Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          cjiVLsXFd7jWARdnKvEo7XmA89/VWe+sFbxRFy3iJRw=
Subject key identifier:   D9:FD:35:B5:07:76:17:BB:91:60:6B:E5:88:6E:F7:8E:01:3A:8D:0C
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       019F37852973CC03288D3B7F1197C9D89979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          1999
Signing time:             Mon 06 Jul 2026 13:01:41 +0000
Manifest this update:     Mon 06 Jul 2026 13:01:41 +0000
Manifest next update:     Tue 07 Jul 2026 13:01:41 +0000
Files and hashes:         1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
                          2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
                          3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: uqq80uUFhdTTmLLgs4F9BksVJVpR5r0uiDEFy8u6bC0=)
                          4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:85:29:73:cc:03:28:8d:3b:7f:11:97:c9:d8:99:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Jul  6 13:01:41 2026 GMT
            Not After : Jul  7 13:01:41 2026 GMT
        Subject: CN=d9fd35b5077617bb91606be5886ef78e013a8d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:f5:d6:d8:53:81:18:d7:4a:98:f0:5b:dc:
                    df:f6:45:7e:9f:e3:13:fe:2f:20:29:4a:ea:f7:ac:
                    f1:2d:0e:4a:57:38:f4:bc:c4:f0:b5:ef:b4:27:c0:
                    34:ef:1d:1d:59:cc:e8:39:01:73:cf:64:5c:5c:08:
                    5f:dd:ca:2e:91:20:cb:2c:4b:2f:54:a0:d5:10:e5:
                    f0:0e:ad:3b:69:57:61:c2:73:04:4b:64:f4:00:5f:
                    08:bb:d3:ad:9f:09:43:07:cf:60:f4:b5:6e:c8:d1:
                    ff:49:93:8c:8b:e2:4d:dc:75:55:5d:2f:ae:80:67:
                    4e:e3:ed:e6:51:8e:8c:80:af:2d:c9:79:19:dd:94:
                    ec:dd:27:7f:bb:81:22:3a:25:f9:b8:de:2c:45:83:
                    47:1e:3b:61:c0:75:46:f6:24:1d:73:81:94:06:f2:
                    1d:73:47:78:f3:7e:e8:c4:4b:a2:46:6d:13:89:ea:
                    bb:30:23:b1:c9:12:00:83:65:e3:62:1e:d7:1d:3d:
                    ab:b9:5c:49:4f:66:64:7e:5a:ec:98:9f:6a:19:97:
                    f7:89:d4:8e:c1:ee:f1:fe:c7:46:bd:a5:48:12:3f:
                    61:91:a8:e3:a3:d6:14:8c:d7:97:94:8a:62:7e:78:
                    1b:03:d9:d0:37:76:54:6d:43:e9:78:b2:fc:42:fe:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:35:B5:07:76:17:BB:91:60:6B:E5:88:6E:F7:8E:01:3A:8D:0C
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2f:7b:92:a3:1c:c1:dc:3e:59:f1:34:37:a4:9c:e1:bd:e3:
         da:ea:d8:2d:f8:69:e5:6f:03:2f:da:f7:25:05:96:7c:a7:d9:
         23:8d:48:54:37:f2:30:fd:9b:54:3f:2c:3b:8e:2a:ec:8f:24:
         ae:dd:46:2b:e6:1a:6e:63:de:ab:72:49:e9:0d:16:4d:99:6b:
         4e:0d:8a:10:2e:a4:9e:07:5c:d6:f5:68:88:8e:a2:9a:3c:aa:
         32:9f:fa:91:b7:77:ea:9d:3c:e7:10:42:6b:ea:ac:49:00:cd:
         82:4c:41:a1:6e:78:2f:b4:97:33:85:52:5b:e9:67:c7:aa:d8:
         76:ad:e6:88:2e:07:da:fc:a4:7c:ce:9d:4b:20:06:e2:ca:8f:
         31:97:ec:6e:7d:73:13:32:f6:09:a5:ff:18:b9:9e:1a:36:36:
         94:43:c3:6a:cd:b2:38:5a:cb:c5:17:ed:02:64:15:7d:a8:26:
         7e:7b:3c:fd:a1:6e:c1:23:35:05:00:e2:ab:81:ef:b8:f4:11:
         80:d9:f8:24:72:6d:3a:08:f3:e0:74:29:fb:3d:9c:41:b1:a4:
         91:88:44:b8:08:24:9f:4e:9f:da:63:ba:09:3e:03:7d:20:69:
         2f:d9:95:67:a9:33:0f:c6:75:d5:34:c9:c7:c3:88:fa:59:46:
         89:04:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:10:36 2026 by rpki-client