Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File:                     0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier:          GY8bBRzggaZcngGROrzx5TrHlCrXJ9koKHO2vxCtuV0=
Subject key identifier:   D7:AE:A4:D1:93:5E:97:72:9E:DA:7D:C3:42:53:6A:C3:BE:C9:3A:0B
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer:       /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial:       019FA90783E59E552553C28AD2AE1F9FE560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number:          1924
Signing time:             Tue 28 Jul 2026 14:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:09 +0000
Files and hashes:         1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: vplFs0EtRDSdVQViD3CUs99y9S6JxLQwMLUFtFUNoAY=)
                          2: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (hash: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:83:e5:9e:55:25:53:c2:8a:d2:ae:1f:9f:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
        Validity
            Not Before: Jul 28 14:01:09 2026 GMT
            Not After : Jul 29 14:01:09 2026 GMT
        Subject: CN=d7aea4d1935e97729eda7dc342536ac3bec93a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:4d:77:9e:1d:4b:c4:b5:f3:ab:a1:82:c5:
                    1b:c3:84:df:1e:52:bc:32:ac:5f:09:3b:28:ca:c6:
                    6b:21:55:10:fb:41:8a:a3:eb:da:78:13:68:f0:df:
                    c7:25:be:13:13:8c:14:b6:0d:69:d1:0b:ad:f3:46:
                    8f:87:53:ee:f5:ea:4a:08:4b:f6:b7:cd:41:85:a8:
                    8b:fe:37:13:85:d8:b1:91:6a:93:1a:3c:c6:ac:28:
                    8e:22:ba:b2:95:ec:b7:15:4e:ed:67:fa:07:a4:8d:
                    96:a9:aa:10:98:9d:55:8e:8d:47:38:0e:92:39:9d:
                    b5:c8:ae:82:b0:72:5c:cf:f1:0e:f3:82:ec:04:14:
                    6d:4a:02:82:dd:6b:24:33:09:7c:8b:bc:ea:0d:77:
                    61:35:a7:36:df:c7:aa:36:4e:ca:87:72:6b:fd:aa:
                    94:7a:bb:29:83:64:bf:ac:29:cc:e1:ec:f8:2b:cc:
                    e2:ad:84:24:32:6f:35:21:9c:19:82:59:44:34:be:
                    e4:e3:6a:f3:22:5a:64:e8:ff:bb:0c:1f:b1:fd:44:
                    7c:f1:41:04:3e:9c:d1:2d:a1:f1:2d:43:94:44:d8:
                    e7:65:30:7b:31:00:72:8a:e3:57:49:fa:cf:75:d0:
                    7a:5d:41:c4:08:04:d8:cb:a9:20:db:d3:4e:b3:55:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AE:A4:D1:93:5E:97:72:9E:DA:7D:C3:42:53:6A:C3:BE:C9:3A:0B
            X509v3 Authority Key Identifier:
                keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:55:af:d3:53:61:a6:4f:ff:93:25:35:8b:80:2d:88:5b:14:
         52:e0:61:ca:c7:4a:82:f9:07:ef:12:53:73:56:fc:65:53:76:
         e7:24:59:d7:f5:b5:d5:b2:ee:68:c0:85:ca:9d:ab:18:dc:8b:
         87:72:5c:40:7d:2e:b2:36:e7:1c:bc:4b:cf:35:f2:a9:3d:4b:
         8b:1b:37:09:c5:73:9f:16:4a:f7:75:49:41:f1:17:5b:9c:95:
         52:1c:c0:9d:9a:33:eb:57:c4:38:1e:b6:12:75:9b:e8:60:6a:
         81:d9:88:ff:f1:66:ce:2d:40:b9:d9:ee:2b:4c:d6:94:77:c2:
         8a:d7:d9:05:35:d9:3d:43:b8:02:5d:57:78:d7:b9:c1:8f:1f:
         0b:dc:2b:2d:32:ee:5e:2d:bf:57:ae:2c:e2:7b:bf:42:8f:8d:
         1c:5e:33:2f:88:84:d6:31:35:0b:04:5b:91:37:24:d4:87:09:
         aa:23:96:d4:ce:13:48:10:c7:6f:7d:42:6d:f7:21:5e:41:6b:
         c7:8a:a2:39:af:ef:dd:c6:30:81:a6:34:4b:b1:0a:62:6c:3e:
         be:c4:da:a6:8b:49:ce:34:2b:ce:c6:d1:bb:ce:6f:a2:18:05:
         ac:bc:3d:31:45:c2:49:0c:3c:cc:1e:91:2c:5b:12:02:b1:10:
         31:ea:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:14 2026 by rpki-client