Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File:                     dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier:          tG1eykMP9mxzX1zKB6Svn+mcMmNLDkK5ZWXXmUVApOE=
Subject key identifier:   C6:62:37:D7:56:AB:A1:7D:FC:6E:11:9F:50:F6:E8:99:6F:B6:60:4C
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer:       /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial:       019FAAF5E7D664CDCE8A6A083A5F9534E3E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number:          07E3
Signing time:             Tue 28 Jul 2026 23:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:10 +0000
Files and hashes:         1: bO5zh83JPBsDB9dYi7999N7x4VQ.roa (hash: 2nRlkOqwn2pz6pnUvZfg8RMKFwShSWGr7lN2y/FxSOU=)
                          2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: ZeGhSL98+zkkAcyuQDgNceBa3gzcNLvkq4IU7UlPJeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:e7:d6:64:cd:ce:8a:6a:08:3a:5f:95:34:e3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
        Validity
            Not Before: Jul 28 23:01:10 2026 GMT
            Not After : Jul 29 23:01:10 2026 GMT
        Subject: CN=c66237d756aba17dfc6e119f50f6e8996fb6604c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:0b:f3:9d:76:3e:e5:ed:08:57:e2:4e:26:
                    7e:70:3f:bc:af:7f:57:3b:79:18:ad:17:f2:c6:b4:
                    ee:dd:24:9e:6d:28:8a:ca:18:24:36:f2:f4:13:54:
                    a6:ab:4b:68:d2:af:f4:67:4c:d8:bb:b0:30:fc:db:
                    34:a2:d1:71:a0:63:66:4e:f2:30:75:56:fd:f1:0e:
                    f7:ee:73:72:66:6b:7c:12:d1:14:7a:52:3c:b5:35:
                    fe:1c:a8:d8:18:92:b3:a4:8d:c3:d2:a4:05:71:27:
                    49:5d:30:a9:b2:ac:98:41:a2:3d:31:06:8d:db:ac:
                    ca:7f:b2:92:45:a8:cf:47:75:d8:21:fe:24:b4:43:
                    6d:8b:00:48:ac:b4:3d:99:a4:a1:ac:47:c3:d6:85:
                    63:3a:54:51:2c:ba:e0:d8:9d:0d:c8:19:47:69:fe:
                    15:8a:1a:ee:0c:29:94:44:f7:6d:44:79:62:81:1a:
                    9a:0a:d0:18:02:7c:91:5b:9b:fd:54:7c:4a:a4:97:
                    03:f1:59:b3:03:11:01:79:06:d0:3e:8e:b4:7b:45:
                    cc:ef:10:c3:57:86:60:d8:7c:22:52:b9:d1:fd:9c:
                    ca:8a:69:e5:25:f6:f3:d9:4a:36:2b:46:a4:2f:ba:
                    84:0e:31:cf:53:c1:46:27:fe:79:26:b5:e3:92:dc:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:62:37:D7:56:AB:A1:7D:FC:6E:11:9F:50:F6:E8:99:6F:B6:60:4C
            X509v3 Authority Key Identifier:
                keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d0:06:a4:a0:90:2b:42:94:f2:4d:c1:3f:9b:81:b8:40:53:
         e7:4f:59:fa:c3:55:0f:d3:30:51:9d:25:db:b8:23:a8:6d:53:
         15:74:59:94:2a:07:6c:26:a0:d9:d0:c7:9a:76:2c:d9:a7:e3:
         94:d1:9d:0b:02:44:a3:77:16:61:60:b1:c6:ad:44:cf:a4:b6:
         42:44:5d:87:3a:97:7c:b6:de:c6:53:64:c7:e2:c5:d9:84:db:
         19:a3:e5:4f:ec:a8:36:bc:6b:60:60:ca:a6:62:19:35:5b:dc:
         64:ac:a7:70:cb:bc:c6:92:78:a7:c2:89:a5:97:5a:2a:08:2e:
         6c:5a:d5:80:4b:ce:cc:41:7a:ba:c2:6f:45:64:55:46:9b:c5:
         af:95:40:15:b5:64:1d:a3:81:01:01:5f:81:33:ea:95:c4:f0:
         15:57:39:87:a2:d6:5f:9c:af:17:ab:1f:cb:46:fc:bf:ca:a6:
         e4:66:4a:c1:d9:40:09:48:00:4d:74:de:dc:1e:c2:22:06:e1:
         05:d2:6e:1e:da:c0:52:c6:28:2b:0e:6a:47:c2:83:2b:d0:86:
         20:36:a2:4e:74:9b:da:fd:7e:9d:83:8a:b8:c2:ab:0a:ea:95:
         1a:f6:c1:9b:3a:db:c7:83:cb:1c:9d:ef:40:b9:0a:88:fd:c4:
         37:43:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:45 2026 by rpki-client