Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File:                     zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier:          /FgF3c9jkLeYHkjyuoGmopvxlYRsD2SPds+eW6xGCXA=
Subject key identifier:   F0:4F:0F:91:8E:99:E4:4D:DD:1E:CC:14:CF:36:AD:80:F8:2C:52:9A
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer:       /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial:       019F9059D9B639ACF83AAC43DD39689F5D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 19:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:35 +0000
Files and hashes:         1: 5qgROKxHOicoj6aXRRzKoWhQEys.roa (hash: cbdLbf/a0AVWeV/g7UhTY6JncYkBe68DrZLAHz3ibQE=)
                          2: D0wGS-yddeO0xfMmRUxbHkj9wmQ.roa (hash: 1GkR1ZZ4k8rO+nd6oDot6saKoU0S85i7RRYtoQ2NVC8=)
                          3: OoheSSCa5I7EwzgFEnlfY2jnBjs.roa (hash: 4TrMNV+CUPEbrPuDX+5VWadJ22cCDdcCYltr8Dnb3+w=)
                          4: SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa (hash: uIUOOzCmCZIfAItCkWriSRWvWy1Wi25C++tLdPRufDc=)
                          5: hXDlG2G0xbowy6t6EZnHJ70Ehao.roa (hash: 3IDUKM+58lF7xSd9cxW6Agkn2PnQGt/z8nVFt8JreYU=)
                          6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: ZQHLVKAg+q5AaCVsaiyp/iBZhoVceFKr185YAuK/ds8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:d9:b6:39:ac:f8:3a:ac:43:dd:39:68:9f:5d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
        Validity
            Not Before: Jul 23 19:00:35 2026 GMT
            Not After : Jul 24 19:00:35 2026 GMT
        Subject: CN=f04f0f918e99e44ddd1ecc14cf36ad80f82c529a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:ac:90:24:54:88:e4:da:3e:a3:2f:c7:e8:
                    43:a6:98:0d:1e:b5:0f:a2:48:1c:a1:47:95:aa:c2:
                    5c:75:bc:56:6b:f2:b7:83:95:aa:d9:61:68:92:0b:
                    a5:61:7f:de:b1:8b:77:7c:80:2d:f8:21:92:92:58:
                    bc:5b:03:c3:e3:19:53:4a:48:d8:78:65:8a:0e:82:
                    34:2c:bf:69:e5:2a:9f:ff:c1:94:f8:ba:17:27:93:
                    9e:0f:d2:35:a5:73:19:53:23:7c:e7:ee:26:24:64:
                    c3:c0:9c:0f:78:83:de:ae:54:33:60:1b:c3:6d:2f:
                    c5:80:97:09:68:fd:86:94:e3:0f:0a:69:e3:22:27:
                    15:0b:e6:38:89:7c:ea:17:de:45:b1:0c:27:bf:d4:
                    eb:62:67:fd:52:43:43:10:bf:b8:ac:f0:a3:af:aa:
                    7e:a8:ef:52:0e:2e:52:3c:a9:73:bd:2e:43:24:80:
                    e6:bb:ef:34:84:9e:ca:55:1c:b5:f8:f2:fe:4f:51:
                    fe:c4:f4:04:17:35:b7:27:da:12:75:f9:65:9f:8c:
                    a8:f7:d0:21:9e:6a:44:70:2d:ec:39:82:61:4a:bd:
                    0e:5a:c3:a8:df:d7:e2:db:bc:e0:ad:0c:d0:63:5a:
                    ca:f5:bc:b9:09:38:f1:14:9d:95:fa:b3:57:43:5e:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:0F:91:8E:99:E4:4D:DD:1E:CC:14:CF:36:AD:80:F8:2C:52:9A
            X509v3 Authority Key Identifier:
                keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:78:f1:02:15:12:a4:67:1d:9a:20:f0:44:ac:1f:73:5d:ba:
         6f:0b:99:8f:ef:e6:b6:ce:1e:87:e9:db:93:9c:58:71:a9:cc:
         c6:6a:93:73:03:bf:36:c6:6c:1a:80:02:c8:da:95:d8:c8:33:
         55:53:90:f3:b2:7e:2a:8a:03:fb:8e:52:59:9d:a8:22:2d:cd:
         b5:0e:1c:6e:bc:59:a1:29:a4:d4:89:4d:4d:19:e1:3f:be:fe:
         7f:ab:d7:c3:dd:31:eb:31:83:9d:bd:93:ad:d9:18:d3:1b:99:
         0d:51:f3:e3:47:d8:ed:6f:1c:14:06:89:12:3b:60:ca:76:29:
         09:08:85:ab:0f:98:13:67:79:40:9f:e9:18:db:a1:e5:ba:46:
         35:da:4c:ec:d8:95:f9:48:2d:72:f8:1f:a8:e8:da:99:18:6a:
         c8:64:fe:9b:01:b7:e3:8d:cd:aa:24:26:6d:c2:96:86:ce:4f:
         34:62:d8:12:5e:8e:e5:55:93:5a:6b:0e:0f:f0:bb:79:33:06:
         9b:9f:a9:83:24:3c:6c:20:96:72:a9:c2:81:ea:00:62:39:6d:
         91:47:40:7b:3f:22:65:ca:40:6e:9a:da:04:f6:71:d7:01:27:
         f7:96:42:87:da:4c:d4:01:b6:fe:61:47:c0:36:92:fb:47:20:
         b5:a3:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:22:54 2026 by rpki-client