Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.mft
File:                     bzumz3nFWiV59WPufUVG3b15n5M.mft (raw, json)
Hash identifier:          rAfLq9JNHDegPnW27CGHl6dULEN7h59Ma9HWRxwt9p4=
Subject key identifier:   02:22:55:AE:55:E7:ED:6A:38:5C:44:C1:75:19:7B:90:59:EE:88:63
Authority key identifier: 6F:3B:A6:CF:79:C5:5A:25:79:F5:63:EE:7D:45:46:DD:BD:79:9F:93
Certificate issuer:       /CN=6f3ba6cf79c55a2579f563ee7d4546ddbd799f93
Certificate serial:       019FF97E9F6E9274067356A9D597F3F5B70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzumz3nFWiV59WPufUVG3b15n5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.mft
Manifest number:          0C
Signing time:             Thu 13 Aug 2026 05:00:52 +0000
Manifest this update:     Thu 13 Aug 2026 05:00:52 +0000
Manifest next update:     Fri 14 Aug 2026 05:00:52 +0000
Files and hashes:         1: Q1w-Bs6jfTowNymPHFm55S8gHwI.asa (hash: SfZ/zly/5VvKGmydfZ73MXbkedBsN91u4THWza4zaTY=)
                          2: bzumz3nFWiV59WPufUVG3b15n5M.crl (hash: EEe0RAk48CSrYpUs1v7nAD7B0CwOmkXGVUNMkVnd5NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzumz3nFWiV59WPufUVG3b15n5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:7e:9f:6e:92:74:06:73:56:a9:d5:97:f3:f5:b7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3ba6cf79c55a2579f563ee7d4546ddbd799f93
        Validity
            Not Before: Aug 13 05:00:52 2026 GMT
            Not After : Aug 14 05:00:52 2026 GMT
        Subject: CN=022255ae55e7ed6a385c44c175197b9059ee8863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:13:99:43:b0:49:df:df:b4:69:c0:e0:83:
                    79:8d:f5:22:66:e1:28:a0:60:74:86:a3:bc:80:aa:
                    ca:b4:a6:40:cd:52:bc:6c:79:62:19:fc:13:35:58:
                    66:b4:ed:81:37:7c:b2:23:33:e7:3a:d1:c4:d0:bb:
                    9d:7a:5e:00:e4:0c:de:a7:e1:a7:9b:dc:be:de:83:
                    5d:b7:7f:36:f2:16:c8:40:49:cc:16:cb:22:53:95:
                    ca:c4:4c:b9:3f:5c:12:da:c0:49:66:42:99:1f:78:
                    8d:9c:be:b5:b5:89:f4:bb:cb:b5:d5:1d:ef:be:e7:
                    65:e2:e5:9f:ff:df:50:a5:89:9b:21:e6:ab:cc:db:
                    b5:29:cf:ca:d2:6b:46:69:96:71:ec:77:c8:76:18:
                    1a:d1:a3:f3:a7:ca:1b:c8:11:cb:47:0a:9b:54:06:
                    6d:b4:dd:9b:a5:39:37:ec:e0:aa:d3:c5:db:40:4d:
                    05:13:4f:4d:18:f9:ea:e2:9e:0c:4d:25:18:df:7b:
                    e9:a8:5a:0f:28:7a:46:b3:1e:04:fd:b5:cf:43:d5:
                    c7:bb:c0:6e:ff:4a:d7:da:ee:e2:fb:dd:c7:e2:4e:
                    18:f0:68:8a:e5:9d:c4:44:3a:14:d6:37:1e:63:c2:
                    24:05:4c:83:37:c5:a6:4b:5d:6b:64:06:4f:83:64:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:22:55:AE:55:E7:ED:6A:38:5C:44:C1:75:19:7B:90:59:EE:88:63
            X509v3 Authority Key Identifier:
                keyid:6F:3B:A6:CF:79:C5:5A:25:79:F5:63:EE:7D:45:46:DD:BD:79:9F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzumz3nFWiV59WPufUVG3b15n5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:27:ee:6f:da:7a:f1:71:b3:f2:84:b4:5d:b0:dd:f8:bd:bd:
         2b:4d:13:f3:28:b2:d9:17:10:70:0c:82:3a:88:6a:3d:33:46:
         12:b7:57:01:2e:93:53:c1:ac:53:d2:ff:51:ef:ca:b6:4d:6b:
         56:12:b2:51:09:af:30:b5:36:97:c2:5b:75:54:af:ff:cb:6b:
         aa:fe:f9:ba:55:b5:78:20:4b:27:dc:59:21:3f:36:2f:28:cb:
         31:bf:20:46:5d:e6:a2:42:39:70:eb:68:fb:96:80:c0:3c:71:
         34:2f:df:5c:8d:01:86:37:d5:e8:5c:2c:dd:94:cc:74:64:b1:
         7f:0e:f5:20:8d:cb:e7:79:6a:d9:0d:4c:18:91:64:29:87:e1:
         0e:30:5e:b8:37:e5:76:80:0d:3d:cd:e4:cd:33:b4:12:27:fb:
         8b:82:7e:1b:d0:6c:7a:5e:18:58:a6:66:9c:c4:dd:01:d1:88:
         f5:b2:8c:0d:3a:96:20:ff:d7:26:62:13:6b:97:3c:44:72:42:
         a7:df:71:7a:4c:ee:13:33:d6:40:c0:50:a4:46:c3:55:28:b4:
         ce:58:43:96:30:90:e6:9b:42:01:da:ef:2d:21:81:45:4d:23:
         9b:a4:14:6d:0b:fc:03:bb:87:4f:3c:54:e0:5a:0f:b2:36:a3:
         f5:e1:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:50:53 2026 by rpki-client