Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File:                     ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier:          ZBRB/tnRGvv9p4VIsb7D9v0bRCssPe8bzX2JqG48mPQ=
Subject key identifier:   B7:8B:3A:6C:7E:42:28:24:30:F9:C4:85:29:8A:67:9D:EE:D0:6E:76
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer:       /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial:       019FAC3F4C6EA08D902EC9B6B79624A5F469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number:          115F
Signing time:             Wed 29 Jul 2026 05:00:57 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:57 +0000
Files and hashes:         1: GwZ9dNA86AIDNnsAq70FiAkZYj8.roa (hash: qnSiAyQRIBiRzYavimYlFJSyS25EakQKaTIGVx1R3tU=)
                          2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: v+t3cT31vhSkP8E3TQ0LmiZ4YKaK69oa0ZDe9UalADY=)
                          3: irQyC0ot9r4PxzPSLvST2QH-X0Q.roa (hash: kwnqay2aLOiYKa/WS1eZrTNeCkIkn0WSXDieMB7/M7Y=)
                          4: yw5w5uCdPdnhgVsaZXUZ6mCgC8k.roa (hash: /944unZ7CSMOwiuR6yhIgpH4mt1fcLA58yVZkErRY/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:4c:6e:a0:8d:90:2e:c9:b6:b7:96:24:a5:f4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
        Validity
            Not Before: Jul 29 05:00:57 2026 GMT
            Not After : Jul 30 05:00:57 2026 GMT
        Subject: CN=b78b3a6c7e42282430f9c485298a679deed06e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:03:51:ea:3b:7e:72:74:89:09:f5:02:a9:
                    7d:00:5d:49:3b:fe:a3:0b:53:bc:bf:7d:fd:40:0b:
                    c7:3f:2a:57:cb:c4:d3:74:ef:3a:38:f5:2c:db:79:
                    4c:b5:c7:05:d6:9c:f4:20:51:0c:d1:fe:f2:31:e4:
                    02:0d:4e:11:ec:88:98:67:79:f1:87:00:f8:1f:8e:
                    e9:41:62:d8:67:f5:c7:16:0d:c6:ef:e5:1b:c7:48:
                    f5:c5:4b:98:9d:39:eb:3e:91:1a:da:ff:d9:7f:dc:
                    b6:a7:a5:e2:ff:8b:5f:dc:0a:2d:4b:5d:80:9e:ee:
                    dc:e0:c3:b3:29:71:25:c2:33:ca:96:76:78:82:9e:
                    f7:a1:59:2c:61:fa:78:51:37:0f:e8:7c:ff:e7:ce:
                    cc:a4:0e:8d:b2:6e:c5:a0:15:47:59:48:1b:8d:4b:
                    44:a5:20:dd:27:a9:00:40:bd:5a:c8:bb:fb:c7:58:
                    47:c2:7f:92:93:e2:8d:7a:eb:b9:cc:22:2b:2a:eb:
                    cc:98:09:86:ff:81:f9:2b:be:28:0e:55:87:3f:23:
                    4c:16:95:c0:58:bd:fd:5c:d7:3f:f3:84:92:60:f8:
                    77:37:57:5a:e2:b5:c9:a8:05:f5:2f:6e:4a:ec:72:
                    35:0a:f7:7c:8c:b4:72:47:16:78:19:04:a9:b8:46:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8B:3A:6C:7E:42:28:24:30:F9:C4:85:29:8A:67:9D:EE:D0:6E:76
            X509v3 Authority Key Identifier:
                keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:4e:6d:f2:a1:40:bd:b2:f0:98:51:e0:92:32:d5:8b:76:
         86:83:2a:e9:6c:2c:18:e7:20:71:30:28:20:e2:67:71:9f:bc:
         c9:86:19:ef:14:fa:2d:a8:56:16:12:f3:03:1f:62:81:d9:b2:
         70:dc:75:5e:64:04:ea:ac:b3:b2:e3:27:ee:26:64:b1:55:ac:
         0e:b2:3a:d1:53:91:de:57:12:c5:84:d6:1f:65:d3:ef:81:e0:
         be:7e:1e:06:73:7a:0e:f9:c3:10:e9:43:95:ff:56:6d:c1:1f:
         d9:d8:63:ff:90:60:77:4b:09:66:19:7f:fe:02:5e:8c:0d:a7:
         3b:87:9d:d3:79:fc:ec:6b:e4:ee:aa:f9:ad:7a:57:6d:77:a5:
         5e:13:9b:65:ad:e5:b2:24:7a:1d:68:7b:41:92:a8:64:52:e7:
         5b:da:75:78:79:e8:0a:d1:8c:26:65:79:72:52:d2:3a:da:48:
         a3:db:65:87:1e:47:57:99:5f:34:f0:29:ee:c1:af:89:bb:fc:
         3a:4e:a4:a1:f7:19:1c:b2:f5:9c:04:83:75:b6:45:33:c5:ae:
         16:6c:bf:47:ca:24:2f:34:8d:98:11:b9:18:94:cb:7f:ec:fe:
         f9:e9:60:fa:45:58:80:5e:62:ca:05:b7:37:37:09:a9:b0:06:
         6d:5b:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:33 2026 by rpki-client