Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File:                     ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier:          Ujc9C2UM8RN6/wo7iK0bnMawe+1F6sAjmBH6Zx1J5hE=
Subject key identifier:   DD:86:8A:B0:3B:EA:A0:C7:DB:14:57:86:52:76:39:C0:9E:A9:04:79
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer:       /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial:       019FA18459DAFD731B694C7E7D7127F04194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number:          056E
Signing time:             Mon 27 Jul 2026 03:00:33 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:33 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:33 +0000
Files and hashes:         1: HXygwNK2STzqNVll6HVDO_wB5r0.roa (hash: ZY5/8uKYBcUum4H1cHS3G78vJsO1xPm4UChz23v/ZS8=)
                          2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: YVolP9AhZ0OCmogBm3kdKoLCT1Tn3HDMVodirvD2Exo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:59:da:fd:73:1b:69:4c:7e:7d:71:27:f0:41:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
        Validity
            Not Before: Jul 27 03:00:33 2026 GMT
            Not After : Jul 28 03:00:33 2026 GMT
        Subject: CN=dd868ab03beaa0c7db145786527639c09ea90479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:6e:53:e8:c8:c1:02:0c:d5:96:9d:6e:1e:
                    00:0b:cf:43:4b:8f:fd:10:10:42:1d:1e:7e:77:db:
                    16:47:69:8b:cf:56:12:23:2a:ee:74:e3:80:5f:c1:
                    27:e6:ab:8d:15:72:da:8d:a7:be:7e:e7:bf:97:81:
                    09:2b:29:6a:1b:e7:60:e9:28:19:c7:d6:e1:96:18:
                    ff:25:19:e7:43:f7:67:9c:63:09:bc:e0:52:97:66:
                    a4:b6:f0:f8:00:ae:6c:73:de:fc:54:c0:82:70:05:
                    98:f4:47:d5:c3:66:40:6a:4e:e7:fd:49:4b:57:9f:
                    1b:04:c5:a2:73:bf:18:de:95:77:6d:f0:bc:9b:bf:
                    c2:8a:29:8c:80:73:04:03:17:f7:66:f9:56:df:91:
                    d8:96:7b:49:6f:86:5b:75:12:6e:47:0d:b8:d5:f6:
                    8c:57:f5:2a:31:48:9d:ff:a2:d5:6f:2e:32:a5:09:
                    17:26:76:ea:bc:ab:f4:ed:60:44:28:b2:99:e4:16:
                    be:1f:89:73:85:80:d0:cc:92:41:4f:a7:d7:5a:2c:
                    a1:6e:8b:59:9c:ec:5a:84:77:d7:de:3e:5c:79:c7:
                    d7:03:f4:0d:0e:62:21:7f:f3:e2:fd:6d:f0:6a:10:
                    87:30:76:bd:d1:37:8a:92:9a:b6:09:f3:d9:d7:e9:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:86:8A:B0:3B:EA:A0:C7:DB:14:57:86:52:76:39:C0:9E:A9:04:79
            X509v3 Authority Key Identifier:
                keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:45:ef:a3:c7:e8:59:98:57:f1:e2:bb:9c:b1:af:38:50:4b:
         f1:b2:2a:a9:07:8e:d0:b9:8c:58:51:7a:88:16:dc:17:84:09:
         1a:84:7f:a7:ff:8a:4c:4d:a7:7f:22:ae:67:8a:d6:db:c1:58:
         12:b2:53:74:04:f0:c5:10:c1:a4:cf:fc:01:57:e3:69:a3:fd:
         88:87:ae:fb:4d:4a:1b:9f:81:29:f0:5d:1d:72:9e:fd:e0:b2:
         1f:3b:27:17:53:d0:83:64:f1:fb:69:a0:ef:0e:fc:72:fd:79:
         d3:09:50:1c:2a:e4:4a:9b:0c:04:b5:b5:21:ee:15:29:0f:01:
         76:d1:ef:40:8b:9f:c8:06:19:14:f6:9c:01:a6:1b:97:fe:2d:
         4e:fe:b0:88:6c:68:f8:84:38:12:2a:0a:34:1a:9a:43:bd:a2:
         74:71:6b:70:df:dc:00:60:53:65:3b:7e:03:4f:96:96:1c:10:
         ac:58:a6:07:63:d2:79:f6:95:37:a1:2a:05:bd:ee:b1:d3:a8:
         64:4d:44:30:16:a3:87:89:f1:2c:82:5e:0d:6f:fe:b2:f3:77:
         35:a4:e1:6a:9e:b7:c0:ea:e9:88:2a:bb:3f:ed:80:7b:b5:0b:
         5d:6b:f6:cc:00:cf:e4:0d:ef:03:f2:4c:c0:cc:dd:49:fe:5a:
         33:22:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:21 2026 by rpki-client