Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.mft
File:                     Zjx-No0YEQqSh_13qQ6JxnNqeMo.mft (raw, json)
Hash identifier:          wBEn3MDDbBKKJJPCT+4r60ltks9zdJ+bcdAScBm8MQ8=
Subject key identifier:   6A:1B:EE:02:1A:95:77:F8:87:72:D9:DF:52:FF:1E:EA:37:4E:30:CA
Authority key identifier: 66:3C:7E:36:8D:18:11:0A:92:87:FD:77:A9:0E:89:C6:73:6A:78:CA
Certificate issuer:       /CN=663c7e368d18110a9287fd77a90e89c6736a78ca
Certificate serial:       019F577E3DE9B67D456DC0B63FEA35743508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.mft
Manifest number:          22
Signing time:             Sun 12 Jul 2026 18:01:58 +0000
Manifest this update:     Sun 12 Jul 2026 18:01:58 +0000
Manifest next update:     Mon 13 Jul 2026 18:01:58 +0000
Files and hashes:         1: QVfgi83LjShPxbT24Q_mQFAo_RY.roa (hash: iY5GiU+vx7Frdhzr/zDk/O8cw/EgmXY5eK+bqrz6L2A=)
                          2: ZhrQ5IL_6IQjHT_ZzSAvM4xJDIY.roa (hash: UhHZT4JNbmJP0ZhZOUwhUHh+Glok5HGLptsMbJnbE9A=)
                          3: Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl (hash: OFaVUa4o7K0psTVjO0ZVNn9H00qg/Ql8yWspeK/ECD4=)
                          4: mojgojG2fUmUNr6AoobrPz3Orxo.roa (hash: moY2zU8wsD2X98MGIhQvmb/eCgnx1fygo8u6oqFIgQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 18:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:57:7e:3d:e9:b6:7d:45:6d:c0:b6:3f:ea:35:74:35:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663c7e368d18110a9287fd77a90e89c6736a78ca
        Validity
            Not Before: Jul 12 18:01:58 2026 GMT
            Not After : Jul 13 18:01:58 2026 GMT
        Subject: CN=6a1bee021a9577f88772d9df52ff1eea374e30ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:b3:72:42:e2:f7:7f:82:af:f8:0e:a9:b7:
                    ea:8a:f6:ba:74:2e:5b:5a:62:3a:50:e1:de:29:31:
                    24:4b:5d:ff:d6:38:70:86:fe:33:0c:61:6c:8b:f8:
                    b5:ba:e6:96:3e:91:43:37:12:76:ff:54:02:28:bf:
                    db:19:28:64:d6:66:d1:f9:b2:a3:10:bd:14:f9:6e:
                    03:17:52:42:e5:bf:29:85:3f:2a:c1:98:d2:cc:7f:
                    9d:aa:9e:73:c4:99:d6:c0:4f:00:34:25:b9:bd:a6:
                    26:e6:d3:91:fa:29:cc:fd:1f:7e:0d:f0:01:fd:22:
                    79:fe:7e:f5:5c:54:3b:d3:f7:ae:81:6d:f1:2d:f5:
                    20:67:e4:e2:fa:33:68:cf:4d:6a:e8:d1:49:91:73:
                    c4:9b:6a:3e:9c:d4:aa:ec:ec:7f:15:f2:79:37:ef:
                    24:f9:02:f5:70:d4:1b:8f:5f:32:83:48:63:05:08:
                    51:74:d7:1e:c7:3d:13:95:d3:08:53:45:61:f2:1d:
                    33:04:39:ac:73:21:e3:7b:80:6c:c1:0e:d3:f1:c9:
                    d9:bb:3a:93:d6:c5:10:62:e4:a4:c7:50:06:3b:60:
                    be:69:9b:ed:53:c9:1a:95:08:f6:6f:33:fe:2d:7b:
