Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File:                     dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier:          7m+FG2aAhx8fBEEIe/MF41lCAbNG7wsxL062yZkqG7k=
Subject key identifier:   43:64:B8:60:A8:E2:58:30:6B:64:9D:AF:4A:40:BF:21:FB:F1:55:F9
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer:       /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial:       019E1F10FBC0657A0B0E49E899EA33A451F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number:          0716
Signing time:             Wed 13 May 2026 02:01:07 +0000
Manifest this update:     Wed 13 May 2026 02:01:07 +0000
Manifest next update:     Thu 14 May 2026 02:01:07 +0000
Files and hashes:         1: bO5zh83JPBsDB9dYi7999N7x4VQ.roa (hash: 2nRlkOqwn2pz6pnUvZfg8RMKFwShSWGr7lN2y/FxSOU=)
                          2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: kNfgRv0eq6U1zf/h575txmhDEeerye5lcyYEYvaZd5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:fb:c0:65:7a:0b:0e:49:e8:99:ea:33:a4:51:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
        Validity
            Not Before: May 13 02:01:07 2026 GMT
            Not After : May 14 02:01:07 2026 GMT
        Subject: CN=4364b860a8e258306b649daf4a40bf21fbf155f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:ba:a9:90:34:1d:cd:36:1e:7b:19:49:70:
                    16:fc:61:3d:a9:0b:39:18:8b:7f:ac:45:2a:f2:e5:
                    12:a9:a4:89:75:33:83:44:c2:2a:81:07:71:d5:63:
                    18:37:07:60:e5:b7:00:61:48:40:6b:b2:03:69:3d:
                    63:9b:58:18:20:d6:96:b2:e1:78:4e:93:cf:3a:fd:
                    5e:cc:f7:ee:5d:67:36:f9:6e:07:66:a2:3a:0b:c8:
                    59:71:80:b8:e0:72:5b:68:20:3e:a2:47:99:9a:94:
                    35:9e:4d:51:c5:77:d1:81:95:dc:07:5c:b7:43:f7:
                    08:aa:13:b4:33:d6:81:88:ab:80:f7:a3:00:28:0d:
                    ab:c5:34:7c:2d:cf:02:84:b9:ec:3a:c3:b2:cf:03:
                    8c:2f:0e:ed:bd:7f:f0:c6:e6:d3:c9:f5:39:eb:50:
                    2d:b0:79:f4:9b:2b:ca:d5:d5:52:ed:57:e3:40:8d:
                    c5:c4:c6:3e:0a:bf:17:ca:9f:c8:44:a2:b0:43:ea:
                    c4:47:3a:80:20:0e:de:b1:93:45:41:5f:cb:6b:cb:
                    3f:c7:46:7b:66:fc:89:c7:db:ab:1b:2a:a7:5e:e4:
                    8e:10:a5:d6:70:c7:3f:c8:5f:cb:2f:3e:55:22:5c:
                    f7:f6:e3:36:9c:42:6d:66:c6:2b:9c:aa:2f:b8:e9:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:64:B8:60:A8:E2:58:30:6B:64:9D:AF:4A:40:BF:21:FB:F1:55:F9
            X509v3 Authority Key Identifier:
                keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c6:9d:3f:ab:6b:86:e2:df:a5:0f:11:2a:6e:b9:60:f3:27:
         9d:9e:e3:01:23:4e:49:43:10:01:53:92:f0:98:3c:95:fa:64:
         d8:88:db:c7:cb:93:f1:3b:e5:73:0a:07:07:48:54:a9:0d:93:
         68:7c:6e:5e:d1:b7:11:1f:57:34:4b:5c:21:9d:52:b8:81:0d:
         e1:4d:3c:7f:5c:6f:7f:f9:db:9e:99:ff:db:f0:0b:0b:01:73:
         d0:a9:70:ca:db:98:b9:ef:59:32:ae:72:d6:ce:7a:71:16:fc:
         44:f2:e4:e7:1b:26:3f:41:a5:2b:f0:5d:bb:ca:3b:c5:b6:36:
         d1:d6:1a:f6:c7:51:0b:fb:8e:d0:3e:40:37:ae:47:7f:95:db:
         5f:af:c1:04:62:31:cb:c5:62:13:64:4f:f3:71:79:0c:c0:c5:
         01:c5:40:4c:2c:bb:49:99:44:a9:69:59:13:86:36:23:e1:1e:
         57:22:d2:66:6b:96:ff:d6:67:c8:c6:0d:fb:b6:2e:c4:ec:fb:
         98:da:ba:6d:7d:1a:fc:ae:bc:98:b0:05:7a:1b:28:2b:c7:ea:
         d3:51:80:2f:d8:90:ad:bd:66:63:c4:fc:45:47:cd:f5:d5:28:
         52:52:9a:a3:1b:c1:be:99:3b:82:fd:b5:2a:35:c1:fa:fc:cd:
         a4:68:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:22 2026 by rpki-client