Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File:                     Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier:          MJrQ9jvxBncHU3mdGsdCOufD0yuS5WJLyE1FEQzdhdw=
Subject key identifier:   56:FD:B2:51:7D:64:B7:FF:10:48:98:15:62:59:AB:BA:E5:BD:9B:61
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer:       /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial:       019EF8DD07904418BF7424ECD97AC43FFF47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number:          197B
Signing time:             Wed 24 Jun 2026 09:01:35 +0000
Manifest this update:     Wed 24 Jun 2026 09:01:35 +0000
Manifest next update:     Thu 25 Jun 2026 09:01:35 +0000
Files and hashes:         1: Z7YKoT2uZ4toIphTGHeS29211HY.roa (hash: IVtzdq6W6e4HPrHbXyquHCQIRite7QNBD3zP/ThGue4=)
                          2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: 2uNqCZ1tfk8GfOdsMFUW7MBpzRWBB/8ivLqb9v+t9NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f8:dd:07:90:44:18:bf:74:24:ec:d9:7a:c4:3f:ff:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
        Validity
            Not Before: Jun 24 09:01:35 2026 GMT
            Not After : Jun 25 09:01:35 2026 GMT
        Subject: CN=56fdb2517d64b7ff104898156259abbae5bd9b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:f2:df:ca:99:7f:79:96:b5:bc:fe:07:c6:
                    05:f9:5a:42:a7:46:8c:d3:1a:e9:11:91:95:8b:0f:
                    0c:61:fe:29:1e:75:18:0e:98:d4:4c:de:d9:7e:bf:
                    bf:73:39:ed:cb:16:a8:82:19:b5:75:92:53:ac:4c:
                    62:e5:05:55:d3:06:ba:09:6a:38:ba:ae:6f:45:d5:
                    ba:6b:62:68:a9:b6:76:75:d4:b8:b0:2c:11:e3:3f:
                    fd:46:85:0a:25:f8:ab:c5:ae:af:f5:f1:ee:7c:50:
                    8d:34:d7:ba:19:2a:ef:41:9a:f0:dd:36:a4:22:9c:
                    80:7e:a9:1f:aa:0e:a9:17:ab:b8:8c:25:e1:5a:aa:
                    6f:74:7d:ee:c7:87:34:57:de:e7:6c:84:ac:3e:9b:
                    e4:38:23:e7:03:d3:4a:5b:37:72:a6:cd:1f:24:75:
                    71:d2:b8:d4:57:7e:d1:64:e9:85:a6:b9:17:27:d2:
                    29:b4:8b:ec:fa:91:78:ae:ba:6b:35:9a:cb:7e:2f:
                    a7:9e:12:53:8e:a4:10:ee:36:e4:1f:2c:37:48:eb:
                    93:de:05:4d:f3:29:b4:09:91:bb:07:bf:6c:9c:9e:
                    9a:94:c2:2a:a8:17:c2:17:39:5a:8a:74:55:83:9a:
                    df:12:89:e4:93:8f:fb:ee:fa:2e:f9:32:10:a7:b4:
                    0e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FD:B2:51:7D:64:B7:FF:10:48:98:15:62:59:AB:BA:E5:BD:9B:61
            X509v3 Authority Key Identifier:
                keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:8e:97:30:cf:82:61:ae:3c:28:fd:d0:ee:bc:2c:8e:2a:
         3b:5a:bf:02:b2:0e:e9:5f:84:92:b0:8d:47:e5:74:22:39:78:
         d8:20:9a:7d:ba:5a:e3:a8:03:bd:05:8c:57:4e:8b:fd:aa:ef:
         8e:dd:24:e6:32:3a:56:43:d6:86:e0:e2:c5:6a:07:a5:44:64:
         b1:ed:83:1b:57:7d:97:41:d3:22:5a:70:94:20:ae:79:3b:be:
         be:b7:d9:1c:c7:7a:13:f7:3d:6a:1a:b8:cb:17:24:4b:6e:fb:
         20:90:83:2e:52:53:2d:2a:e9:69:3e:9e:12:cf:9b:cb:13:9e:
         f6:a7:51:cd:93:1f:51:35:75:74:5e:cb:56:24:26:f1:89:32:
         70:06:21:49:66:c3:5a:70:50:79:74:e4:b1:a5:26:4e:4e:34:
         57:9a:cd:37:a2:02:87:e7:32:b7:2b:1b:af:ed:c4:fd:b5:59:
         a2:b7:8a:f9:ad:05:6e:53:b1:8c:68:5e:90:98:14:f4:52:15:
         2b:56:2e:18:14:79:6a:3f:0a:bb:55:8c:cb:f3:75:8c:cf:62:
         93:03:74:96:4c:8f:89:12:fa:ad:fa:82:65:e0:03:80:a0:7e:
         6a:51:14:7e:28:77:6f:85:28:f8:a7:10:17:9d:7d:6b:70:2d:
         3f:a9:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 13:03:27 2026 by rpki-client