Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          /Q7TjBv/kRno+dDMFKqQVLQaLorYGkyhfpjHQhtbOkU=
Subject key identifier:   24:90:2A:57:97:AA:6E:7F:58:31:2C:13:1E:18:93:46:31:99:C9:0D
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       019FCC6FB797F99BB11706E89CF0E56D4AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          1422
Signing time:             Tue 04 Aug 2026 11:01:41 +0000
Manifest this update:     Tue 04 Aug 2026 11:01:41 +0000
Manifest next update:     Wed 05 Aug 2026 11:01:41 +0000
Files and hashes:         1: 1WLFi2v7sG_Ja4VJNzAjc2XQod8.roa (hash: xx9XlKrKpQ671NpkBL4SSdqZlPtj4brGXb4dxduLCWs=)
                          2: dwAqRvLPaFJvT81jjmY8z6OAffc.roa (hash: U+GbR8Ko/UO/PdAN8+pRGxNFE5XM37ujAKQFqPLbxQ4=)
                          3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: 4U0cnKoACQUkVGMhHaCIoXxAJqD6oNuFLkAgVBBS2YY=)
                          4: mstzb26BC_IbEF1cblkahySAWUo.roa (hash: ovsvskCBj0pzy7ZuC+YBMlAXo2c5eeshaQejsMGZzOU=)
                          5: y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa (hash: hK90cOpXZcr7Ami6NbNqe49Tz8xd4CBkB2ANlYx8mv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:6f:b7:97:f9:9b:b1:17:06:e8:9c:f0:e5:6d:4a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: Aug  4 11:01:41 2026 GMT
            Not After : Aug  5 11:01:41 2026 GMT
        Subject: CN=24902a5797aa6e7f58312c131e1893463199c90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:7b:63:7a:05:86:87:dc:18:5c:57:6f:82:
                    e9:51:40:31:a7:22:75:ec:50:94:01:40:9d:a0:2d:
                    0a:df:5e:6a:b2:3c:ce:41:eb:05:92:9d:94:96:aa:
                    e2:e4:ca:af:6b:a0:31:24:8a:ca:fd:b6:c0:28:17:
                    fb:83:dd:d5:4b:0d:db:c4:4a:e4:39:5a:20:08:55:
                    fd:cd:65:db:56:4f:19:dc:8f:2e:dd:94:14:37:d9:
                    09:40:8a:6b:1b:ee:74:d9:9b:6d:54:9c:8f:b6:aa:
                    3e:12:3b:ac:64:c3:e7:4e:13:38:dc:2b:35:59:c4:
                    06:51:f2:da:28:96:ba:cd:26:5b:ac:c7:dd:a0:54:
                    61:f1:12:8e:c4:9d:f1:97:5a:28:89:ae:ad:3f:b6:
                    48:94:e4:19:b9:3f:90:b4:f4:fe:d9:f4:3d:6a:98:
                    c7:92:51:59:47:bc:4a:c8:1a:6c:87:bb:49:5f:6f:
                    1a:67:0b:d1:c7:f0:4a:25:ee:90:d2:e6:b4:4d:32:
                    a8:ed:22:ed:01:63:22:a2:94:25:a4:83:ae:d8:3b:
                    8e:e5:bc:fb:5b:93:b9:d7:38:1d:6f:6f:ba:fc:07:
                    b3:f1:0e:81:94:24:45:6d:75:8d:2d:f4:fb:22:dd:
                    9c:8c:82:85:43:3b:62:2d:41:03:e3:56:92:0a:a5:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:90:2A:57:97:AA:6E:7F:58:31:2C:13:1E:18:93:46:31:99:C9:0D
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:06:52:70:e4:8b:78:4c:f2:21:f9:97:e5:95:4d:33:a7:
         5b:49:19:a6:f8:62:44:64:1a:30:b7:fd:ce:7c:46:58:33:3b:
         36:6a:6e:bf:ff:3c:a8:73:1a:b8:66:a2:0c:a9:65:7f:07:d4:
         82:3d:24:fc:95:d4:bc:7b:c4:94:44:99:2a:a3:34:75:f3:7c:
         ec:8b:5a:1c:bb:1d:99:8e:fc:08:aa:c1:af:ae:a8:ae:19:ea:
         0d:b5:96:d6:89:85:a5:36:b4:56:55:db:ae:a1:e3:52:e0:0b:
         9c:a4:3a:1a:11:a1:da:2f:d9:40:62:1b:e2:b4:db:77:c3:08:
         31:64:af:0b:3c:f8:02:7d:0e:0f:76:50:1c:60:15:fb:86:bf:
         a9:df:50:97:32:32:2b:9f:e7:a5:0f:67:49:83:ae:a6:52:18:
         fe:33:fa:6b:48:69:92:c2:7c:30:67:1f:1e:24:c1:d6:eb:ba:
         50:36:f3:34:bf:65:c2:ae:4c:f7:55:90:10:e3:6f:06:3c:cf:
         06:b6:2b:dc:77:d6:3d:ba:8e:91:bc:93:2c:21:4a:9a:52:c9:
         79:ee:20:80:e8:8c:0a:ad:86:c0:33:2d:09:73:76:67:7b:40:
         41:dd:f9:39:41:91:1d:5e:fd:6c:b2:e8:d6:f1:4c:7b:22:c6:
         c1:bb:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:59:28 2026 by rpki-client