Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File:                     ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier:          Rxy/aTB0FLKXR6Bdj2ve46+GZGAGsWbnpHWNA5A88v0=
Subject key identifier:   B6:43:1D:03:93:22:0F:D3:79:41:EF:F8:89:FD:B0:5D:BA:09:A3:5D
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer:       /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial:       019F867B5D63F1C22286430BF10C1E0E1D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number:          02B5
Signing time:             Tue 21 Jul 2026 21:00:59 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:59 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:59 +0000
Files and hashes:         1: 8ndDa5rRng5A6n53ieZF5n0zI7s.roa (hash: KtGt0NdlDvyNnvEnoJfeg2xWBfVSAuPvOu/PVmj7YGM=)
                          2: VPi2ebLJADEknE0vjMS8E-YQvPQ.roa (hash: oO735iZZLpkD9NxJ8YTop9o4debqleHv7iMJ/1qzafM=)
                          3: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: TCpd0ePpC2KB4Z6zQiRsjfctIln+U+W44nC51FzW7Xw=)
                          4: uR2ylumTmfT3BQFedfgIoqmEIcM.roa (hash: OT+mNpsQIWtCh4SyPSeorwW+75Abd8tYhpy5oP3ZE18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:5d:63:f1:c2:22:86:43:0b:f1:0c:1e:0e:1d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
        Validity
            Not Before: Jul 21 21:00:59 2026 GMT
            Not After : Jul 22 21:00:59 2026 GMT
        Subject: CN=b6431d0393220fd37941eff889fdb05dba09a35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:2f:a4:44:4b:bb:84:a4:af:d8:46:5a:55:
                    6b:29:a7:9f:f0:81:ac:6c:90:e0:e2:c9:49:03:c1:
                    68:f8:29:16:9f:b3:71:c5:a6:50:ea:10:83:68:2a:
                    64:2f:dd:62:98:b7:6b:17:48:ad:c2:03:68:9c:61:
                    fa:f3:1b:cc:a6:5a:bf:c9:ab:bb:5c:a2:cb:87:ac:
                    36:f5:97:ed:c6:ce:b6:3d:b5:95:8c:c7:f2:df:48:
                    ac:68:80:af:ec:b2:6a:44:84:ac:7c:91:06:49:5b:
                    f4:6b:d0:6f:b4:2a:a0:2b:63:fb:f1:7c:9a:7c:52:
                    95:da:6c:95:12:a1:00:8d:4d:75:0a:e5:ec:0f:44:
                    c6:23:24:d3:70:b5:4b:d4:0f:d9:9f:e4:1c:ca:68:
                    d5:ad:b7:66:46:90:b1:dd:14:d4:04:cf:39:ad:46:
                    5f:90:ee:63:84:be:87:28:b4:e5:09:11:ed:a7:30:
                    f1:4e:50:c0:81:8c:d5:b4:e2:5f:a5:81:ce:65:04:
                    d0:32:26:8c:93:c5:c7:d0:19:7d:32:64:9b:10:ff:
                    b0:ca:f4:31:43:a8:7d:b4:32:f3:c4:42:78:85:1d:
                    a9:41:bb:91:b2:00:11:17:06:1e:3d:70:05:a1:99:
                    75:19:05:8d:bc:f6:51:c9:e7:5e:de:41:29:04:be:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:43:1D:03:93:22:0F:D3:79:41:EF:F8:89:FD:B0:5D:BA:09:A3:5D
            X509v3 Authority Key Identifier:
                keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:8c:46:d7:6e:40:0f:fd:a2:78:ea:f7:4b:05:1b:15:4c:
         d7:66:18:49:b4:57:d8:f3:5f:4b:45:37:dc:f6:3a:2c:07:69:
         2d:4b:2c:55:69:f9:51:fa:55:8e:ff:95:d0:fb:19:95:1e:34:
         61:c7:37:0a:79:31:95:aa:77:1f:03:2a:76:a8:fd:7d:9c:8f:
         25:0a:b6:d8:8e:f8:0d:6a:e1:29:2d:4e:b1:28:c5:91:0d:46:
         32:a5:56:14:81:7e:eb:f8:5f:37:b5:9c:14:93:a3:cd:ab:9c:
         46:c8:7e:b8:bc:0e:22:6e:13:54:8a:8d:88:d5:5f:c3:2f:74:
         58:00:61:99:0e:9d:42:8d:1a:9b:be:5d:78:f1:f5:65:b2:42:
         1e:fe:28:3a:81:58:0e:f2:c0:bf:05:87:f3:36:d6:6c:07:e7:
         86:51:b7:f9:2c:ed:61:d6:1b:cc:64:bb:90:c1:89:82:fd:2d:
         cd:25:04:1d:d2:68:2e:d2:91:0d:d3:a5:54:ca:cf:ad:3b:66:
         75:27:fa:6c:49:68:64:41:00:a1:d5:ec:4e:c6:ff:d0:92:97:
         84:b9:04:a8:2c:b4:15:2f:fc:5c:42:26:0f:9b:a9:c4:c1:af:
         6e:3c:95:4f:d8:ac:64:f5:00:d3:d6:ef:a5:5e:b2:54:55:4f:
         6c:53:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:57 2026 by rpki-client