Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          UrNiqE97eWtNwTtbURf5p9KgFEw33dfm9mlIfowLRsQ=
Subject key identifier:   B2:DB:58:4C:63:64:D9:66:6D:0B:E6:B2:52:F1:38:48:7C:4C:AE:43
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019F84561E536B32392380357FFAAEC4EBDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          0A5C
Signing time:             Tue 21 Jul 2026 11:01:04 +0000
Manifest this update:     Tue 21 Jul 2026 11:01:04 +0000
Manifest next update:     Wed 22 Jul 2026 11:01:04 +0000
Files and hashes:         1: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (hash: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU=)
                          2: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (hash: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA=)
                          3: NC1kNBCi5IA0F53iafyWv28tEdg.roa (hash: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo=)
                          4: _C1dxAYzgojRgjfg932a5o53DHI.roa (hash: MWoWdwypjbLGhZ5K85xQtJNC5yRCwOAiowUMTjpjyv8=)
                          5: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (hash: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: 2QxB1CTWi4E06ggi7tgOtAZNYBArZ7URvLixcsj5k8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:56:1e:53:6b:32:39:23:80:35:7f:fa:ae:c4:eb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Jul 21 11:01:04 2026 GMT
            Not After : Jul 22 11:01:04 2026 GMT
        Subject: CN=b2db584c6364d9666d0be6b252f138487c4cae43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:71:e5:b7:38:16:1d:a9:0f:43:74:56:98:
                    e7:22:c7:8c:50:df:85:82:ed:7a:79:e5:8f:2b:d1:
                    9a:69:6f:d7:c0:46:3d:e8:6d:51:b4:65:32:64:a2:
                    6f:f4:ab:32:b0:16:ce:3f:4f:15:5c:9c:be:6a:55:
                    1d:63:df:6c:b8:65:3d:e0:7d:81:6a:60:a4:83:6b:
                    05:8f:ef:c7:5d:9e:88:67:a1:8f:a8:19:d0:2c:7b:
                    8b:a3:12:f0:9c:1c:53:32:d6:64:c2:5e:bc:4a:14:
                    73:d0:05:49:9b:11:49:1e:44:fd:78:3f:be:da:23:
                    00:be:5a:73:62:71:c5:cd:f7:00:7c:b9:4b:8d:76:
                    2d:71:9d:d7:2c:01:43:05:cb:56:bf:0a:25:19:f9:
                    d3:47:0e:78:7d:f4:83:ba:36:a5:8f:49:ca:85:c3:
                    75:35:6f:dd:72:3a:38:a1:bf:57:f0:7b:93:09:be:
                    3c:7c:17:5f:e1:d5:b9:c0:13:58:8f:12:28:03:2f:
                    e0:5b:81:72:ad:75:12:88:e6:68:46:1f:e4:8a:59:
                    74:f8:62:99:89:93:89:07:dd:7d:70:69:5f:4a:a3:
                    a0:40:64:43:c3:71:47:2f:e8:0d:9e:0a:45:96:bd:
                    08:6e:6c:6f:9d:cf:96:ba:41:77:83:33:2c:c4:fb:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DB:58:4C:63:64:D9:66:6D:0B:E6:B2:52:F1:38:48:7C:4C:AE:43
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:21:12:71:e0:0e:fc:15:f0:fe:8f:17:da:da:a2:c0:7b:
         0c:6e:93:25:03:2e:1a:ee:e9:cc:3a:81:7c:87:0c:79:b1:f5:
         50:70:eb:32:6a:ed:b0:f3:15:77:0b:7f:70:6d:3b:50:d5:62:
         35:f1:98:e2:a7:5f:73:18:3e:4b:e8:55:2d:da:26:83:ee:9d:
         d2:e6:03:4f:37:cc:3d:b7:dc:e5:c8:c9:ff:84:9a:d5:e8:60:
         16:f6:f8:c2:54:e1:94:d4:e1:99:26:af:28:5b:80:93:81:d9:
         59:bf:c0:ee:e3:ec:00:cc:7c:62:fb:8a:15:11:6c:bc:2c:0b:
         11:95:92:d9:e9:fc:46:72:44:df:9b:6b:61:16:6f:b8:bf:72:
         23:fb:24:ef:bd:5d:b9:40:88:87:d5:8b:83:ed:7b:f2:ce:a4:
         d3:89:8d:ee:48:da:15:60:78:6b:bd:fa:80:c4:29:46:da:ba:
         95:d2:17:ad:6a:7b:1b:b2:a7:b5:e4:0a:9a:e8:50:65:73:54:
         51:2d:35:9f:53:04:68:f1:33:41:cf:53:99:20:6e:91:9b:a2:
         c5:a9:4f:1e:d0:cc:5d:9a:18:d8:c8:35:1f:24:5a:78:89:87:
         0f:78:58:40:30:fe:0c:bd:1b:37:90:63:5b:65:e4:cb:fe:d6:
         bf:e2:20:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVh5TazI5I4A1f/quxOvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjYwNzIxMTEwMTA0WhcNMjYwNzIyMTEwMTA0WjAzMTEwLwYDVQQD
EyhiMmRiNTg0YzYzNjRkOTY2NmQwYmU2YjI1MmYxMzg0ODdjNGNhZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjBx5bc4Fh2pD0N0VpjnIseMUN+F
gu16eeWPK9GaaW/XwEY96G1RtGUyZKJv9KsysBbOP08VXJy+alUdY99suGU94H2B
amCkg2sFj+/HXZ6IZ6GPqBnQLHuLoxLwnBxTMtZkwl68ShRz0AVJmxFJHkT9eD++
2iMAvlpzYnHFzfcAfLlLjXYtcZ3XLAFDBctWvwolGfnTRw54ffSDujalj0nKhcN1
NW/dcjo4ob9X8HuTCb48fBdf4dW5wBNYjxIoAy/gW4FyrXUSiOZoRh/kill0+GKZ
iZOJB919cGlfSqOgQGRDw3FHL+gNngpFlr0Ibmxvnc+WukF3gzMsxPtxmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLbWExjZNlmbQvmslLxOEh8TK5DMB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocchEnHg
DvwV8P6PF9raosB7DG6TJQMuGu7pzDqBfIcMebH1UHDrMmrtsPMVdwt/cG07UNVi
NfGY4qdfcxg+S+hVLdomg+6d0uYDTzfMPbfc5cjJ/4Sa1ehgFvb4wlThlNThmSav
KFuAk4HZWb/A7uPsAMx8YvuKFRFsvCwLEZWS2en8RnJE35trYRZvuL9yI/sk771d
uUCIh9WLg+178s6k04mN7kjaFWB4a736gMQpRtq6ldIXrWp7G7KnteQKmuhQZXNU
US01n1MEaPEzQc9TmSBukZuixalPHtDMXZoY2Mg1HyRaeImHD3hYQDD+DL0bN5Bj
W2Xky/7Wv+Ig3g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:19:50 2026 by rpki-client