Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File:                     ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier:          SVxrcvgu4ghnmQyIz33bF2qRFeKlqSp0XAvwmuulCBA=
Subject key identifier:   63:D5:D0:A5:F4:11:78:5E:61:C2:51:10:39:88:84:42:34:3E:D5:E8
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer:       /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial:       019F8230E752314D81DCE6AD0F7A1C4BF929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number:          19C1
Signing time:             Tue 21 Jul 2026 01:01:10 +0000
Manifest this update:     Tue 21 Jul 2026 01:01:10 +0000
Manifest next update:     Wed 22 Jul 2026 01:01:10 +0000
Files and hashes:         1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
                          2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
                          3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: ObDlP2y7BHpkBJor5Z0NjKYbuBJd95V9iUbnWnVFNUI=)
                          4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:30:e7:52:31:4d:81:dc:e6:ad:0f:7a:1c:4b:f9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
        Validity
            Not Before: Jul 21 01:01:10 2026 GMT
            Not After : Jul 22 01:01:10 2026 GMT
        Subject: CN=63d5d0a5f411785e61c2511039888442343ed5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:c9:21:5d:b8:9f:3a:03:9a:e5:29:c9:c8:
                    08:0a:6a:b0:42:71:26:b2:58:e6:12:f1:4f:38:24:
                    8a:4b:20:20:14:ed:6f:5f:e4:70:08:09:d7:ad:2f:
                    d0:29:6f:5e:54:7c:06:38:cb:b3:2b:76:3f:87:5e:
                    2e:d1:2e:99:56:23:bb:c6:20:dc:7f:ca:5d:ae:d8:
                    27:f4:bc:6d:82:de:7b:ef:bc:dd:64:e5:d6:c3:f1:
                    14:74:5c:bb:7a:1e:fe:42:54:86:52:fe:e7:88:fb:
                    b5:3b:c0:ab:24:fc:51:66:7a:15:48:e0:a3:ad:5d:
                    8b:c2:2a:58:2d:3a:af:a3:a4:15:e7:53:60:b8:a2:
                    c5:f0:47:24:47:e9:09:3e:50:b2:9a:93:44:cb:f2:
                    a2:ef:59:f5:29:d8:cd:cf:31:0d:27:ec:4f:2f:b6:
                    e8:82:28:cb:04:59:d2:a4:65:06:92:5d:77:6b:12:
                    8b:2b:b0:e5:e8:2f:d7:e5:3b:7d:1e:4e:27:88:70:
                    fb:ab:06:cc:86:31:37:cc:fd:5e:f3:5d:89:99:28:
                    e5:6a:52:d8:44:35:ca:47:64:a3:47:b2:72:69:41:
                    0f:0a:cd:f8:28:b8:3f:06:05:cb:f4:5d:ba:a7:2d:
                    8a:89:cf:88:22:cd:49:74:5c:c0:cc:aa:30:75:b6:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D5:D0:A5:F4:11:78:5E:61:C2:51:10:39:88:84:42:34:3E:D5:E8
            X509v3 Authority Key Identifier:
                keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:00:91:c5:61:d7:b3:c7:c1:8c:f4:fe:e7:1c:37:b2:3a:
         10:26:33:ca:67:41:2f:f2:75:06:df:27:1c:04:b4:38:b4:f5:
         e4:b8:67:e8:31:40:31:4b:e0:dc:58:6a:ca:a4:6d:05:81:94:
         1e:f3:66:c3:ac:74:2a:3d:a1:13:88:11:56:67:c6:d1:92:01:
         44:bc:c8:a0:bd:b4:cf:1c:93:e8:29:c4:e0:4f:7f:99:40:a5:
         a2:12:ec:88:f9:d9:89:bf:24:c5:94:77:03:b0:9c:9b:02:04:
         cd:1f:f1:6b:e6:71:66:1c:20:e7:cc:ca:29:36:b6:ea:65:78:
         63:c2:87:1a:64:18:3b:95:44:6b:6e:ef:16:b5:81:08:bc:f4:
         b4:db:c6:11:7d:e8:a1:78:5d:87:29:c5:48:ab:d7:eb:d8:9e:
         aa:ec:80:a7:da:64:fd:3a:3a:db:42:4f:4a:ac:a2:ea:04:38:
         58:e1:39:60:e1:1f:55:6f:6d:a5:1c:f7:67:c4:15:ac:71:46:
         bb:24:4f:44:e2:26:c5:b1:ac:ce:ab:36:c5:8a:28:80:e0:68:
         b2:d8:49:29:3a:61:9a:e1:cf:bd:9f:b2:1a:5e:01:fd:a1:3e:
         9a:07:3c:5c:04:87:86:21:0f:7f:1d:6c:36:84:5b:73:55:d0:
         ef:f7:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:54:20 2026 by rpki-client