Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File:                     z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier:          VfjFhF1oEzvhm2K7UZ1J/k5tXigDK8+GE1UKsC28k1U=
Subject key identifier:   8C:E6:04:77:8B:24:8B:E2:D2:02:04:A0:87:21:FB:87:B9:3B:D5:27
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer:       /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial:       019FA3730467BA1E0D6D785A1F05A83A51EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number:          09F0
Signing time:             Mon 27 Jul 2026 12:00:51 +0000
Manifest this update:     Mon 27 Jul 2026 12:00:51 +0000
Manifest next update:     Tue 28 Jul 2026 12:00:51 +0000
Files and hashes:         1: 9Lw22K23J7w-6XzIDg67QJLRG6o.roa (hash: ztr8UWAWB/buB6JT5GD2YfXKLhYvXE9x4n0VRU8ceQo=)
                          2: G5FnSUz31AbVLph_XF_b2V-WE4k.roa (hash: OyarEjklBShgcZGA7xw5r7NANY/GN4xIbQ4B1wFv/ow=)
                          3: RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa (hash: exNJaK8lpq9kvpL01DCgkaVHl771CgqPSPw4MI32Txo=)
                          4: Uh0-hSK_XWDc2RnwMwkKmaaS-80.roa (hash: BJW5l+5BPbkG+XCltX7aXXNnUzSiJ2XCIUfhxIHiCPk=)
                          5: fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa (hash: WGVPl1NHnlzzsePSOzjj+Gl8SDY0jb2m343GSbYT0V4=)
                          6: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: zURi0eyqhfUKsjq3uN8WrIp9O9lNBNN45cP8Iccyydg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:73:04:67:ba:1e:0d:6d:78:5a:1f:05:a8:3a:51:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
        Validity
            Not Before: Jul 27 12:00:51 2026 GMT
            Not After : Jul 28 12:00:51 2026 GMT
        Subject: CN=8ce604778b248be2d20204a08721fb87b93bd527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:ab:02:93:e3:23:d6:9f:39:f6:19:9b:d6:
                    7a:aa:5b:8d:e6:42:68:49:91:9f:e2:ea:7f:d5:fc:
                    90:0b:a4:0c:c0:e4:1d:75:27:8e:b3:67:3c:66:dc:
                    77:c9:9b:2a:0d:52:2c:73:30:67:43:db:48:1f:5b:
                    dc:2e:59:19:b5:54:0a:46:67:25:b2:38:ef:d5:74:
                    93:07:55:da:83:0c:df:84:5b:cb:ca:84:4d:79:18:
                    a7:7b:a7:73:59:36:f1:c3:e8:27:3f:f5:3f:c5:81:
                    14:9a:44:c6:df:0e:81:5f:31:24:08:ea:93:dc:37:
                    00:93:56:2e:99:f1:6b:f6:54:89:36:28:77:5c:92:
                    7a:2f:35:3c:33:b6:e6:f4:d2:11:09:34:fb:1d:33:
                    24:17:4e:49:ec:79:25:58:73:68:fe:13:f4:6b:93:
                    bb:8a:3f:f0:03:11:22:ea:dd:d9:24:97:9d:66:48:
                    a8:a8:db:62:61:44:8a:e6:d2:1b:ca:6f:3b:33:3e:
                    12:e9:04:43:ae:d2:cc:d5:b6:42:94:25:37:f5:d7:
