Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          /FDkqiNlyWjUqzsQYoiYYp5IkXq+Td8MDhnX/rIBxQQ=
Subject key identifier:   3F:02:61:03:05:DB:E6:AC:5C:2B:6B:15:C4:50:9B:F1:16:BB:6B:20
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       019FAD51B07161E6FFE291EA84C05D6C6EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          16E6
Signing time:             Wed 29 Jul 2026 10:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:39 +0000
Files and hashes:         1: C7f6La2RHnovZkVXPsCMvF_ZrpU.roa (hash: vor63A+KF0/+NLo3bRvMmDXK5iRB2pgk/JSZQYxp0os=)
                          2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: DPGO4Pw9S7iRiXKiypG6FDDNu1t1+rPq6ObF0kNalCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:b0:71:61:e6:ff:e2:91:ea:84:c0:5d:6c:6e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: Jul 29 10:00:39 2026 GMT
            Not After : Jul 30 10:00:39 2026 GMT
        Subject: CN=3f02610305dbe6ac5c2b6b15c4509bf116bb6b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:50:96:91:29:48:cf:14:43:6d:3d:94:c0:
                    22:3a:ca:05:e3:71:4a:4c:4c:77:42:61:96:cd:49:
                    80:5b:50:06:5e:06:d7:72:be:e8:3f:34:45:84:26:
                    8d:62:fd:db:8f:be:a1:5b:9f:c3:13:d1:6a:18:f3:
                    12:f1:19:97:ff:89:14:7a:bb:38:02:88:a6:68:0d:
                    ff:4b:3a:c8:c7:ac:d2:14:86:88:ba:39:32:a0:a7:
                    59:52:b7:e6:b4:c7:23:d1:19:59:c0:87:e1:96:0b:
                    2a:6f:ba:88:9b:ac:fd:df:0d:38:ed:bd:8e:44:fa:
                    e3:da:0c:fd:59:ef:ba:15:79:d3:03:5b:00:b1:4a:
                    f0:8a:8e:2c:4a:08:2f:f0:42:98:d5:c3:06:23:73:
                    fa:c9:8c:a6:35:27:81:5c:92:26:c4:a0:c9:af:9f:
                    50:3e:96:d7:e1:13:af:ce:d9:b3:b9:73:4f:09:a0:
                    6f:a0:ef:c9:55:02:1b:cd:7e:96:4d:23:1f:30:28:
                    aa:b7:d8:47:73:57:89:5f:34:95:a1:83:2e:51:bf:
                    52:ae:49:57:fe:fc:bf:ef:15:52:a9:4e:f0:2e:26:
                    fc:d1:ff:db:ca:58:a9:7e:fe:2c:43:50:84:3e:c1:
                    da:52:ad:8f:85:d1:d3:af:9b:f0:66:bc:5a:08:0e:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:02:61:03:05:DB:E6:AC:5C:2B:6B:15:C4:50:9B:F1:16:BB:6B:20
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:0f:cf:b7:a5:16:f0:bd:c8:51:fd:09:2a:fb:ef:56:c3:
         49:bb:3d:28:66:b2:0e:4b:33:c3:8e:59:91:bf:73:4b:72:c1:
         d2:f9:bf:18:4b:7d:31:da:06:4b:ef:0e:b1:1a:8c:5e:d1:2e:
         a3:24:b5:a3:3b:44:d8:39:78:5e:7a:85:cc:de:6e:c3:05:ce:
         b9:be:e1:0c:8b:9d:60:cd:cd:4d:a1:3f:b5:d9:ac:9e:5f:7f:
         55:4c:85:ac:dd:fb:e1:cf:60:61:66:dc:e6:f4:64:af:63:ab:
         5c:b0:d3:76:22:3f:d6:8c:52:e1:5e:09:c0:b9:e2:06:7e:6e:
         c9:3e:dd:0e:8c:ce:74:9f:8e:e0:df:f0:32:b2:eb:87:f2:8f:
         fd:c8:79:8b:35:61:ef:42:8a:b3:05:eb:8b:fd:c1:be:08:b8:
         3d:0d:b1:6a:12:40:36:10:b2:50:7b:13:bc:0f:4e:53:f6:5f:
         2b:b6:8a:19:7e:68:f0:39:4b:59:7e:d5:21:da:d0:aa:b5:55:
         92:5c:41:7a:00:7e:76:d9:e0:6d:2c:30:65:ce:64:f9:f7:c2:
         20:c1:d5:cc:61:1b:e1:3c:d9:8f:d6:46:5d:68:64:58:e9:3f:
         d7:0e:bd:2b:87:dc:8f:4c:75:eb:f9:d7:30:7a:56:33:fa:e8:
         43:e8:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:27:23 2026 by rpki-client