Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File:                     z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier:          gf9JIKZ1JG99zUvpO+edJdPp4sY9qOEMOcNvSSXbSiM=
Subject key identifier:   7E:D7:B8:4C:BA:CC:D9:15:60:03:65:C0:95:74:50:36:6D:82:2E:DE
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer:       /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial:       019F3860754A3C3990CB0EB0F7038141D2EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number:          0764
Signing time:             Mon 06 Jul 2026 17:01:13 +0000
Manifest this update:     Mon 06 Jul 2026 17:01:13 +0000
Manifest next update:     Tue 07 Jul 2026 17:01:13 +0000
Files and hashes:         1: 0S-ozMaRAyvvdMvSJW3g5Kk4iVo.roa (hash: OQHH+g7JmAcn53oHjDt/GSfgh8qJfjfcS42p09F0WtU=)
                          2: DfeDYFEhcGiOVGd2HiXYX5Rn1XA.roa (hash: QNfPUzw4gyDIHgNy4UB5ZpKhS1ImNQM4IAovYnRUp5o=)
                          3: NQIBAohX75IaNOk07YtqfQi_l2Q.roa (hash: FDra3udXguGsI5fh/D9xyGvlXRNRLrQbxmcagtWhiYA=)
                          4: OX-WFn34m-JD1PE0u9eYZk4qKCk.roa (hash: I9b174DioYRAA7Dm+6Il6PksgXPNmVtiUo8IS77/Rvc=)
                          5: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (hash: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4=)
                          6: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: VxaRAuzFW8VrROyJPPvgBrkDdYfOHUwU0K2r8I3r4tA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:60:75:4a:3c:39:90:cb:0e:b0:f7:03:81:41:d2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
        Validity
            Not Before: Jul  6 17:01:13 2026 GMT
            Not After : Jul  7 17:01:13 2026 GMT
        Subject: CN=7ed7b84cbaccd915600365c0957450366d822ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:54:03:31:cf:63:cc:d4:57:8a:03:64:bf:
                    32:97:88:81:e6:6d:ff:36:9b:ee:1b:9f:f3:9f:36:
                    15:3f:bf:37:b4:91:3c:1f:e9:40:23:36:a9:51:8d:
                    ef:14:c9:6d:7e:53:67:5c:ba:26:85:70:10:6c:8a:
                    55:62:03:72:c2:0c:23:59:e5:78:a7:e5:40:67:38:
                    07:2d:08:b3:e0:e9:8e:cb:46:a0:d4:4d:09:7c:1e:
                    ba:ad:30:08:8e:05:dd:9f:a8:9c:07:6f:2d:80:53:
                    c3:cc:4d:f7:d9:da:f7:20:a8:d4:77:3c:f0:0c:33:
                    dd:99:0a:e4:31:1c:5d:43:b5:00:63:02:6f:12:5a:
                    f9:41:6d:75:3f:16:9d:0a:95:a7:92:5d:09:78:9f:
                    66:60:31:87:c2:85:76:c4:9a:1e:98:c3:ac:86:dc:
                    1f:5e:fd:1a:f8:c1:53:ef:d5:3a:85:8e:1b:31:14:
                    49:30:38:2c:04:8b:c0:a1:8f:7c:7c:fe:b8:84:2d:
                    3d:38:ab:d7:59:24:72:e2:a9:d6:b2:96:40:34:1a:
                    d3:b3:5a:6a:8b:c3:62:1a:8e:b8:c2:9a:34:86:e3:
                    63:e3:3e:c2:aa:35:b6:18:91:7b:45:fd:fd:b3:f1:
                    78:b3:07:d0:3d:f4:10:e7:4b:51:45:f6:db:80:85:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D7:B8:4C:BA:CC:D9:15:60:03:65:C0:95:74:50:36:6D:82:2E:DE
            X509v3 Authority Key Identifier:
                keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:31:69:0a:35:f5:80:91:97:c0:63:b7:9c:bb:d5:cb:9b:
         c7:34:49:41:ae:a2:28:1b:5b:cd:6f:2d:e3:fc:ea:9b:95:bc:
         41:96:5f:25:a1:a3:07:cb:1f:3f:1a:25:42:dc:a0:15:62:96:
         e1:f8:5e:10:d5:8e:51:37:dd:92:1d:9c:2f:34:0a:de:24:7a:
         13:5e:40:f1:34:ce:fb:d3:98:a9:1a:dd:24:17:a5:4b:c9:fb:
         eb:f8:9b:01:6c:c3:1d:71:ff:7f:29:a2:bf:c7:63:44:11:c9:
         73:55:7c:35:a4:17:38:06:7a:3c:eb:b8:33:bc:b6:f4:92:fc:
         ee:a1:fe:03:1a:eb:fb:28:90:ba:cb:07:75:3f:4c:38:72:a5:
         eb:c2:b3:03:0c:46:9a:9b:60:8a:59:05:f7:19:d3:37:e7:f0:
         e2:1f:49:05:bf:6d:31:cf:8c:9f:cb:f6:8b:e2:3e:05:6a:5b:
         2e:1d:9d:07:e7:6b:71:d2:4d:da:0e:b5:c6:b6:d7:40:d8:37:
         9f:43:96:20:fa:8f:f1:f7:21:a8:71:c7:ce:e2:4a:7f:30:77:
         d3:99:56:f2:1e:4c:35:da:60:5f:ef:1a:e8:57:ae:ff:1e:e8:
         b6:a2:59:a1:e5:bd:a2:33:cd:99:4e:be:7b:b4:40:30:60:81:
         33:bf:57:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:21:22 2026 by rpki-client