Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File:                     Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier:          J9dydIsGICpOIrHKE29pD+AAUovI7nhgCbFyXEXhpac=
Subject key identifier:   E4:B4:F7:6B:8D:B2:B7:85:4E:F5:D2:62:C2:2E:BB:30:17:02:9E:FD
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer:       /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial:       019F98EF498FD7C3840FBBA72DEFE83C4A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number:          19CB
Signing time:             Sat 25 Jul 2026 11:00:46 +0000
Manifest this update:     Sat 25 Jul 2026 11:00:46 +0000
Manifest next update:     Sun 26 Jul 2026 11:00:46 +0000
Files and hashes:         1: 1yqrC5cFVqno3yUjEb2JEevt8hU.roa (hash: ALDcP7GRoyghMSXeDYW2VCy+XpgGkyrbpJ7hv982jsc=)
                          2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: B+ZIR0In4Cx4iquus+P3bspFTAyEKNC7q8OnmJKrSCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:98:ef:49:8f:d7:c3:84:0f:bb:a7:2d:ef:e8:3c:4a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
        Validity
            Not Before: Jul 25 11:00:46 2026 GMT
            Not After : Jul 26 11:00:46 2026 GMT
        Subject: CN=e4b4f76b8db2b7854ef5d262c22ebb3017029efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:ba:a6:92:b8:9e:ec:2d:b7:97:ce:0c:15:
                    cd:cf:e2:3e:fe:f5:f6:87:a7:97:b4:fd:0a:82:73:
                    4d:a2:68:26:3f:74:66:c6:2a:36:27:58:47:18:ff:
                    ee:f9:e2:c5:23:d2:6c:18:03:46:b3:24:89:d3:a2:
                    27:1a:67:ce:fd:17:e9:5f:0d:a5:e6:ef:e1:19:a2:
                    a8:a7:48:cc:40:ed:09:70:de:ae:99:95:0f:c1:07:
                    bd:02:e4:14:15:e5:5f:d1:48:38:24:05:b3:eb:96:
                    97:88:5a:e0:16:bb:20:f5:05:e6:1c:cc:27:0c:58:
                    c5:0c:23:15:46:73:19:c9:50:88:71:e5:43:e3:3d:
                    2b:67:98:7b:1d:31:84:10:33:b1:47:5d:ae:3e:94:
                    23:20:34:80:80:85:11:cc:70:bc:2e:b7:e7:7d:a7:
                    83:16:a0:5f:fa:8b:dd:13:2b:0d:94:d2:eb:cc:d4:
                    52:46:18:c1:ad:cd:25:a0:e5:fe:2e:4a:c5:ed:ca:
                    4b:2a:02:63:0c:e9:df:17:04:46:2a:33:f4:2a:77:
                    8b:f1:0b:7a:b6:57:dc:95:bc:90:9b:c1:5c:a7:37:
                    8c:1b:f6:41:0b:7f:81:a1:2a:73:fb:ec:54:ec:a3:
                    89:29:63:df:3a:26:e5:95:67:5b:6e:fb:df:f1:0c:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B4:F7:6B:8D:B2:B7:85:4E:F5:D2:62:C2:2E:BB:30:17:02:9E:FD
            X509v3 Authority Key Identifier:
                keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e4:53:fe:98:9a:ca:ec:ca:f3:8f:2e:c2:ad:ee:05:30:2a:
         8c:9f:16:03:7d:d2:81:ed:56:9c:a1:d9:09:d0:a6:9a:e6:66:
         4c:bb:37:9f:1b:db:aa:09:3f:d1:de:42:c9:54:85:7b:76:bf:
         f0:b8:67:38:fc:09:1b:3f:dd:2c:c0:29:7e:27:1d:51:f9:39:
         38:0b:93:de:8f:5c:ce:e5:d3:94:f8:e4:98:f6:cf:b6:0f:2a:
         8c:9b:fe:20:b4:92:50:ce:51:13:ee:11:54:b0:2f:22:e5:ca:
         83:ac:81:48:f6:de:c4:0f:59:56:50:91:fd:ed:cf:cf:04:f0:
         52:63:7e:8b:21:a6:5e:b1:2d:3b:ee:40:02:8c:18:d0:06:19:
         53:5c:6d:3c:97:30:e7:37:18:55:9d:96:e3:5b:4b:39:b2:18:
         30:85:ad:af:8f:d0:10:d7:b5:07:8f:66:64:33:f2:3a:3c:c7:
         84:2c:16:24:81:8c:8b:e1:b7:6c:5c:38:12:13:97:0e:7a:d9:
         d3:d9:58:2b:af:03:54:0a:8f:76:1a:db:8c:24:1c:7a:ea:ff:
         65:ee:10:bc:a6:3d:72:ae:e3:81:48:7b:31:ce:37:5e:9e:a4:
         68:a9:7c:e2:79:b6:ae:b4:22:7e:33:72:9a:cd:d9:49:9d:5c:
         21:cd:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 15:08:22 2026 by rpki-client