Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File:                     zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier:          t8zy/IPpgqaT55+1cV9ACRhDKOMYeqC3T9PtprZz3Go=
Subject key identifier:   EA:4E:DF:08:9E:B8:E1:5B:6A:E8:EF:32:EC:69:8B:2C:F8:37:D1:4E
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer:       /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial:       01A0035E851B3E344DD4DF7A9C0B5BBA7F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number:          1193
Signing time:             Sat 15 Aug 2026 03:02:01 +0000
Manifest this update:     Sat 15 Aug 2026 03:02:01 +0000
Manifest next update:     Sun 16 Aug 2026 03:02:01 +0000
Files and hashes:         1: 0L1L67jVugXzE__lTJGfbb8-q-Y.roa (hash: Qt2g1ctMd8cFHOzrewKQ8FYPO0z3lmCYJaL3Sc8ATow=)
                          2: aULXxwpV3n01msELu6FKmFfUQt0.asa (hash: NByj/5BS6ETg8U2+SS44eCFMC2AU9TZ/aruJFrPVAYA=)
                          3: e0EdhFf01seKM2ee00Orq33djUI.roa (hash: CXwllvMBMtWoZlpgKk44gW6slpYawA4OLdB4YkoWj8c=)
                          4: rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa (hash: M2Sx/zjlYAhCYCRsT+YiI+82fP7xUoFDJFNJGn+EKeA=)
                          5: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: 85d9rLIiewkW9y0cdGz2LJ/PHWc5moG3ZQHKF82us7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:85:1b:3e:34:4d:d4:df:7a:9c:0b:5b:ba:7f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
        Validity
            Not Before: Aug 15 03:02:01 2026 GMT
            Not After : Aug 16 03:02:01 2026 GMT
        Subject: CN=ea4edf089eb8e15b6ae8ef32ec698b2cf837d14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:36:64:df:03:0c:14:78:1c:ba:27:8b:e4:
                    03:5c:9b:7a:3d:74:88:60:f4:2b:ab:00:8e:2b:33:
                    e3:03:17:5e:ac:e0:99:51:45:9c:62:b5:c2:b7:ff:
                    af:5e:f4:5d:b0:75:6e:14:86:7a:34:99:a5:9b:87:
                    a9:00:c9:6f:45:7a:05:af:e8:2f:88:bf:f6:2f:98:
                    56:c7:e0:ae:7b:4a:ce:54:47:7d:1d:0d:11:87:b7:
                    be:0f:88:eb:46:25:fe:29:12:46:02:16:9e:b6:6c:
                    31:e1:ae:22:d0:9f:32:47:74:15:bc:2d:1e:be:26:
                    32:dc:e9:74:7e:9c:8c:de:f9:3d:95:e5:22:c9:5d:
                    a5:a6:f2:bf:70:ad:74:be:b6:dd:46:b2:a6:03:d1:
                    af:0b:59:99:39:e6:e0:be:64:5a:01:5d:22:b6:59:
                    1b:1f:18:df:56:9f:a2:4b:e2:c4:fd:75:a5:71:16:
                    4c:32:46:01:9c:b3:59:df:de:da:b2:a6:b5:63:07:
                    d8:af:36:ab:dc:72:0e:b9:59:e5:a4:37:23:ac:a0:
                    d7:9d:8b:e7:77:a3:b9:cc:39:7c:9e:a8:9e:8e:cb:
                    6c:56:8d:c6:b8:1d:5f:51:93:ba:e6:15:af:7d:bd:
                    c2:e8:7e:8a:50:ae:71:9f:91:b9:fb:c2:6e:54:82:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:DF:08:9E:B8:E1:5B:6A:E8:EF:32:EC:69:8B:2C:F8:37:D1:4E
            X509v3 Authority Key Identifier:
                keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:9e:b9:54:c0:ae:6b:d7:ab:f2:73:f0:07:2a:37:13:6c:
         e7:56:3e:9a:70:38:0a:ad:89:cc:d5:f2:d7:1c:48:97:a1:9d:
         10:d8:d5:4e:c0:e3:bd:27:92:09:62:3b:b9:ec:ce:73:59:4e:
         99:20:e8:14:83:e9:a2:04:2d:75:98:e4:8b:a6:cd:a2:e8:70:
         d7:53:71:fb:f2:c5:46:f4:6a:f1:b7:e0:ed:7c:f3:dd:89:e8:
         33:12:9d:ff:7d:d1:aa:e6:1c:87:5d:88:b4:57:08:1d:03:76:
         59:d2:c4:eb:b6:92:eb:a2:81:45:e9:44:90:3f:67:bf:4c:7c:
         11:49:11:b0:85:fb:bd:fa:a7:01:ed:a3:93:15:cb:f8:0a:b0:
         c4:68:a7:56:ca:1c:ce:51:89:cc:db:c6:89:68:1f:45:ea:80:
         e3:68:f7:d2:bc:da:40:40:b8:65:c6:4a:24:60:30:76:78:97:
         3a:07:88:d9:b7:04:34:16:49:df:37:c3:b8:e1:88:2c:f6:c5:
         a8:94:c1:a6:a0:60:3e:b4:4d:77:98:61:35:de:11:41:9c:45:
         92:24:82:97:a0:4b:65:a9:87:6d:9e:69:df:74:e2:b3:55:b5:
         06:f6:85:f5:38:3e:5c:4a:47:c6:dc:89:40:13:bc:0f:57:f5:
         df:01:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:03:29 2026 by rpki-client