Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          el59Bo6fRb3mBvOWlBae88BGASa3oXdNFXe5YtFkm2E=
Subject key identifier:   48:8E:59:2A:69:23:19:21:3C:42:67:80:24:47:01:F4:CB:4E:DD:6D
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       019F860D164BEA6393EE81006B81D7855180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          0F5D
Signing time:             Tue 21 Jul 2026 19:00:32 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:32 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:32 +0000
Files and hashes:         1: 06k5D3ZBmEUBxIHBnu9co1Dnn_Q.roa (hash: 23+3ygARGKHv+NTUhNap77ASbjdhDMj7SUzDTySx8Mk=)
                          2: 2tOQcNqia9FY_EgjlzJvmLqEZvk.roa (hash: vCVW24gm0Il+L7GD5QhbLKqrNdBKimfTZajv5G9G6e0=)
                          3: AXgiXKGJ_GI28CfbDTbrhhKV71A.roa (hash: Nt0Y8chc5qRx7gXH46hyD0eSELR+V1CAAH5JbXj+q9k=)
                          4: N-M1_Gcs5nz1z-RZbD5F2Zwy0ik.roa (hash: Eebmmc2rhKXOb9UxpkjpYhhaoAIhvKS+3sRa+Rf9xxc=)
                          5: S7xMn2WZ6tpb12ZzK2bfHpgj_jQ.roa (hash: a6xOII9rFzlXhVP9cTBhXZN2z2bq0zGYQLqbGgEi7x8=)
                          6: UnAAO5LZUpGqAlAFH0cTVQdXrPQ.roa (hash: +0fvTCTz6t0CVUgBJlyimNyAqahKNROglBmjcNIj20s=)
                          7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: XW4pSMCJJVCLr2q2MCQc0jPKdvY9jzkDLXA1/YKGT3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0d:16:4b:ea:63:93:ee:81:00:6b:81:d7:85:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Jul 21 19:00:32 2026 GMT
            Not After : Jul 22 19:00:32 2026 GMT
        Subject: CN=488e592a692319213c426780244701f4cb4edd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:07:ef:43:26:dc:4a:31:f2:11:e8:4d:b9:
                    c4:0a:2c:d4:26:66:2a:de:e1:9a:a3:84:a7:8e:1e:
                    22:60:e6:4e:d1:92:2b:d3:50:be:86:b3:97:f3:bf:
                    69:c7:8a:e5:13:e0:6e:67:e2:c9:8d:de:d6:3c:d4:
                    a5:a9:d0:14:5b:c7:8e:6a:3a:fe:7c:e6:d8:e1:07:
                    9a:79:0c:62:8a:1f:c4:89:2d:18:d9:c0:fa:74:3f:
                    a5:e0:73:63:9a:b8:4b:b4:e7:7c:be:47:9d:95:5d:
                    a2:f2:39:69:f3:24:38:fd:2e:f6:88:cf:42:3f:f8:
                    33:2d:05:24:aa:be:3f:17:74:84:0b:59:34:74:38:
                    89:20:25:c2:f8:5e:b9:e7:bb:86:c6:97:5e:86:d7:
                    71:ad:c2:9c:85:a9:22:64:23:24:7f:09:45:6e:27:
                    4a:9a:9e:c6:a5:04:00:b6:d5:9f:b3:5f:0d:89:44:
                    b0:1f:6b:1d:37:d3:22:74:9a:85:6e:37:8e:30:2d:
                    f7:e9:35:6b:2f:59:7f:78:af:86:93:43:e0:27:41:
                    87:f4:02:d5:d0:3a:84:25:be:2c:6d:62:57:c4:87:
                    66:41:6e:b6:29:49:93:cd:ec:83:73:02:88:d5:04:
                    d9:37:ff:bc:f4:2a:95:65:f3:f3:b1:ef:71:5b:b0:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8E:59:2A:69:23:19:21:3C:42:67:80:24:47:01:F4:CB:4E:DD:6D
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:9f:47:b9:f6:36:e0:e4:23:17:e8:89:79:fe:36:e6:51:
         1e:d8:5c:39:48:81:7d:6e:cd:68:2c:a4:eb:01:e9:0a:93:47:
         10:0b:fd:1d:7e:dd:9a:ab:dd:a7:2d:6b:4c:dc:32:17:a9:03:
         0f:df:a3:ee:e9:82:a6:5d:d1:84:b5:d7:1b:c3:9f:eb:96:0e:
         6a:be:68:a9:50:a9:79:79:ac:a6:bc:4b:7f:e6:19:b2:17:6a:
         4e:16:21:12:57:3e:fb:36:c6:57:63:d1:69:50:01:56:f4:c6:
         3e:ef:44:30:8a:39:d6:59:45:b7:11:49:13:f8:7c:f5:2c:be:
         d0:7a:50:60:96:78:d0:94:0c:e4:3b:80:14:26:c1:53:40:9d:
         64:e4:2c:1d:82:22:0b:04:bb:73:da:69:44:c4:fe:1e:67:8f:
         9b:6f:b0:43:2a:f8:7b:2a:19:e3:9f:56:45:f7:e9:7a:07:e4:
         54:e2:e3:70:26:cc:06:cb:c4:f0:95:08:ca:9e:e9:85:7f:ed:
         2a:f0:f3:c1:4d:e6:e0:58:51:d7:d7:f6:0a:f5:f6:1b:83:63:
         d2:30:71:93:fa:0a:0c:ef:5c:9b:38:1f:7f:fa:50:6b:fd:52:
         d5:8e:b7:af:59:9c:7b:c5:13:c3:4a:37:22:dc:6b:2f:d6:f6:
         86:dc:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:14:21 2026 by rpki-client