Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          WN6kBfa4RspWymM0iPb+13di5lw/3hXe+UEPX+lMrP4=
Subject key identifier:   96:CE:84:35:3A:27:2D:58:05:1B:D4:82:0B:C6:94:E6:04:E7:13:BB
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       019F85688D045EFEDA81B5DFA1BB5944BF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          1429
Signing time:             Tue 21 Jul 2026 16:00:49 +0000
Manifest this update:     Tue 21 Jul 2026 16:00:49 +0000
Manifest next update:     Wed 22 Jul 2026 16:00:49 +0000
Files and hashes:         1: aq4p8HsGl9pKO4noCxxMdLO1S3k.roa (hash: WnMcucTbt4CWLUco8Rw4MOO6knRkLOBVBAUuHlupSc8=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: co4mqtGMFPUxbRDza5SxLhikH+0d/BRfJUDOxJ+gbeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:68:8d:04:5e:fe:da:81:b5:df:a1:bb:59:44:bf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Jul 21 16:00:49 2026 GMT
            Not After : Jul 22 16:00:49 2026 GMT
        Subject: CN=96ce84353a272d58051bd4820bc694e604e713bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:53:43:bb:d6:37:a1:43:ac:90:cf:b1:1c:
                    06:c7:ae:7c:af:dd:98:5d:0e:aa:69:ca:46:15:5c:
                    4f:a7:05:a1:10:1d:21:f3:80:8f:81:ec:46:17:46:
                    7c:4f:d8:73:a0:61:04:60:2f:d7:23:05:56:d2:b6:
                    e2:dd:6c:e6:83:2d:51:c1:a2:bc:e5:e6:42:70:62:
                    f0:cb:6e:b0:39:c3:25:d7:d5:e4:88:4f:6c:81:59:
                    92:5a:78:a4:67:31:d0:21:7f:5b:f8:ab:d7:02:82:
                    0a:10:8e:5d:94:55:4d:29:08:06:31:c3:df:c7:4c:
                    a7:55:e4:ce:d0:96:2c:43:14:a5:8f:84:59:1d:f9:
                    34:bc:50:62:96:8b:a1:27:0f:74:f9:58:57:27:c9:
                    20:93:84:1f:6b:2e:c4:9c:d5:bf:c7:2c:2f:4b:7c:
                    0d:1f:10:ec:c9:f7:9e:bf:ce:d0:66:df:02:27:e4:
                    c3:2a:9f:9b:39:bd:8e:49:87:cb:43:a1:73:31:1c:
                    71:51:37:63:7a:ad:84:49:44:21:78:a5:4c:d7:f3:
                    6f:88:30:ff:36:da:ea:53:c6:d7:7b:b1:4a:7d:8b:
                    d6:53:62:04:fc:9f:56:3c:38:a4:f4:5d:81:c7:a2:
                    ae:1e:67:b9:45:70:30:40:76:b3:d6:94:f9:81:32:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CE:84:35:3A:27:2D:58:05:1B:D4:82:0B:C6:94:E6:04:E7:13:BB
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c6:d3:74:3c:b9:d2:34:a7:15:e5:19:07:37:f6:90:de:aa:
         2b:bb:d8:e9:51:0c:3b:f9:42:f6:8b:4c:31:82:30:e6:7a:1b:
         ab:d6:35:3a:2e:85:bc:e9:50:8e:42:41:95:a0:f5:ad:bd:68:
         4e:9c:57:88:92:af:32:de:4f:c3:20:1a:d9:87:33:d7:cc:ab:
         9d:2e:40:a8:3e:8e:23:71:da:a8:8b:da:1b:43:e5:d5:9c:52:
         2d:01:e8:79:69:7e:e1:d1:68:f5:16:bd:8d:73:f3:f3:6e:66:
         4a:db:bf:17:14:b3:7b:2e:81:f9:65:ac:c9:1c:1b:fb:b1:28:
         4f:c3:d5:c2:6a:97:71:f2:8d:0d:e5:ae:a7:95:b3:51:04:b8:
         3e:0a:fa:09:10:b3:af:34:a2:b6:c6:e0:a4:17:2b:88:7b:42:
         46:33:cf:22:8e:f4:38:d7:c5:82:1d:81:f1:9a:d5:f5:97:24:
         26:e0:50:a5:e1:b5:14:de:09:0e:80:75:ae:30:f7:78:6a:f1:
         4f:19:de:77:70:51:b6:da:6d:d3:9c:b5:1d:cb:1a:84:9a:27:
         1b:29:50:be:82:73:09:c9:89:ae:df:15:5a:51:42:23:e2:17:
         a4:e2:c6:ae:ca:8d:90:34:30:ea:ef:da:93:8f:62:a3:73:99:
         51:cd:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:40:44 2026 by rpki-client