                    0d:00:11:f6:57:f0:67:ac:79:da:c7:f0:61:fd:d6:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1B:EE:02:1A:95:77:F8:87:72:D9:DF:52:FF:1E:EA:37:4E:30:CA
            X509v3 Authority Key Identifier:
                keyid:66:3C:7E:36:8D:18:11:0A:92:87:FD:77:A9:0E:89:C6:73:6A:78:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:15:ae:67:d5:66:17:ff:37:14:30:a9:98:13:97:df:89:46:
         3f:e3:88:e0:21:c0:e4:6e:ff:06:e5:89:4d:a8:e3:5d:cc:12:
         ca:2e:1f:eb:f8:16:74:44:ec:09:78:96:84:0b:10:7f:94:99:
         63:d6:77:13:cf:73:87:ca:7b:97:69:87:02:a2:47:77:c9:c8:
         29:64:24:b6:83:2b:ba:8a:0b:8e:b8:56:5c:a2:f9:10:d3:49:
         f3:9c:dc:41:4b:e0:b2:ec:03:fd:90:00:74:a6:2c:ba:2f:3f:
         26:fa:2e:ce:03:37:72:3f:1b:21:c8:c2:23:2d:87:8d:3e:ec:
         75:e9:dd:b1:9f:91:23:e6:df:3c:b2:e0:a5:4a:c1:3c:6f:a3:
         38:5d:ce:b6:02:10:29:1a:4d:a3:38:2a:9d:23:fd:ca:4e:4c:
         7a:c0:8c:67:4d:6d:5f:8f:aa:b2:73:00:65:ad:71:95:43:99:
         c8:83:b4:e0:03:06:06:51:7c:a8:c0:71:55:e8:d6:bc:a2:6a:
         9b:4d:8e:ec:79:5c:6f:ac:cf:52:9a:0b:9f:a5:eb:87:19:34:
         49:ca:79:25:6c:31:77:b7:0f:8b:48:3a:86:c0:80:89:6c:ef:
         1c:40:c2:5a:0d:7b:1f:54:dd:b7:50:e6:d4:86:5d:9f:6b:31:
         ef:54:f3:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9Xfj3ptn1FbcC2P+o1dDUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2M2M3ZTM2OGQxODExMGE5Mjg3ZmQ3N2E5MGU4OWM2NzM2
YTc4Y2EwHhcNMjYwNzEyMTgwMTU4WhcNMjYwNzEzMTgwMTU4WjAzMTEwLwYDVQQD
Eyg2YTFiZWUwMjFhOTU3N2Y4ODc3MmQ5ZGY1MmZmMWVlYTM3NGUzMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLyzckLi93+Cr/gOqbfqiva6dC5b
WmI6UOHeKTEkS13/1jhwhv4zDGFsi/i1uuaWPpFDNxJ2/1QCKL/bGShk1mbR+bKj
EL0U+W4DF1JC5b8phT8qwZjSzH+dqp5zxJnWwE8ANCW5vaYm5tOR+inM/R9+DfAB
/SJ5/n71XFQ70/eugW3xLfUgZ+Ti+jNoz01q6NFJkXPEm2o+nNSq7Ox/FfJ5N+8k
+QL1cNQbj18yg0hjBQhRdNcexz0TldMIU0Vh8h0zBDmscyHje4BswQ7T8cnZuzqT
1sUQYuSkx1AGO2C+aZvtU8kalQj2bzP+LXsNABH2V/BnrHnax/Bh/dbr2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGob7gIalXf4h3LZ31L/Huo3TjDKMB8GA1UdIwQY
MBaAFGY8fjaNGBEKkof9d6kOicZzanjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmp4LU5vMFlFUXFTaF8xM3FRNkp4bk5xZU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt
ZTBmNWQ4NmUzN2EzLzEvWmp4LU5vMFlFUXFTaF8xM3FRNkp4bk5xZU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez
LzEvWmp4LU5vMFlFUXFTaF8xM3FRNkp4bk5xZU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxWuZ9Vm
F/83FDCpmBOX34lGP+OI4CHA5G7/BuWJTajjXcwSyi4f6/gWdETsCXiWhAsQf5SZ
Y9Z3E89zh8p7l2mHAqJHd8nIKWQktoMruooLjrhWXKL5ENNJ85zcQUvgsuwD/ZAA
dKYsui8/JvouzgM3cj8bIcjCIy2HjT7sdendsZ+RI+bfPLLgpUrBPG+jOF3OtgIQ
KRpNozgqnSP9yk5MesCMZ01tX4+qsnMAZa1xlUOZyIO04AMGBlF8qMBxVejWvKJq
m02O7Hlcb6zPUpoLn6Xrhxk0Scp5JWwxd7cPi0g6hsCAiWzvHEDCWg17H1Tdt1Dm
1IZdn2sx71TzuQ==
-----END CERTIFICATE-----
Generated at Mon Jul 13 04:09:31 2026 by rpki-client