Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          f7zfax8ipKYgXKLk9efoEubTQDZqc3nxwdmcB9wW6Fo=
Subject key identifier:   42:66:0C:8B:92:20:E9:7F:68:72:A9:AF:E3:9F:8E:73:16:54:EB:1B
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       019F82D5AA1DCCA99989C5A9E2DA1FC081D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          08F3
Signing time:             Tue 21 Jul 2026 04:01:08 +0000
Manifest this update:     Tue 21 Jul 2026 04:01:08 +0000
Manifest next update:     Wed 22 Jul 2026 04:01:08 +0000
Files and hashes:         1: 4NzEVadCmy_c_rfb2yC17CRbiPw.roa (hash: up/hCbMC+lT39FafzSp9s/xSEH9WLx3l5PerUqpItUQ=)
                          2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: qn2yBBLFvgtsspFutwr4BNwifqplDhi9/eoVBI8eKik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:d5:aa:1d:cc:a9:99:89:c5:a9:e2:da:1f:c0:81:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: Jul 21 04:01:08 2026 GMT
            Not After : Jul 22 04:01:08 2026 GMT
        Subject: CN=42660c8b9220e97f6872a9afe39f8e731654eb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:30:20:6a:b2:93:e4:68:76:52:11:ae:d7:
                    2a:2b:80:70:38:e8:90:28:0b:84:0a:9e:3f:fa:bc:
                    18:4b:06:d2:32:f1:63:50:ea:38:4b:2f:49:97:ed:
                    37:fb:b9:e2:17:ed:3e:11:77:ca:7b:a3:f3:d5:2e:
                    a7:b6:d0:93:de:a6:83:22:c9:3d:e2:5b:8c:a1:90:
                    c5:e5:4b:7c:76:9f:bc:5b:0f:db:2d:0b:69:57:4b:
                    ec:b5:83:70:29:57:97:c6:cf:7b:64:f2:1e:20:b7:
                    a2:07:49:a1:7a:3b:9a:a8:99:8b:1b:81:59:45:65:
                    1b:65:25:ba:98:19:9b:95:8b:04:57:a6:4d:4d:fd:
                    ac:6e:3c:3c:bb:7b:a1:18:8b:ea:ec:db:47:96:a0:
                    f7:5c:5a:83:78:9c:4c:f9:36:9d:88:fc:5d:ce:ea:
                    4c:8f:bd:64:c3:a0:48:f5:e1:14:14:3d:1c:08:bc:
                    1a:80:78:e4:9b:ca:7f:08:2f:a6:b6:6c:ce:5b:8f:
                    c2:5b:97:9b:bb:e7:3d:f8:52:b2:2b:e3:cf:e7:01:
                    89:78:0f:00:36:63:5a:03:42:bb:aa:b8:49:0a:33:
                    6c:32:2f:e0:d6:34:87:83:c3:a2:b0:2a:ce:12:2a:
                    ab:2e:86:01:ec:ba:4d:64:ed:0b:7a:9f:d1:99:2f:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:66:0C:8B:92:20:E9:7F:68:72:A9:AF:E3:9F:8E:73:16:54:EB:1B
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9c:39:da:0e:e9:07:b1:28:13:2d:5f:ba:da:7e:74:2e:c3:
         b1:f4:d8:66:fb:40:75:a9:18:5c:34:6e:e1:28:a0:d6:96:1c:
         6e:37:b6:36:3b:e2:92:80:bb:dd:31:e3:74:9c:60:7e:75:5d:
         c5:b3:2e:61:12:32:e6:ce:44:c8:10:9d:c3:66:23:11:5f:3f:
         58:d2:59:62:45:69:76:a0:da:72:3a:37:51:16:5c:49:74:15:
         6d:3e:04:6d:01:04:ad:60:f3:d7:d0:61:fa:7f:2a:72:df:b1:
         04:50:ba:1e:35:b7:cf:59:b2:50:73:04:03:43:cc:46:b3:86:
         85:0d:1e:db:c0:9f:f3:bc:6e:e9:82:32:0b:5c:45:92:e6:ea:
         94:64:47:25:71:1f:36:63:ac:c2:53:04:00:5f:19:11:4a:ab:
         9e:43:1a:cd:34:d7:9d:c3:df:03:53:96:7b:b5:31:53:77:ae:
         c4:03:ff:c8:dd:b5:78:2b:27:ac:bc:9c:95:cf:1e:ea:08:c0:
         3f:89:e4:4d:be:bc:09:2f:f2:14:48:ef:c2:46:61:f3:40:b6:
         5e:ad:51:28:3a:fb:23:5c:64:16:0d:08:72:fb:87:65:27:e3:
         88:96:7c:da:e0:2e:08:6a:41:6f:9b:02:2f:6d:d6:bc:52:74:
         1e:5c:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:04 2026 by rpki-client