Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
File:                     ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft (raw, json)
Hash identifier:          rofKrg2WgGfcLtzFUF3jcg1KGevtIkmXQfkrsvnEXK0=
Subject key identifier:   5E:A2:99:94:4E:21:ED:B4:1C:55:81:49:5B:80:DB:B2:B1:D2:F3:CE
Authority key identifier: 66:6B:B2:2A:B6:4A:CE:A6:24:8E:3E:EC:D4:D6:00:79:70:46:E8:B9
Certificate issuer:       /CN=666bb22ab64acea6248e3eecd4d600797046e8b9
Certificate serial:       019F94DC064420113BD283E3333DFA4B4B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
Manifest number:          0108
Signing time:             Fri 24 Jul 2026 16:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:15 +0000
Files and hashes:         1: ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl (hash: uW5nTfqA4B7ERYRjVE1XvAypC6x+vgyMmiUVtRzMHKo=)
                          2: iXdCxqONjbFxErLs984fDtPPuP0.roa (hash: kOe2FaHNUJoqh8TvxUecRv4MaU6ezmauA8mPBQq+gXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:06:44:20:11:3b:d2:83:e3:33:3d:fa:4b:4b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666bb22ab64acea6248e3eecd4d600797046e8b9
        Validity
            Not Before: Jul 24 16:01:15 2026 GMT
            Not After : Jul 25 16:01:15 2026 GMT
        Subject: CN=5ea299944e21edb41c5581495b80dbb2b1d2f3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:38:60:94:3d:db:8a:72:b5:2c:70:e6:6b:
                    f4:46:c9:ca:dc:3a:53:d6:e9:76:f3:a7:07:bb:5e:
                    a8:0e:0c:6e:09:32:be:bd:18:28:e2:79:66:dc:6f:
                    f1:b8:19:af:dc:c8:b7:be:0e:d2:ef:91:d7:ae:c8:
                    39:a8:16:4d:b4:3f:47:f5:77:04:78:17:87:23:e2:
                    a8:fd:7d:f2:e1:ec:18:97:40:5a:27:14:fd:d4:af:
                    54:0e:a8:f7:13:d8:51:ca:73:43:74:5f:02:58:84:
                    d6:2f:3e:f7:26:f3:48:84:a2:25:7a:8f:47:f7:59:
                    d5:eb:6e:7c:1a:9f:9a:7d:0e:98:8b:94:de:f4:90:
                    39:1c:0f:d9:6e:1a:a0:8d:63:7d:fd:93:0b:84:87:
                    e3:9c:6c:ba:09:ec:70:a3:f0:62:2c:c2:e2:4d:e5:
                    bb:e8:7f:3e:db:75:17:62:72:40:65:23:78:d0:45:
                    bc:32:4d:56:08:db:30:81:1c:1b:cd:1a:27:b2:46:
                    30:84:53:38:53:d3:c8:c0:1c:65:9d:93:43:a2:1d:
                    9e:0b:7c:76:fa:cc:9d:70:9a:04:71:b1:08:41:fe:
                    e5:40:b9:68:17:42:ad:6c:4c:4a:99:82:26:1b:7f:
                    5b:5c:db:a6:13:e7:19:cd:1e:12:f4:1a:9f:34:f7:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A2:99:94:4E:21:ED:B4:1C:55:81:49:5B:80:DB:B2:B1:D2:F3:CE
            X509v3 Authority Key Identifier:
                keyid:66:6B:B2:2A:B6:4A:CE:A6:24:8E:3E:EC:D4:D6:00:79:70:46:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:dd:d6:7a:46:8a:a8:dc:12:67:71:d8:16:54:30:24:7c:
         e1:13:b1:4b:09:7a:59:f6:f6:10:ff:3e:bb:3e:54:62:79:ef:
         d6:74:c3:3d:f8:3b:d1:fe:43:d5:93:11:03:29:f6:9b:c7:18:
         fb:f5:36:a1:9b:c9:96:a5:db:c7:b0:e9:13:91:0d:f3:29:b8:
         f7:19:2d:ba:a4:2b:98:0d:4a:33:9c:e8:08:30:a7:84:c5:7e:
         ee:61:e9:28:24:a4:13:84:a8:72:f7:1c:f2:ed:a7:e6:d2:06:
         60:94:7e:d0:91:96:76:13:a3:eb:08:62:79:d3:90:67:1b:e7:
         61:59:c0:c5:bc:52:3d:fe:dc:98:e5:c6:22:d7:4e:09:a3:de:
         d4:25:75:6b:13:90:67:ba:91:30:31:f3:3e:f8:58:d3:04:2c:
         2c:5a:21:d8:f3:61:e6:22:a4:e8:64:ad:71:38:97:9e:47:f5:
         71:29:22:ce:8a:37:32:a4:08:b8:21:cc:da:a6:f0:7d:72:eb:
         80:d3:50:6b:db:e0:57:06:ff:1d:88:79:1c:79:2a:5f:90:7b:
         c2:55:a1:f9:3c:81:d4:2c:ca:95:39:17:4a:bb:d3:91:bc:db:
         e9:95:b9:cc:f7:79:98:48:b8:8f:f7:e1:64:ed:f3:2f:ec:b5:
         7f:84:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:57 2026 by rpki-client