                    60:df:4b:4d:44:c7:d8:05:e3:c4:dd:ca:e7:8e:1b:
                    fa:66:59:82:dc:e7:bd:7f:d6:96:22:09:e7:5f:7b:
                    22:b0:82:da:bb:24:01:3a:63:ba:93:74:cb:ca:2c:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:04:77:8B:24:8B:E2:D2:02:04:A0:87:21:FB:87:B9:3B:D5:27
            X509v3 Authority Key Identifier:
                keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:bf:10:82:e3:00:bb:ad:26:00:4b:0c:14:25:f2:d0:78:
         0c:3a:d2:6a:d1:f6:cc:84:f5:1f:3e:9d:ad:d0:8a:fa:b3:62:
         31:6c:5d:75:1f:19:80:ae:9b:72:3b:9f:ad:f8:b9:df:ed:4f:
         45:d8:7e:79:74:54:32:18:57:58:98:de:6e:a2:45:79:27:ad:
         06:ca:1a:4a:e7:68:44:d1:b5:0f:8c:35:ec:e0:db:d1:d0:03:
         d3:08:b5:b7:1b:74:d8:f8:a9:cd:38:11:eb:5f:d3:3c:af:b8:
         7a:a6:b8:14:c6:30:37:60:53:44:60:96:c6:4c:5e:6a:b8:b8:
         ab:e3:07:58:75:14:96:f2:d7:7a:cd:96:f6:29:e5:0e:65:18:
         ec:fc:a9:87:0e:0f:06:dc:be:bf:73:6a:da:94:03:08:ff:4b:
         73:3e:96:80:6c:35:60:e4:f6:a6:3b:ff:bd:f8:38:86:15:f0:
         72:e6:6c:94:59:2d:ca:bd:3f:29:14:5a:51:89:b4:f1:1b:b9:
         5d:21:27:b1:05:f8:05:b7:05:39:95:f4:d6:f4:6c:13:cb:8d:
         bb:15:69:b2:71:6f:64:60:5e:60:0d:c5:23:1c:36:d2:0e:52:
         f8:b3:ff:6e:23:b8:b4:12:fd:85:e7:67:e7:0b:e8:f8:af:de:
         84:0e:f2:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jcwRnuh4NbXhaHwWoOlHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk
NDBkYzYwHhcNMjYwNzI3MTIwMDUxWhcNMjYwNzI4MTIwMDUxWjAzMTEwLwYDVQQD
Eyg4Y2U2MDQ3NzhiMjQ4YmUyZDIwMjA0YTA4NzIxZmI4N2I5M2JkNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YSrApPjI9afOfYZm9Z6qluN5kJo
SZGf4up/1fyQC6QMwOQddSeOs2c8Ztx3yZsqDVIsczBnQ9tIH1vcLlkZtVQKRmcl
sjjv1XSTB1XagwzfhFvLyoRNeRine6dzWTbxw+gnP/U/xYEUmkTG3w6BXzEkCOqT
3DcAk1YumfFr9lSJNih3XJJ6LzU8M7bm9NIRCTT7HTMkF05J7HklWHNo/hP0a5O7
ij/wAxEi6t3ZJJedZkioqNtiYUSK5tIbym87Mz4S6QRDrtLM1bZClCU39ddg30tN
RMfYBePE3crnjhv6ZlmC3Oe9f9aWIgnnX3sisILauyQBOmO6k3TLyiwVpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzmBHeLJIvi0gIEoIch+4e5O9UnMB8GA1UdIwQY
MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt
ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy
LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE6/EILj
ALutJgBLDBQl8tB4DDrSatH2zIT1Hz6drdCK+rNiMWxddR8ZgK6bcjufrfi53+1P
Rdh+eXRUMhhXWJjebqJFeSetBsoaSudoRNG1D4w17ODb0dAD0wi1txt02PipzTgR
61/TPK+4eqa4FMYwN2BTRGCWxkxeari4q+MHWHUUlvLXes2W9inlDmUY7Pyphw4P
Bty+v3Nq2pQDCP9Lcz6WgGw1YOT2pjv/vfg4hhXwcuZslFktyr0/KRRaUYm08Ru5
XSEnsQX4BbcFOZX01vRsE8uNuxVpsnFvZGBeYA3FIxw20g5S+LP/biO4tBL9hedn
5wvo+K/ehA7ydw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:11:39 2026 by rpki-client