Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
File:                     ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft (raw, json)
Hash identifier:          e4jaUNiA8j9uexu4hpuYxTCJgfz9tlyZpW97gDhSzzk=
Subject key identifier:   B7:43:12:E2:2F:A8:7B:D3:58:41:4C:6D:11:47:5C:5D:80:D2:A6:19
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Certificate issuer:       /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial:       019F3B2ABD9FB7EE102C8EB3BED1D5E5A29F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
Manifest number:          A7
Signing time:             Tue 07 Jul 2026 06:01:24 +0000
Manifest this update:     Tue 07 Jul 2026 06:01:24 +0000
Manifest next update:     Wed 08 Jul 2026 06:01:24 +0000
Files and hashes:         1: NmfGAB9g6IwfbTf5IGeRlUzzLK8.roa (hash: nTmZ/2NC+LsTf/mvJ/ayjnPfWSnwWzWFoHlvAvwIR94=)
                          2: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl (hash: 04lZzZgjQ6yX2IqgrZCwQA0L6XMCpq99UYijp0Jbk0A=)
                          3: tY2WtQaeJpuUmJI8VN0JtvLm7nM.roa (hash: KjixT4XxmdU3bVJwP3k9mRsSDgi6HnBSPdfTCDjkwQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3b:2a:bd:9f:b7:ee:10:2c:8e:b3:be:d1:d5:e5:a2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
        Validity
            Not Before: Jul  7 06:01:24 2026 GMT
            Not After : Jul  8 06:01:24 2026 GMT
        Subject: CN=b74312e22fa87bd358414c6d11475c5d80d2a619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:c2:cc:54:78:48:b8:3e:9e:9a:ad:6f:ca:
                    6f:45:4c:ef:1d:a9:bc:c3:22:51:55:23:26:60:c4:
                    9a:2c:93:ff:8e:f6:03:16:6b:b6:f1:c8:c9:db:39:
                    9e:f9:eb:03:1b:85:e6:70:39:b8:7a:70:14:e7:66:
                    a1:9e:1b:fe:c5:19:1a:4b:39:f9:6b:7b:68:83:11:
                    75:53:53:4f:eb:ad:c8:25:c6:16:d0:02:c8:cf:16:
                    6c:dc:28:a5:84:4f:46:d7:a6:b4:21:d7:b7:fd:23:
                    2a:d2:22:bd:da:13:6d:b5:17:42:af:57:9d:7b:92:
                    ef:ad:4b:62:23:0d:94:c5:38:05:13:48:fb:ff:b3:
                    c7:f5:1d:14:88:39:6d:ca:2d:21:0a:a3:6d:92:fd:
                    4c:f0:ac:09:98:3e:70:9a:f9:30:5b:5c:e4:db:31:
                    82:7c:fb:5f:08:d1:35:83:c7:dc:b3:16:21:41:9f:
                    a8:34:6d:13:86:ba:fc:89:b4:09:43:5b:9e:fd:0e:
                    80:53:e0:30:c4:c4:bf:36:70:39:4e:d1:35:e4:89:
                    7f:42:94:fd:85:ab:93:3d:b5:ea:a0:1a:14:47:55:
                    fa:86:14:c7:25:eb:cc:99:24:71:b4:b7:69:34:9e:
                    6c:8f:dd:1d:ec:4e:41:57:18:ad:ff:df:19:23:f3:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:43:12:E2:2F:A8:7B:D3:58:41:4C:6D:11:47:5C:5D:80:D2:A6:19
            X509v3 Authority Key Identifier:
                keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:98:c2:7d:53:f7:86:1e:3f:3e:9d:95:7b:2d:a3:7a:0f:16:
         c7:c9:d8:75:44:0e:65:cb:fd:2d:a1:05:0c:f9:a7:c0:80:0d:
         52:34:00:14:f8:17:4f:76:24:41:c9:07:5d:fb:72:80:1b:74:
         e1:5a:b2:6a:26:57:d3:7a:1a:bf:de:b4:07:4c:9f:1e:bf:84:
         ce:c8:f2:07:e5:88:3e:dc:a7:c2:70:f6:cb:fa:1b:ed:bc:1e:
         12:eb:1a:2d:79:d1:2b:52:e0:3a:2c:5b:29:e3:8d:71:f9:db:
         2e:2b:f2:88:b1:8b:e8:5e:6c:84:2b:a9:92:79:91:e1:1f:35:
         0e:b0:9a:13:6e:cb:0c:81:71:c2:13:c3:87:ee:bd:5c:9a:73:
         07:6b:3a:76:ea:42:f2:6b:36:63:e0:34:12:cf:27:54:77:2d:
         2a:e0:07:b4:4e:f6:04:7a:aa:53:77:b1:df:4c:5d:c5:86:d1:
         67:71:e0:58:9f:e2:2d:56:e2:43:34:eb:82:40:0b:0d:25:1d:
         1e:68:74:e1:e3:d1:46:b6:aa:df:54:76:05:77:e4:4c:6e:d9:
         c9:f9:38:48:d8:7e:1a:92:d9:6c:b1:b5:2e:05:12:bd:a2:a6:
         68:d7:b3:10:b5:34:29:93:b3:ff:e2:e5:a0:78:73:05:d1:95:
         9a:e8:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:28 2026 by rpki-client