Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File:                     ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier:          tOjGy8gZy7ji5TTWYQvmspSL2MfLVmGFIzh5tUIL97g=
Subject key identifier:   60:7C:6C:6B:9E:B8:A9:92:03:21:02:BF:02:1A:91:CB:E2:27:4E:F8
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer:       /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial:       019FA975500ECE9262183EA45A5978A898FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 16:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:05 +0000
Files and hashes:         1: LT7SpeHVHrImIlmvmDypryVJsMA.roa (hash: UY3Bc5Ii8P52rm9NhIsYSUCYO4P4gv1+uleYch2vT5A=)
                          2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: BCzWRLnDgxNFTQpX+O3r7dhzQwQzsiLwVxWRbgX1wwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:50:0e:ce:92:62:18:3e:a4:5a:59:78:a8:98:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
        Validity
            Not Before: Jul 28 16:01:05 2026 GMT
            Not After : Jul 29 16:01:05 2026 GMT
        Subject: CN=607c6c6b9eb8a992032102bf021a91cbe2274ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:23:c6:e4:ea:f1:b4:1d:7f:95:92:d9:ec:
                    26:43:30:09:ca:a6:9b:06:ca:c2:c6:3e:b6:fe:24:
                    d1:9d:58:59:68:e5:f0:d4:d0:0b:ca:b2:0a:b4:9a:
                    8f:5b:91:99:00:e9:c4:c6:11:e5:5b:39:54:d0:0a:
                    ad:f4:26:6b:da:14:75:e8:01:0a:fb:07:ed:7e:b6:
                    d9:ad:a2:a5:1c:90:61:5a:6d:d9:26:16:a4:cd:d9:
                    a0:71:46:2a:f8:e9:08:22:e5:80:21:f1:ec:25:32:
                    89:0c:4e:eb:9a:2b:32:87:ea:36:db:ec:67:f0:0e:
                    f2:e4:aa:8a:c3:f9:ae:e3:ee:85:1f:3d:c4:ee:c0:
                    04:4b:bd:44:e8:a2:e1:e2:90:4e:ec:60:ab:2b:86:
                    91:dc:0a:ae:a8:85:78:f3:f4:7e:24:d6:f2:39:42:
                    92:2d:1e:4d:47:98:8d:27:e8:d5:f4:ff:09:fe:79:
                    c5:42:d3:17:73:a6:25:9b:e2:39:7f:04:c7:82:7a:
                    52:b3:dd:ef:9b:00:b4:dd:9a:37:69:69:6b:a0:98:
                    62:5d:d8:30:8c:f5:70:bd:6a:c3:2d:ac:86:3b:ae:
                    8e:0e:14:31:92:40:0c:ed:40:34:95:b5:5d:b0:58:
                    85:30:ce:3e:e9:7e:96:2e:f0:9c:91:9f:44:26:9d:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7C:6C:6B:9E:B8:A9:92:03:21:02:BF:02:1A:91:CB:E2:27:4E:F8
            X509v3 Authority Key Identifier:
                keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:85:6c:1d:90:5e:da:19:0f:3c:f0:5a:66:c2:e6:ca:42:13:
         52:19:18:a7:d9:83:b9:83:67:f9:b8:32:0e:ae:b9:3d:a6:2f:
         b9:50:ed:ef:10:88:54:be:31:c5:b8:47:b9:a2:64:cd:63:5d:
         d8:8f:b4:15:fc:ac:a2:df:00:fe:05:a7:58:63:78:9d:c1:79:
         49:ab:1c:fa:05:c1:7e:a6:06:0a:fb:89:4a:e5:97:cd:79:5c:
         65:9c:2a:fe:84:0c:94:a5:e2:f1:2e:64:99:ce:b1:ed:46:43:
         41:dc:0c:92:c6:a0:98:19:48:ac:03:22:64:02:e6:d3:56:9e:
         15:d9:67:87:74:2d:a5:0e:89:71:bd:47:98:2d:04:84:b1:58:
         a9:ae:81:5f:cb:54:63:c7:f2:b5:0d:1a:e2:c6:6c:44:8b:a0:
         2d:dc:61:3e:e2:c4:fc:e8:2d:18:d4:57:ee:02:eb:17:f4:4e:
         e1:a7:f7:c7:51:dc:21:92:aa:47:a1:54:66:24:e7:6c:4a:ce:
         7e:3e:50:01:3f:10:45:a3:8b:4b:8a:92:e2:cc:87:65:b6:14:
         20:94:00:17:12:7a:c5:30:77:73:d7:10:7d:8d:6a:5d:ab:ce:
         68:f1:33:b6:08:ab:62:d3:13:05:ab:21:44:ce:bd:a1:69:13:
         46:20:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:11 2026 by rpki-client