Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File:                     ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier:          0HBv/zcpIzEr1xdvzdIgKbSGf0hzL+v4nY1mIWByQD4=
Subject key identifier:   F3:3F:E4:42:CE:91:C1:C8:35:AF:8B:5E:9B:EB:9C:6D:67:A2:3B:A2
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer:       /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial:       019F5A7E9C1D6245D0B4FE2FF16BA81FD2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number:          17F8
Signing time:             Mon 13 Jul 2026 08:01:14 +0000
Manifest this update:     Mon 13 Jul 2026 08:01:14 +0000
Manifest next update:     Tue 14 Jul 2026 08:01:14 +0000
Files and hashes:         1: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: lXohaByxxFqsi73lPEI/pKaTDlBkQC3FsgoA0OBvfMU=)
                          2: c0zEfFDSZZWFy-vBS9NWpwPjwoE.roa (hash: Degy9LDZTNrQEBY/nXvirHbXKz42WXh/PcwFt1G3pj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Jul 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:5a:7e:9c:1d:62:45:d0:b4:fe:2f:f1:6b:a8:1f:d2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
        Validity
            Not Before: Jul 13 08:01:14 2026 GMT
            Not After : Jul 14 08:01:14 2026 GMT
        Subject: CN=f33fe442ce91c1c835af8b5e9beb9c6d67a23ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:2a:11:da:f5:10:35:fc:10:95:6f:99:05:
                    05:fb:e0:09:a0:c0:de:d9:9d:5d:53:77:5a:00:20:
                    e0:76:21:5e:f5:a7:96:da:d8:b9:1e:3f:f0:26:b3:
                    1b:89:56:b0:94:87:70:fd:de:97:94:f6:53:c2:c7:
                    62:d6:00:e4:da:21:05:9e:8a:92:99:18:f2:e2:e7:
                    32:6d:25:51:82:d9:8e:cb:fa:09:19:c3:f3:72:4e:
                    b3:16:d1:8e:2c:3e:a9:3d:17:c0:d8:96:20:8e:1a:
                    db:f5:5e:d5:49:66:5f:27:c4:f3:10:67:fb:e5:45:
                    75:35:85:ea:8b:2a:ae:f9:f2:9c:9f:50:d3:85:31:
                    b6:51:ac:27:28:70:e5:38:ee:06:2d:d4:76:91:67:
                    13:7e:0b:e2:88:09:a9:18:cc:11:14:89:70:e4:7b:
                    53:ec:bc:b0:ad:8a:4e:16:00:7c:ed:3f:4b:e7:e6:
                    3e:74:f8:8f:35:f4:41:e0:54:ee:46:2b:75:c3:37:
                    97:6d:91:f9:35:b6:3f:3c:6a:1e:bb:7b:23:9e:88:
                    5b:9e:bd:c7:d4:8c:71:09:fe:bb:36:4a:95:4d:c5:
                    81:d4:30:47:73:48:09:f9:28:a7:8b:3d:84:d9:c7:
                    1f:c7:2a:25:05:e6:54:07:7a:e7:f4:58:fa:80:9e:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3F:E4:42:CE:91:C1:C8:35:AF:8B:5E:9B:EB:9C:6D:67:A2:3B:A2
            X509v3 Authority Key Identifier:
                keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:60:41:46:75:38:48:ed:24:38:45:09:9e:d6:74:3c:79:e5:
         4b:cf:85:57:e6:a6:63:46:18:cc:88:b4:4b:fb:bd:7a:38:53:
         06:2f:08:bd:c1:00:df:68:58:5c:e2:ef:6f:87:9c:2f:cb:0c:
         13:f8:5c:9b:ee:4c:77:68:a2:de:07:0a:0f:98:80:e7:72:28:
         89:fc:3a:46:05:af:bd:d4:65:a4:7f:23:17:19:70:e6:b1:76:
         8b:e5:54:17:82:e3:a9:89:ee:88:1c:09:13:7e:40:73:e5:29:
         72:69:e9:44:72:e2:cd:0f:7a:df:68:ea:cf:58:5a:19:8e:ef:
         54:a6:a8:3d:16:25:dd:99:e7:d6:ca:75:e7:e6:cf:7c:e1:58:
         3d:aa:b9:38:23:29:37:29:f8:3f:42:b7:86:f0:98:9c:87:87:
         f3:6b:2c:83:13:87:5e:d5:b0:f5:5f:20:da:58:67:ae:d6:af:
         86:c7:6c:51:60:40:79:80:e4:95:22:e0:e6:a1:5a:25:36:80:
         f8:f4:9b:75:63:fb:d5:fd:99:21:89:57:22:6b:0d:4a:e2:7a:
         27:88:a9:d1:07:c5:eb:b1:2f:88:a7:98:c2:15:c4:9e:3a:c0:
         57:8c:de:08:6f:c2:07:95:8a:28:0e:9f:d8:1a:25:ac:d1:04:
         58:a5:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:07:32 2026 by rpki-client