Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File:                     RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier:          N8H6gH+RIiBrP6grYhQkKSwry04YXcDhPrcgfuW2Hpk=
Subject key identifier:   0E:9C:B3:FA:7B:D6:D7:2F:68:E1:AD:AB:8A:E7:0A:42:4D:49:10:60
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer:       /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial:       019FACAD59FA527966494E275D1A0BEFF3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number:          09DC
Signing time:             Wed 29 Jul 2026 07:01:09 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:09 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:09 +0000
Files and hashes:         1: J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa (hash: 5skkO0VA2fXKD8mx8GGrzwshnvuHDY9J9MdJAaUhV/8=)
                          2: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: paif+DCaRGQ9Zhw1C3s8r6UEeIsLXt7Lm2eVNv96gro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:59:fa:52:79:66:49:4e:27:5d:1a:0b:ef:f3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
        Validity
            Not Before: Jul 29 07:01:09 2026 GMT
            Not After : Jul 30 07:01:09 2026 GMT
        Subject: CN=0e9cb3fa7bd6d72f68e1adab8ae70a424d491060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:83:53:0b:d1:dd:3d:da:7c:77:bb:cc:f2:
                    da:2d:4e:be:e4:92:54:5b:8b:aa:3d:56:d4:3b:ad:
                    52:c2:68:e6:58:a0:c1:c9:30:ae:25:8a:43:9b:79:
                    bc:a9:87:96:fe:f8:ea:ab:4a:de:88:33:23:9e:20:
                    25:74:cb:da:12:96:9a:3e:bd:63:9e:b2:c8:31:29:
                    20:f7:a1:60:ea:ec:ba:cf:67:a2:d8:bf:69:81:af:
                    6e:9f:29:40:13:16:da:53:3b:4f:8d:21:85:4b:ed:
                    9a:24:dc:bc:4b:e4:a1:17:bb:34:ef:0f:19:d7:7d:
                    6a:6c:5d:8d:fa:95:f8:bd:43:1a:4a:e8:82:9d:07:
                    52:6a:78:75:50:3a:b3:31:d0:21:d3:97:f1:40:a9:
                    74:55:62:3b:4b:8b:34:3c:fc:5f:3d:17:79:1d:d5:
                    91:1e:f4:e2:b3:e9:99:49:c9:0d:9c:a6:ef:03:8e:
                    cd:39:8d:80:b1:0e:5f:03:6a:0c:a7:7a:14:2b:92:
                    bc:66:e5:52:5d:94:ed:91:c6:de:2a:49:39:bf:4b:
                    ff:10:b5:29:ea:b5:cf:a8:2a:e3:77:f7:c5:02:ed:
                    63:36:ee:6b:27:ce:bd:91:2a:b5:22:4f:1f:7d:20:
                    52:e7:0c:e8:75:5c:9d:d4:c4:ba:43:2e:54:3b:85:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:B3:FA:7B:D6:D7:2F:68:E1:AD:AB:8A:E7:0A:42:4D:49:10:60
            X509v3 Authority Key Identifier:
                keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:1e:71:fe:73:b3:04:f4:e4:8d:61:2c:4f:6d:79:4d:e8:
         35:29:09:7c:75:cc:82:8e:07:d6:80:68:c3:6f:59:e0:3e:97:
         71:b9:58:e9:88:bb:c6:1b:c9:a3:3d:78:fc:c2:7e:32:06:dd:
         b7:17:fd:c0:db:10:13:16:d5:16:ab:dc:10:b8:aa:b4:ef:c8:
         a0:5b:56:96:d1:8b:ec:fe:d6:fa:76:2a:f0:28:c2:0b:9e:eb:
         98:96:0b:81:51:fb:18:93:3e:a0:91:12:33:0c:0e:c9:6e:fa:
         f2:6b:22:33:f5:69:0a:27:85:4e:ae:c9:c2:19:c9:2e:2a:f1:
         cf:24:5b:57:46:a1:f3:5e:d3:ed:dc:01:1a:cd:64:65:9d:f9:
         06:66:e8:a3:c0:a2:b4:7c:94:45:20:e7:17:fd:af:bd:8f:8b:
         bc:c1:a4:bf:e0:a6:09:f2:b1:81:17:01:0a:f3:de:85:b7:06:
         8c:db:68:44:68:e1:8e:de:d2:68:7b:2b:68:1d:fe:f5:a8:8c:
         c9:ab:d4:54:c2:33:9d:fc:8d:d9:c7:5d:66:38:76:c0:5a:2e:
         4d:fa:c4:1d:c9:33:d0:9c:93:5c:ca:c9:a0:41:5b:e4:07:94:
         39:3b:a2:1c:9c:ca:ec:2b:c3:3f:e3:ac:90:2f:cf:91:74:49:
         ef:d1:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:28:09 2026 by rpki-client