Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          MHcopP+sWpRaaowhnyGXHs3frK6jzT0Vb9AqDDxGoyY=
Subject key identifier:   96:8A:44:73:A0:F7:4B:93:A2:1C:98:8A:95:BD:06:98:28:59:BB:D1
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       019FAABE83E90307D2F7A5FC6E7ACDB9E826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          0CC6
Signing time:             Tue 28 Jul 2026 22:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:39 +0000
Files and hashes:         1: EUcrUeuArUfiLjyJq2CCJJXEbH0.roa (hash: j5ECLl2Rm4cPawtaMzFLRoWoVbB08uj29AlH0bIyc5s=)
                          2: ImCcU51kmp7ZNuk8BkyjSggDVFA.roa (hash: n45aVak3x5Ct/6DqnZqytEQSgKOpMfagR6z98qYO7lY=)
                          3: OHcQVOiDzKC_wv6FNo8ZwPwzleA.roa (hash: xT0LBnbL9kaBG9ZFdkmrq9KOkjCUtUhM0nWVPUAZpOU=)
                          4: cneDK9wIJto0L8FIGybxXTkN7-g.roa (hash: /ZPU5CDQJmj0WcWpNTND51Omeqs1E74D4tLVOwv5dwM=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: TbGMhASBJDWkoln84WW1cdZbcZGR+nNtGR/Lbz0GapM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:83:e9:03:07:d2:f7:a5:fc:6e:7a:cd:b9:e8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: Jul 28 22:00:39 2026 GMT
            Not After : Jul 29 22:00:39 2026 GMT
        Subject: CN=968a4473a0f74b93a21c988a95bd06982859bbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9a:71:93:f7:7d:c8:8b:42:dc:9d:ce:44:ec:
                    6b:f8:75:77:76:d1:49:12:74:87:db:d8:65:cf:b1:
                    d0:5c:80:e8:8f:6b:38:0f:88:cf:c6:bb:2e:c2:32:
                    2f:20:99:ad:4e:87:c8:d9:03:04:42:b5:f7:88:09:
                    9b:38:a7:e2:97:d1:ba:c5:09:43:d7:9b:89:31:78:
                    2b:6d:e2:b6:bc:04:d6:99:e7:76:aa:9d:42:fd:5e:
                    3d:2f:ca:af:22:de:ce:73:9c:72:88:a6:9e:a1:f4:
                    7e:dc:ed:c8:56:5b:f1:db:29:32:d0:02:4c:11:3f:
                    ab:dc:67:a7:6c:5f:f9:58:a5:a0:b3:49:50:f8:58:
                    6d:df:7c:6e:58:2c:39:09:28:ff:75:e4:e7:dc:16:
                    b0:70:3b:a5:e6:55:34:34:84:f3:a2:f7:66:55:e9:
                    c6:eb:4d:a2:1d:70:a2:03:b7:e9:0a:1a:af:51:c9:
                    5d:5e:97:28:38:53:2e:9a:ac:63:62:01:b3:5a:42:
                    93:94:a6:20:96:44:33:ac:8e:fa:e4:f5:a0:5b:53:
                    a7:b8:db:4a:62:02:72:02:f6:56:e7:e2:82:93:23:
                    1f:21:db:eb:34:d8:c2:bf:46:1c:af:3e:74:df:84:
                    5c:0a:fb:22:37:94:89:49:07:79:06:a9:a6:14:a7:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8A:44:73:A0:F7:4B:93:A2:1C:98:8A:95:BD:06:98:28:59:BB:D1
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:96:17:ce:4b:95:c2:fa:b5:25:14:da:0b:d0:d8:99:14:42:
         44:28:1d:37:94:ad:67:1c:23:c9:7d:35:7f:56:6d:58:7d:c5:
         08:e5:2f:11:4c:f6:29:bd:2d:74:ad:61:d4:01:d2:a5:cb:29:
         92:a0:48:08:cc:de:1d:20:15:d7:82:eb:eb:56:13:89:b3:e2:
         f7:cf:7b:d9:8b:60:3d:d3:28:20:26:96:49:df:26:e1:85:37:
         85:8f:b7:ae:ca:79:2c:bb:72:3c:9e:77:75:51:aa:75:72:9c:
         9a:dc:9a:e1:2f:d3:3d:76:e8:8a:64:2a:e3:d2:b2:53:ef:64:
         d6:6c:c3:95:34:08:b4:ab:61:ca:1e:3c:6b:dd:d6:c4:47:57:
         56:b4:c6:a3:e9:97:52:d4:89:ab:e0:48:5f:60:83:c2:b1:ab:
         2a:a0:68:35:55:d3:56:d1:09:b4:42:47:cd:34:4e:cc:78:e0:
         76:15:99:52:e6:63:ea:a6:0d:4e:a0:91:b9:5e:8f:61:33:98:
         a8:ed:14:aa:6f:24:1b:e3:69:4e:08:0e:14:39:33:34:72:b3:
         0a:10:71:6f:3b:b9:99:c8:cb:d8:21:29:55:76:9c:ee:57:5e:
         96:38:e1:ca:c7:97:c0:49:da:e3:3d:ad:e7:92:ed:41:0f:6f:
         60:41:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:40 2026 by rpki-client