6:4e:
                    cb:68:51:5e:c8:c6:77:fd:1f:43:b7:e8:a4:9c:a6:
                    e8:fb:4f:e7:02:8f:45:84:d9:cb:96:85:61:1d:41:
                    73:3d:45:c6:6b:55:7a:5e:c8:c1:0c:96:6f:57:27:
                    43:20:42:3c:35:2d:98:2d:ca:4b:7f:14:21:2b:66:
                    a4:96:d3:ff:aa:c4:b1:54:53:30:c7:8e:3c:ca:db:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4A:8D:7B:D6:F7:60:3C:60:3B:35:67:86:D3:9D:7F:60:D8:A9:FD
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:41:57:fd:ce:7a:bb:cc:84:a7:84:cb:18:36:a0:1b:a3:9e:
         d7:1b:a2:65:a9:d5:8f:15:d4:66:dd:7d:33:7c:6d:1d:59:08:
         b1:89:ea:27:4a:65:4d:08:fd:51:79:bd:ac:cb:5b:9c:bf:54:
         7d:20:02:32:e5:2f:5c:28:78:b5:80:36:13:93:3f:07:be:8b:
         91:38:d6:98:9b:f0:0d:16:4d:04:fb:32:f6:47:25:83:f2:25:
         53:07:46:b6:f2:9b:5b:80:74:54:a6:ea:e0:66:80:ce:3e:ea:
         44:08:19:fd:3b:ff:24:7c:d7:02:0d:5d:6d:8c:e7:66:0a:a7:
         f4:8a:03:b1:5f:a4:86:89:8c:a2:14:de:54:32:9e:9d:81:81:
         67:df:1b:8c:aa:26:13:af:eb:a0:3e:ba:80:96:4c:3b:17:5d:
         bf:ad:57:af:b5:58:9a:f9:b6:aa:50:f8:09:69:4b:dd:27:5e:
         10:30:25:d3:82:1c:93:e3:26:f4:b0:ec:da:29:e1:36:ea:96:
         cf:6f:69:ef:b5:5d:81:89:2b:e5:8f:06:3b:6d:aa:6c:40:c5:
         8e:c5:be:5b:3f:5d:69:89:33:8f:88:70:c3:bc:95:a6:e0:13:
         a7:d1:cf:57:5f:95:2c:69:50:91:51:d6:b0:70:e4:8f:47:95:
         8f:40:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:22:17 2026 by rpki-client