Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File:                     Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier:          OH1dq8KkxtYcpXmjFQeKSc/4Mev3hD3ldEYGIgW7Gb4=
Subject key identifier:   14:E6:67:61:1B:6F:30:D7:D2:61:DB:70:C1:F6:5E:27:64:84:07:6B
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer:       /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial:       019FF9B68BC12BB12E78A96950943A693938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number:          1A00
Signing time:             Thu 13 Aug 2026 06:01:57 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:57 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:57 +0000
Files and hashes:         1: Z7YKoT2uZ4toIphTGHeS29211HY.roa (hash: IVtzdq6W6e4HPrHbXyquHCQIRite7QNBD3zP/ThGue4=)
                          2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: 4eUNmK/VS03cQKRWvTn6XpP0SRcb6POjLx9CR+fxUFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:8b:c1:2b:b1:2e:78:a9:69:50:94:3a:69:39:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
        Validity
            Not Before: Aug 13 06:01:57 2026 GMT
            Not After : Aug 14 06:01:57 2026 GMT
        Subject: CN=14e667611b6f30d7d261db70c1f65e276484076b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:a1:d3:a9:10:cb:3f:c9:d3:87:48:c3:e5:
                    0a:44:15:85:ec:80:0f:9a:da:f8:9f:fa:29:a0:4f:
                    40:62:6c:70:ac:19:1d:74:8d:4f:66:a3:d2:65:c8:
                    aa:d1:af:a0:85:82:a0:9f:f6:18:e9:0c:cd:09:84:
                    23:2e:2b:27:80:4a:43:63:bc:3c:92:14:2f:94:9b:
                    03:22:6d:70:84:fc:d6:88:6a:ca:e1:1b:5c:6e:7e:
                    c8:31:de:b8:17:dc:f7:9c:9c:9d:bf:f5:ff:f5:22:
                    3d:13:72:3d:29:c1:05:81:41:d7:a8:d6:75:de:a7:
                    52:06:72:39:86:96:ac:c5:34:e8:f0:9b:c0:e5:80:
                    ce:90:17:a5:91:bd:26:b6:42:9b:b2:70:3b:3a:71:
                    10:0c:ae:99:f2:1c:44:13:00:02:64:2f:13:e0:bd:
                    b2:2d:1a:31:33:e6:66:42:19:76:9d:4f:9d:29:4f:
                    1e:fa:78:46:f9:7f:af:c8:60:dc:2a:d1:12:d7:3a:
                    40:d5:87:23:81:93:2b:e8:31:d3:b7:cf:93:46:56:
                    1c:12:1f:91:8e:60:29:6b:6b:c1:42:fa:4e:d2:72:
                    f6:16:02:41:d2:e0:10:6a:18:e9:1a:e5:a7:e3:0c:
                    55:2c:e8:71:b4:79:42:ee:95:0d:33:a4:20:2d:cb:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E6:67:61:1B:6F:30:D7:D2:61:DB:70:C1:F6:5E:27:64:84:07:6B
            X509v3 Authority Key Identifier:
                keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:92:0a:7b:b1:7f:5d:ea:b8:a9:27:79:94:f2:03:b6:ea:
         a5:7b:72:e9:6c:af:dc:12:26:eb:e1:47:88:2d:5a:6a:3b:25:
         38:5d:62:f8:88:ac:77:70:24:48:cd:1c:5a:18:19:07:5e:09:
         4f:98:bd:e0:50:8b:e9:78:b2:0a:1e:b9:f0:5c:81:81:d0:27:
         b8:88:fd:cb:18:13:1a:0c:b6:f3:80:c8:0c:f6:77:f8:d3:cb:
         d5:0e:8d:80:8b:ac:90:bc:80:cc:50:85:2f:e9:0a:7f:18:ad:
         9f:b8:3d:d4:3b:e6:44:96:a2:17:1d:15:16:b5:5c:a0:a1:3b:
         ef:2d:24:d5:33:8d:19:0f:be:20:af:dc:ed:b8:e3:96:79:d8:
         aa:a7:31:ff:7c:02:6a:cd:6a:0c:bd:ef:03:c6:d5:87:70:6e:
         3c:08:33:6e:6e:44:66:fc:d3:37:89:d0:b6:74:1f:f7:84:53:
         bb:59:2e:c9:f1:33:17:c8:c6:f8:f9:fd:7f:e4:09:d7:4d:53:
         ae:43:24:c6:fa:9b:ba:4d:58:e4:76:f0:27:c4:8e:f8:68:bb:
         57:ba:8c:35:9a:a9:a9:7e:20:cd:bb:8b:a4:53:d8:39:7b:84:
         10:47:87:2b:a3:88:73:16:16:3e:ab:12:91:9f:2a:f0:5b:05:
         b8:a7:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:56 2026 by rpki-client