Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File:                     cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier:          wOQC+XiCbcefNM7Pf/SOTUJlh5/CO+HvWaUwZTnIW1Q=
Subject key identifier:   41:6F:D9:E9:5D:51:7B:0E:FE:3A:FC:9C:53:23:72:48:C4:33:B6:83
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer:       /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial:       019F374E2631CAA8F04DD135C305229F6B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number:          0F4B
Signing time:             Mon 06 Jul 2026 12:01:35 +0000
Manifest this update:     Mon 06 Jul 2026 12:01:35 +0000
Manifest next update:     Tue 07 Jul 2026 12:01:35 +0000
Files and hashes:         1: 2d80ICWvEy2H06WqwwbbUkHjd9Q.roa (hash: Ddn5JpBKquVV9p/RAvUdBev4yfl/8irtR+M1x9mKoR4=)
                          2: 96h6MiWp1wcqYfMCzF-xeLLhEXw.roa (hash: GlwHj/dVbXF+2ZIP/5axQACN1GmbbfciiA08DFujCCQ=)
                          3: T8wO9YK42VrpaTKZVLl0hlhCgqQ.roa (hash: 2/LsWjUAgBK/sup3nVZAY9upc9OnAS/gP5lDONEvXDQ=)
                          4: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: wbMa3XhLtyH8UaGWHvkGhxj9ojiTKQUik8EDNh7rbjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 12:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:4e:26:31:ca:a8:f0:4d:d1:35:c3:05:22:9f:6b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
        Validity
            Not Before: Jul  6 12:01:35 2026 GMT
            Not After : Jul  7 12:01:35 2026 GMT
        Subject: CN=416fd9e95d517b0efe3afc9c53237248c433b683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:c2:6b:b8:47:b9:55:28:8d:21:b6:f9:15:
                    ae:2b:22:01:bc:52:b0:75:1e:9b:11:d1:02:c4:84:
                    a7:ad:b7:1b:3a:b5:80:8c:1d:bf:82:71:28:a6:bb:
                    0c:1d:6e:e7:69:f6:37:20:1f:f8:8c:19:97:f8:ff:
                    ac:7e:e2:fb:d0:b4:24:62:c7:ef:7e:ce:cb:ad:32:
                    ca:6f:b8:e6:2b:17:d4:11:d5:75:34:28:be:da:03:
                    5e:e7:3f:da:33:9d:0f:c0:08:aa:8e:db:f1:3f:1e:
                    b1:1d:27:87:cb:89:2e:55:5a:a3:91:02:03:c4:09:
                    c6:ba:db:e3:6c:fa:25:d1:5e:32:79:ed:bd:8c:ce:
                    ec:2f:8b:98:b0:13:f6:39:ce:32:30:5b:0f:28:40:
                    b6:8a:1f:05:db:d5:ad:10:24:ca:7e:70:11:f9:45:
                    ec:df:c3:7c:42:0a:a2:ae:35:9f:65:b2:66:d5:ff:
                    5f:0d:7f:b3:d7:9d:f8:ab:ba:b9:e2:18:cf:7c:55:
                    3c:81:7a:77:fe:4b:d6:df:84:38:b9:5a:de:aa:b2:
                    2f:5a:77:8c:ab:21:a4:76:aa:a7:3a:fd:16:b6:07:
                    d1:43:c8:67:2c:00:11:42:c4:31:99:4e:6b:71:d0:
                    6b:41:38:8e:bc:ae:5f:41:49:81:f0:4d:8a:c9:f7:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6F:D9:E9:5D:51:7B:0E:FE:3A:FC:9C:53:23:72:48:C4:33:B6:83
            X509v3 Authority Key Identifier:
                keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:eb:cc:a2:30:34:5d:b7:d3:4c:4e:c6:f4:9e:90:c3:b6:
         1f:32:3a:cb:66:b7:a0:aa:4d:4a:40:79:e9:9d:be:47:a1:89:
         d5:75:75:db:f6:b6:8e:85:20:e5:b1:8c:d8:ba:09:06:0f:93:
         fa:83:dd:bd:d0:5d:73:68:98:23:d3:b3:95:6b:86:74:17:8a:
         d0:3f:3d:87:8d:3d:0a:c5:50:01:39:a1:99:d6:53:40:56:40:
         3d:dd:9a:4d:21:23:ed:ff:53:17:c1:e5:c7:bd:53:a7:ef:d8:
         1b:12:73:06:ec:45:49:54:83:fd:2d:60:65:d3:35:e1:35:6d:
         23:23:8b:d1:c2:0b:68:d1:ce:c4:72:01:1d:5e:5e:53:bd:29:
         49:dd:20:2c:73:09:aa:f8:3d:09:a2:a9:24:ad:c7:d1:a5:15:
         e1:e1:91:ef:dc:c1:29:6f:c5:32:0a:06:6a:e5:6e:f9:76:7a:
         f2:26:9f:45:d2:d2:54:88:56:4e:9d:1f:a5:03:b9:30:8b:a2:
         f6:38:36:db:c1:4b:cb:13:27:1d:bc:2d:0b:1e:23:ed:5d:0c:
         27:29:5b:a5:a9:b8:12:2e:ff:da:c1:ca:0a:f2:52:a6:fa:9c:
         e6:c9:04:c5:89:74:1e:1e:6f:92:88:4a:dd:3e:d6:b1:91:44:
         9a:64:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:11:10 2026 by rpki-client