Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File:                     azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier:          gfintm50lUNFxcVOgHT+6binNhwtHKgOlAsG2BZRLBo=
Subject key identifier:   CC:43:0E:68:80:68:2F:41:D1:B8:F0:CF:59:E1:03:8A:F2:2D:A5:3D
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       01A01D1D129BFBAD975F008339722B21769B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number:          16A7
Signing time:             Thu 20 Aug 2026 03:00:39 +0000
Manifest this update:     Thu 20 Aug 2026 03:00:39 +0000
Manifest next update:     Fri 21 Aug 2026 03:00:39 +0000
Files and hashes:         1: 1-lJzH2rXfTVP7jRY0mzbvnZfL0w.roa (hash: ehYPqtGN6TS3Js5wuNR1zeWO3dD89SMMpjUpkkDnqQs=)
                          2: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=)
                          3: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: q3ZLrDDMS66bKGjNlGlTpPyj9ZYHJS+JS6iJGJutBqo=)
                          4: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=)
                          5: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1d:1d:12:9b:fb:ad:97:5f:00:83:39:72:2b:21:76:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Aug 20 03:00:39 2026 GMT
            Not After : Aug 21 03:00:39 2026 GMT
        Subject: CN=cc430e6880682f41d1b8f0cf59e1038af22da53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:92:a7:fa:cc:fb:2e:d3:08:8d:91:fb:fc:
                    de:2c:97:2a:1a:12:c9:c0:04:8a:9c:13:73:d7:0e:
                    ef:67:de:91:e0:65:10:54:19:07:8a:13:f0:f0:58:
                    ec:ee:c9:f0:a7:ca:93:c8:42:82:5b:51:b9:b4:66:
                    b9:a8:95:0d:da:d2:47:a6:ee:33:d2:04:9c:77:aa:
                    66:a2:26:e9:c4:8c:15:3f:c2:dc:24:ce:29:4a:0c:
                    08:ed:af:70:f5:a0:b4:a1:27:36:c7:8c:8e:0f:87:
                    2e:fe:a7:54:3f:bf:08:2e:68:9d:65:e0:19:7c:cc:
                    15:7d:52:72:27:40:6c:44:2c:da:e4:2b:af:91:d3:
                    c1:db:73:48:d5:01:b0:db:9c:1d:ae:e9:1e:eb:cf:
                    5c:35:24:da:0f:fb:c3:1a:c3:0e:b6:c5:38:03:0c:
                    9f:71:92:17:c7:41:43:d5:35:68:b6:a8:4b:76:e8:
                    8a:f5:f4:8c:7f:9d:d1:94:03:1d:1a:31:17:0e:0e:
                    38:38:1a:20:85:51:38:37:bd:90:7f:a6:ea:d6:3f:
                    72:b8:fc:6f:13:0d:29:0a:7c:00:a6:e3:04:43:d7:
                    67:f2:86:50:0b:77:f4:b3:03:87:18:ca:0e:38:5a:
                    0c:65:99:5c:86:82:44:b6:c5:7a:2e:5c:82:95:41:
                    36:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:43:0E:68:80:68:2F:41:D1:B8:F0:CF:59:E1:03:8A:F2:2D:A5:3D
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:b8:55:f0:66:21:f5:b1:a3:80:ba:7a:6d:b6:23:b2:7b:
         c2:c6:f4:88:90:a2:7f:1e:95:0c:11:ac:16:eb:4d:af:c4:09:
         f7:a5:f4:ab:bd:7f:ca:e6:05:2d:77:04:9d:69:e9:0e:a5:42:
         4c:7e:19:23:ce:2b:83:0d:6b:66:3d:13:a0:5b:55:fe:5c:3a:
         7f:59:23:3d:54:7c:db:be:7c:d1:53:5b:f3:ad:7e:1c:ff:0a:
         df:f3:a4:01:49:c3:3c:e7:d3:11:f2:fc:b5:12:6f:34:1a:94:
         cc:e6:64:7b:64:8f:e8:c6:5a:76:b4:dd:86:90:b9:12:cd:3e:
         68:0b:7c:c4:7f:40:8a:14:1a:c0:ec:11:f4:4b:82:99:01:f6:
         04:9e:c0:80:e5:82:3a:1f:9e:44:d4:0d:c0:e9:2f:12:95:a4:
         74:b3:87:1d:68:28:53:87:30:b8:57:f8:88:8c:89:0e:f5:28:
         a2:6f:8c:61:62:80:73:56:b7:af:53:07:d5:8a:b1:5c:5e:c9:
         35:7b:bc:d4:0b:0b:8d:81:65:34:c8:a7:91:a9:b1:78:f4:af:
         ee:a1:64:9c:52:b5:ae:1d:80:9a:34:d4:b8:00:25:27:22:6d:
         e7:2c:b2:03:24:09:cf:cf:41:35:4f:94:e7:4d:5d:db:75:10:
         8b:ac:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 05:26:39 2026 by rpki-client