Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
File:                     CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json)
Hash identifier:          9ZBB6BBOpC/W2zb6r/Cc8z9+E8est6OqJMwWG1RgeXY=
Subject key identifier:   9D:D5:AE:6F:41:3F:6E:78:79:2D:DC:A2:51:41:AE:B2:74:C9:B0:9C
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Certificate issuer:       /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial:       01A0016FAF21AEE63CC210B8A40AF1038405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 18:01:31 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:31 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:31 +0000
Files and hashes:         1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: +nD6qi0cbYtYRz72a24jjYY+ZdF4+0Y+2pNR/gNFFME=)
                          2: qrwmnr0OEc9nAnaMZvs0-umIs9w.roa (hash: PZB6TM1PU5xxv8QQowAJ7WYR8h3/v/M9wazTIxePSNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:af:21:ae:e6:3c:c2:10:b8:a4:0a:f1:03:84:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
        Validity
            Not Before: Aug 14 18:01:31 2026 GMT
            Not After : Aug 15 18:01:31 2026 GMT
        Subject: CN=9dd5ae6f413f6e78792ddca25141aeb274c9b09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:35:28:46:d6:f1:5a:3f:28:ea:77:26:a6:
                    21:7f:16:f5:0f:b5:de:a8:58:d3:0e:a3:6a:d4:48:
                    1c:78:85:73:21:e6:65:f2:a4:32:54:d7:df:d2:cf:
                    52:40:9f:83:7d:99:8c:9c:11:fb:37:46:70:5e:f6:
                    c4:5b:8e:dc:c2:fd:e0:9f:4f:e6:ec:95:57:f1:8f:
                    e7:10:2d:ec:cb:84:97:ce:2c:da:01:2c:78:61:32:
                    56:88:d1:92:46:1d:9c:a0:c0:11:47:30:7e:2b:68:
                    e4:f7:de:e1:f7:e9:19:8a:4a:df:04:10:45:1a:75:
                    21:cd:99:fe:6a:cc:c7:64:27:49:67:d4:12:dd:48:
                    5a:0a:79:f0:db:51:3c:8c:c2:38:8a:06:cc:38:16:
                    f5:f9:0c:92:b3:01:f5:db:72:4f:1b:63:ce:e2:21:
                    7d:8c:99:70:24:82:a0:27:3e:ac:b8:54:b3:00:73:
                    b6:37:cb:92:8b:2e:05:9d:7f:ef:b8:e9:49:8f:48:
                    85:3d:9f:d4:e0:c6:4f:b0:5f:15:6b:69:be:3e:8d:
                    07:b5:16:6f:80:b7:b4:ea:1f:bc:fb:33:0d:72:f5:
                    5a:af:1c:8b:13:9c:33:32:88:e4:d6:38:bf:a0:d8:
                    7e:33:d9:0e:a0:5d:87:67:59:99:74:a4:86:28:1d:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D5:AE:6F:41:3F:6E:78:79:2D:DC:A2:51:41:AE:B2:74:C9:B0:9C
            X509v3 Authority Key Identifier:
                keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:da:44:73:5a:51:ac:dc:66:ee:e2:7b:be:e3:11:32:68:
         bc:a1:af:8f:1d:5c:40:14:4d:2c:39:e4:a2:0c:88:af:70:13:
         d8:cd:dd:dd:f8:88:8f:7c:37:82:2c:b4:da:0b:ca:e3:b8:cf:
         6d:43:87:06:63:1c:87:e0:e0:e6:91:67:65:85:f9:9e:6a:47:
         db:d9:ee:25:8d:40:ef:59:f6:cf:59:ba:0e:47:bd:72:b5:62:
         ca:9a:24:f0:9a:e4:05:52:93:da:34:b0:1a:a5:8e:de:49:3e:
         21:80:65:21:d9:78:0c:82:45:e9:eb:9c:90:8c:fe:b4:d3:ce:
         ed:2e:04:5e:ef:c6:0a:bd:1e:bb:cd:c7:16:29:c4:e6:d9:f3:
         e8:82:30:84:7e:55:cf:c6:f2:b2:e6:5d:42:25:45:2e:7f:01:
         aa:f0:8b:20:57:f6:ae:aa:10:35:36:e8:ef:80:55:09:cb:11:
         46:d3:e9:09:41:d4:c6:1e:96:ec:3c:ea:df:0e:11:d9:01:15:
         28:bb:70:50:79:1c:c3:26:06:50:96:42:df:b5:4f:ce:f5:36:
         a2:43:da:d4:22:72:23:87:e8:37:8e:81:93:6a:b6:8f:35:c8:
         7d:b8:93:b0:e9:bf:c8:d3:ae:98:4d:f1:0c:b9:f8:14:5c:7b:
         88:9f:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:59 2026 by rpki-client