Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File:                     Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier:          iJCUG9KFQMOmIQMgi6EfERpC1J/cDKFPFjLvvKJ2BnQ=
Subject key identifier:   63:44:35:F0:49:1C:57:CF:1A:D5:6F:DA:BC:4F:A1:AD:B3:37:FD:47
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer:       /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial:       019FAA87A32B7DD22ABDF19B6174A832EEA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number:          04B2
Signing time:             Tue 28 Jul 2026 21:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:43 +0000
Files and hashes:         1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
                          2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: ExTKbnFokIxynibRTc8ZP+Q0pnIyBXied6OZe2pkhc4=)
                          3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
                          4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:a3:2b:7d:d2:2a:bd:f1:9b:61:74:a8:32:ee:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
        Validity
            Not Before: Jul 28 21:00:43 2026 GMT
            Not After : Jul 29 21:00:43 2026 GMT
        Subject: CN=634435f0491c57cf1ad56fdabc4fa1adb337fd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:9f:e9:76:74:1b:7e:2a:2a:03:d8:d2:9b:
                    ef:b0:72:cc:db:b6:78:06:ff:33:e0:7f:eb:d1:e4:
                    a0:3d:8c:d1:99:6e:39:f3:1d:47:79:30:29:24:ed:
                    e2:c5:2c:f8:21:69:ae:69:62:6f:cc:18:20:76:71:
                    18:df:27:d2:78:01:e0:65:67:68:f6:b7:21:73:62:
                    2f:a1:3b:5d:6e:ea:ec:80:d7:bd:22:6d:ce:5c:d6:
                    08:c4:1b:1d:fd:94:2c:60:2a:99:18:68:fe:8f:a1:
                    24:e5:f6:b2:4a:c4:75:e1:99:fd:85:f1:81:a9:29:
                    4f:0b:0a:34:53:36:46:86:6b:cf:bd:79:3d:b7:28:
                    af:92:4d:d6:47:e0:ff:3f:4b:69:8f:79:a7:1d:15:
                    c7:f3:e0:c9:db:6a:5a:52:9d:2b:cc:2b:95:10:7f:
                    36:da:19:57:65:f3:47:c5:d4:f1:ba:d7:2d:7c:af:
                    d5:17:1d:9e:04:ef:31:9a:3a:02:37:5b:4b:68:56:
                    80:25:95:9c:2d:04:60:b9:a5:83:03:78:96:15:2f:
                    3f:e9:4f:ef:22:f6:ae:20:5f:cd:d0:4a:02:81:62:
                    94:ad:c7:10:e5:48:79:84:00:b6:57:c2:52:51:aa:
                    b5:ab:68:d7:84:eb:e7:91:c9:bb:6c:91:cd:52:20:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:35:F0:49:1C:57:CF:1A:D5:6F:DA:BC:4F:A1:AD:B3:37:FD:47
            X509v3 Authority Key Identifier:
                keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:68:36:5b:e1:74:39:36:60:42:f4:c0:08:da:02:47:44:4f:
         9d:25:0b:10:33:45:19:98:f8:3b:6f:8c:bf:e9:1e:ad:e6:32:
         f1:2c:ac:61:70:0c:c1:f6:28:16:2c:13:51:55:af:8c:4f:37:
         25:fc:38:94:9d:91:14:fd:87:f8:9d:9e:98:0b:a2:5a:87:b8:
         5e:db:ca:ec:7c:30:86:5e:af:10:a2:10:e2:a8:3c:1e:66:00:
         eb:2b:d1:26:90:38:c6:c0:48:7d:62:44:ab:c5:d2:54:dd:f4:
         42:49:53:ff:ab:68:49:58:7f:28:34:b8:51:11:25:52:55:b2:
         6e:f3:e9:2e:31:cc:68:8e:4a:10:7e:de:91:07:da:95:7b:df:
         62:22:36:1d:b6:3f:fe:b3:55:79:9d:12:7e:ab:29:a0:9f:83:
         a2:e7:14:b6:ba:1a:11:b6:a8:45:4e:1e:37:0e:15:77:62:e1:
         56:38:08:77:7a:68:ee:a5:c2:21:01:f4:83:d7:ed:93:a2:73:
         ab:10:f5:0d:d0:b9:24:01:07:e7:04:bc:a4:19:11:4f:2c:5d:
         c6:ed:3c:5d:81:5b:49:de:21:43:69:40:c9:99:55:9c:86:7d:
         84:02:5f:c0:cc:cd:82:ee:7b:4c:ba:1a:94:58:5a:7b:40:e2:
         4d:75:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:18 2026 by rpki-client