Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File:                     153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier:          ESlHjB76QerzvGcGky1zQ2bnQDSGZLQA5Gcg34c26gA=
Subject key identifier:   B4:C0:54:FE:FF:7F:4B:71:30:EA:DA:A2:3B:B3:90:3D:69:84:48:F8
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer:       /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial:       019FA862183456681FF051AD7563DA3FCA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number:          0875
Signing time:             Tue 28 Jul 2026 11:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:28 +0000
Files and hashes:         1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: 9P5TiShStdS3zlqpSTE7lRopvpV7mOsZO/SzddLqyGg=)
                          2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:18:34:56:68:1f:f0:51:ad:75:63:da:3f:ca:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
        Validity
            Not Before: Jul 28 11:00:28 2026 GMT
            Not After : Jul 29 11:00:28 2026 GMT
        Subject: CN=b4c054feff7f4b7130eadaa23bb3903d698448f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:aa:ef:02:17:43:4c:bf:38:d2:4b:9d:4f:
                    3d:c1:a5:83:07:49:86:f5:50:65:6c:b4:bc:29:db:
                    ae:b5:54:0f:18:e7:ff:fb:66:42:62:d5:0d:cb:5b:
                    c4:c3:6c:24:76:29:c3:0e:54:af:27:1c:b3:27:44:
                    40:58:bb:ba:37:0d:4d:d4:43:ba:19:90:33:ba:b2:
                    32:64:16:24:49:7a:ef:4c:4d:84:21:ee:0c:03:cd:
                    9e:c2:8a:39:ec:2b:8b:d4:9c:2c:53:94:92:87:4b:
                    29:c9:4c:6b:22:de:3c:78:cb:77:b1:d0:63:40:3a:
                    69:d0:dd:f6:10:f1:ce:93:16:c7:d6:92:72:76:ec:
                    92:40:10:a7:20:7f:b5:68:01:4b:be:c6:ce:9f:33:
                    8e:22:c2:bd:8a:b2:54:16:5e:b7:9e:39:3f:53:91:
                    06:f7:d8:35:82:3f:fd:a4:5e:86:d1:47:de:43:88:
                    ff:79:1f:09:bc:27:84:85:d7:34:39:79:23:70:fa:
                    91:32:da:ef:f9:7f:71:4e:2e:1f:38:28:4e:cb:62:
                    1c:62:b6:44:f2:de:02:2e:72:7b:a2:e1:bd:bb:bd:
                    3b:04:a3:61:75:35:b3:83:66:d7:6b:a9:ae:65:ef:
                    b7:ce:ed:af:4b:da:06:ff:b4:60:02:41:0d:36:40:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C0:54:FE:FF:7F:4B:71:30:EA:DA:A2:3B:B3:90:3D:69:84:48:F8
            X509v3 Authority Key Identifier:
                keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:44:6e:cd:f4:1b:a3:f9:e9:6f:c2:55:e7:be:0c:6c:de:60:
         f4:32:02:5c:4d:dd:3c:34:57:c6:7b:3d:c6:a5:2a:fa:b7:51:
         97:f0:eb:19:ed:8c:54:71:5e:a4:c2:cb:fa:1e:69:bd:a9:24:
         c7:e4:1b:6f:83:f1:bc:d6:5e:7f:a9:33:d9:1a:33:62:2f:7c:
         4e:51:0b:2c:c8:e6:dd:e4:77:91:92:13:16:fa:bb:b5:9a:a4:
         e9:6d:20:4e:62:90:b4:b4:4f:22:0c:96:61:6f:df:1f:3a:4a:
         41:89:de:ee:f2:2a:3e:c3:a9:fb:39:2d:51:a1:21:12:87:ee:
         08:92:be:61:66:c7:1f:c0:3d:f6:2f:76:60:3a:33:94:ce:94:
         70:8d:2b:f2:25:46:7b:a9:a6:d6:a0:ad:a6:ca:72:67:de:c4:
         40:9d:8d:ac:0f:52:a0:7b:2b:60:ba:8d:92:2f:0a:fc:e1:97:
         94:f2:09:2d:3e:56:19:50:91:92:20:79:7e:f9:27:72:9a:ae:
         9c:81:d6:b1:4b:28:53:0f:c7:c7:a8:df:f2:eb:39:e8:38:ab:
         5c:ab:71:20:6f:8f:6e:fd:bc:80:b3:c4:71:81:37:b5:c2:ba:
         83:31:3f:b8:8b:f6:3a:75:fc:cf:fe:3a:c6:20:68:62:fe:ce:
         33:1e:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:04 2026 by rpki-client