Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File:                     ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier:          97FdMdarGIiGcKdE6JBq4ZrwfA27zvXN9RZEA81klQs=
Subject key identifier:   C5:7A:4C:89:75:D4:86:24:24:D5:20:BC:3B:34:41:35:56:5E:C8:71
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer:       /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial:       019FA8D09CA6329C2E0AB7B95088B71643A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number:          0F8E
Signing time:             Tue 28 Jul 2026 13:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:11 +0000
Files and hashes:         1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: 6VLUmnqFq7YM4tYLWCYwrfeoeyMGH5HcVB1O8CDjXns=)
                          2: syoW9dmBrPQScEStsWIE7Y3xj7E.roa (hash: 7MBJDw4Pca+UQjisSf8ek6epXNLQhKJ/t0Da7aSqre4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:9c:a6:32:9c:2e:0a:b7:b9:50:88:b7:16:43:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
        Validity
            Not Before: Jul 28 13:01:11 2026 GMT
            Not After : Jul 29 13:01:11 2026 GMT
        Subject: CN=c57a4c8975d4862424d520bc3b344135565ec871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:8a:6d:bc:61:be:56:9f:18:9b:50:f1:56:
                    4b:42:1f:78:40:4c:16:e0:c0:27:21:cc:3d:00:5f:
                    9c:29:fc:fc:ae:47:3c:12:e0:ab:53:d0:4d:a0:cb:
                    37:79:58:f9:9c:5b:04:42:60:65:7d:4a:78:f4:b4:
                    d7:b0:15:2e:ad:ff:69:6e:19:b8:b4:46:60:9d:81:
                    c2:d7:5e:e8:f0:ec:95:bf:44:80:00:d0:eb:bf:2e:
                    23:d2:9b:b3:96:2e:1a:b0:c1:cb:35:2f:33:bf:43:
                    a9:42:c3:0e:ee:5b:d3:48:6a:9f:c1:c8:79:b6:4c:
                    2a:e7:30:ee:99:f6:12:7a:03:eb:6c:6d:2d:9d:45:
                    72:a7:ac:96:33:cc:39:16:02:4a:5c:b1:fc:5d:39:
                    fd:9d:b7:76:83:cb:f3:bd:1e:de:3f:76:1d:be:6a:
                    ba:8e:5f:40:35:93:af:43:a3:1b:93:ba:29:2d:c9:
                    e6:d1:19:9c:f8:c9:0e:e7:94:62:1a:16:a4:08:f0:
                    3b:e3:ba:29:e9:c6:b8:d1:bf:fc:41:12:0a:05:9d:
                    2e:51:b2:37:4b:76:4e:d2:eb:ee:e5:12:41:3d:20:
                    4f:fd:7e:88:70:1a:71:c4:d9:d1:8c:df:ed:7d:f9:
                    f6:24:04:2e:b5:e3:78:19:e6:bb:65:1e:41:15:58:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7A:4C:89:75:D4:86:24:24:D5:20:BC:3B:34:41:35:56:5E:C8:71
            X509v3 Authority Key Identifier:
                keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:86:1b:40:59:b5:54:c4:af:16:65:c6:70:a6:a7:d7:25:
         d7:7f:2d:9a:fe:8b:78:0b:ce:e4:7f:4d:45:af:ea:f4:1d:61:
         a7:41:a8:41:a2:80:ac:5b:92:a8:fb:10:29:9a:45:46:d9:ad:
         3e:52:a7:d9:f3:0a:8c:cb:ab:49:fa:34:c0:5a:6b:e0:44:45:
         33:da:6b:c9:8d:cf:a5:f2:8c:0e:42:83:b6:a4:e4:4f:87:80:
         ce:ec:77:a7:30:d3:01:6a:84:4a:0f:2c:5a:17:be:ac:9c:25:
         53:94:37:8c:85:70:d1:2d:fe:80:db:cf:c9:ad:f9:ff:f1:06:
         3b:30:9d:17:82:c6:1e:02:03:66:91:60:42:2e:c6:d4:f5:e3:
         d0:a8:9f:ce:e2:c2:52:34:a6:96:fb:57:7b:d5:b2:eb:f2:93:
         67:14:24:0a:8d:da:42:fc:29:74:3c:b1:1f:0c:1b:9b:bc:08:
         9b:c5:dc:e7:b9:9b:f4:9d:6d:6d:77:74:cd:4e:cc:3d:73:42:
         fd:63:05:c7:4e:99:b3:22:41:e0:28:7b:60:50:4e:4a:48:29:
         e1:35:27:cf:c1:aa:3c:e8:ad:7d:90:12:06:1a:c0:d9:cd:fd:
         36:5c:90:6d:8d:af:c2:0f:68:92:32:fc:04:42:ef:68:66:71:
         bb:1d:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:38 2026 by rpki-client