Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File:                     U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier:          vEGtku4jklg52c5GyQl7yHomrkK5KoNNH7iMNbcL93o=
Subject key identifier:   D4:55:58:D4:CD:02:0A:91:46:1F:44:F9:46:D3:10:38:4E:F5:33:0D
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer:       /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial:       019F86447DF1647397A3431141291F953D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number:          19C6
Signing time:             Tue 21 Jul 2026 20:01:03 +0000
Manifest this update:     Tue 21 Jul 2026 20:01:03 +0000
Manifest next update:     Wed 22 Jul 2026 20:01:03 +0000
Files and hashes:         1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
                          2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
                          3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: 9Wzgv3/dEm0JAEYgU7Koj4IJgTJKl2YRd1WqGTBK0Jo=)
                          4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:7d:f1:64:73:97:a3:43:11:41:29:1f:95:3d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
        Validity
            Not Before: Jul 21 20:01:03 2026 GMT
            Not After : Jul 22 20:01:03 2026 GMT
        Subject: CN=d45558d4cd020a91461f44f946d310384ef5330d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:93:9e:9e:b9:d8:da:2a:a0:3f:f2:62:22:
                    01:ba:b7:eb:81:c4:d2:9e:12:21:f4:ea:a5:2e:9d:
                    72:a3:b4:bf:86:66:f0:fc:96:e2:fd:1b:4f:7a:dd:
                    29:01:ba:ba:92:22:c9:44:14:99:9c:a0:49:02:f1:
                    0b:84:a0:cc:58:7f:24:c2:b4:57:fa:84:63:e7:38:
                    9a:23:ef:56:07:bb:d9:64:00:c2:3d:4e:06:9b:cf:
                    d9:16:b0:8f:b0:46:35:5d:07:db:2f:87:4a:c6:8c:
                    57:a2:d7:2f:59:c1:14:c8:62:0c:bb:1f:02:5a:3f:
                    c9:1f:16:ad:04:77:14:40:ab:bb:24:47:b9:22:68:
                    5d:13:3a:18:a7:ed:62:4d:6b:66:f3:3e:f9:6c:6e:
                    b2:7f:c2:41:2b:64:3d:30:e3:02:e1:2d:47:eb:77:
                    9f:9c:33:15:05:b0:e0:fc:14:40:3d:bf:be:70:db:
                    f8:90:fe:2d:b4:5c:54:96:e3:2b:ba:5f:a9:b1:25:
                    36:85:b4:48:d4:a5:46:7f:11:48:a4:84:1a:6f:8f:
                    e4:0c:34:43:02:fc:af:8c:4a:2d:43:d1:cc:1d:c9:
                    a3:9b:a7:6c:b3:e7:75:b3:b0:04:af:12:bd:8c:13:
                    f7:4c:48:61:ce:42:79:c9:3e:28:64:59:17:a7:d8:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:55:58:D4:CD:02:0A:91:46:1F:44:F9:46:D3:10:38:4E:F5:33:0D
            X509v3 Authority Key Identifier:
                keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7f:47:9f:69:f6:0a:a6:89:4b:b8:1a:77:9f:c1:0b:95:64:
         79:52:e7:d5:a0:80:28:b8:d9:28:bc:00:36:24:e1:6a:c2:49:
         51:44:69:41:ad:cc:08:f8:14:b8:cc:c0:05:3d:9c:0d:24:75:
         2a:07:7f:8a:e7:b2:0f:5f:3e:66:6b:f1:91:2e:15:ce:5e:29:
         12:9a:15:3e:87:68:a1:97:32:46:9e:fa:a4:1e:c7:2d:ca:5b:
         45:35:fb:94:78:e6:30:da:29:15:3c:6e:48:02:92:66:65:0a:
         4f:56:32:48:af:76:41:03:d5:d9:0a:47:cd:db:ee:fa:30:ae:
         f3:d4:b2:de:74:ed:9d:a5:f1:70:33:9c:76:77:3b:ab:ad:69:
         3f:0b:13:07:6d:74:b5:1f:35:9a:0b:65:3e:af:44:b7:08:d7:
         ad:3e:fd:6c:21:33:44:54:79:44:a7:31:f8:c8:36:0b:f5:b6:
         30:ee:dc:20:6e:25:f7:26:d5:44:79:7b:ef:07:ca:45:57:c5:
         e9:11:66:20:8c:f0:cc:11:01:64:1c:ea:13:fd:3e:19:d3:d8:
         7c:1a:71:77:1f:9e:d4:28:96:7e:d5:09:70:0d:6c:84:7a:6f:
         b9:5f:8e:04:2d:18:de:22:95:fd:22:56:dc:e6:7f:dd:fb:82:
         99:fa:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:52 2026 by rpki-client