Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File:                     dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier:          pAWPnHAxDv4AcmEE9pogVGOEzUkXKX/vHYAaaT31B/8=
Subject key identifier:   58:29:1B:C2:A8:E3:5A:44:1A:9D:47:28:7E:FD:24:91:2A:AF:A8:CD
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer:       /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial:       019D27DF5E27E3DE6989652FEA02DF9E57C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number:          0696
Signing time:             Thu 26 Mar 2026 02:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:43 +0000
Files and hashes:         1: bO5zh83JPBsDB9dYi7999N7x4VQ.roa (hash: 2nRlkOqwn2pz6pnUvZfg8RMKFwShSWGr7lN2y/FxSOU=)
                          2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: fYKSJAWbJp4AmFaEoemEPFd9AMu/fDsc57zJTNWcov4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:5e:27:e3:de:69:89:65:2f:ea:02:df:9e:57:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
        Validity
            Not Before: Mar 26 02:00:43 2026 GMT
            Not After : Mar 27 02:00:43 2026 GMT
        Subject: CN=58291bc2a8e35a441a9d47287efd24912aafa8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:24:a0:78:28:0c:9d:3b:b6:58:fe:81:74:
                    63:cb:4f:e4:57:d7:1d:34:ac:0e:49:3c:a0:cb:69:
                    7f:43:e7:58:74:f9:26:82:9e:e6:6c:2d:e8:32:64:
                    a5:80:71:a5:27:01:78:83:ae:94:28:29:ec:8b:48:
                    92:9e:fc:e7:48:30:d4:42:ab:61:05:82:86:d1:11:
                    f4:4b:17:1c:19:f0:8a:3b:c2:f1:d0:4a:be:72:6f:
                    c1:e9:2e:5a:01:5e:6c:c5:ed:21:2d:c5:fd:75:3c:
                    45:51:83:65:b9:19:89:d7:6c:84:1f:11:db:10:77:
                    43:8c:f8:42:2b:e1:af:4c:26:47:45:3f:ec:24:b1:
                    ac:7c:a7:fc:41:86:d2:af:08:57:14:f9:04:a7:a4:
                    28:a9:37:cb:9d:bb:61:21:f1:47:b3:c1:63:d2:95:
                    f2:e4:7a:a7:d8:c0:34:0f:56:e8:49:8f:86:9c:66:
                    e9:a8:bc:fe:e3:e2:bc:aa:71:ac:c0:c3:c4:35:99:
                    1a:31:a6:ae:64:9b:0c:74:47:21:9c:b8:36:12:b3:
                    a1:be:fb:b8:d6:91:47:4a:a0:3a:4e:4d:76:34:e0:
                    a6:96:57:8f:59:c7:a9:a6:0e:02:20:99:66:e9:43:
                    1f:2d:c3:c7:1f:54:b9:dc:db:9e:4a:9a:20:bf:de:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:29:1B:C2:A8:E3:5A:44:1A:9D:47:28:7E:FD:24:91:2A:AF:A8:CD
            X509v3 Authority Key Identifier:
                keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:1a:38:d5:46:c4:57:91:8d:4b:20:ba:0c:d1:0b:54:04:
         5b:61:3e:aa:05:20:4e:5b:0b:72:df:0a:5d:5c:34:44:90:da:
         65:77:7e:ac:c7:c6:e7:94:1c:73:3e:ec:49:7f:b4:6f:0d:df:
         0f:b5:d6:bb:90:fe:bc:c3:12:48:9e:ef:c9:0d:e1:70:b7:30:
         f4:22:ba:4f:c5:32:83:d4:55:aa:e2:03:5d:ca:79:88:b3:ed:
         db:1b:c2:48:33:cb:e5:37:07:35:5a:a0:26:8d:ff:2f:9a:eb:
         0e:d5:28:e5:f9:e2:9c:d8:d7:ea:13:bc:ba:07:28:30:74:e9:
         14:b3:97:4f:ad:5f:1e:64:a3:a6:2c:e7:37:37:2c:89:6c:22:
         ba:3b:09:5a:f7:30:a1:c3:aa:d7:2c:a2:f0:7e:c8:18:49:f7:
         ce:c7:ff:2a:b7:d9:56:fd:d8:08:86:40:2b:58:a5:e5:7b:3f:
         21:c7:93:91:4d:bb:5b:b2:1c:8c:1d:cf:8d:02:74:b1:3a:f7:
         39:af:5c:d0:53:db:80:e2:b2:e5:24:68:4b:03:90:ba:4b:fc:
         fd:6d:fa:57:db:67:50:c2:d8:bd:a3:48:b0:ea:33:80:99:af:
         ab:9f:b3:3e:c2:c4:d3:cd:78:67:0c:86:d6:40:09:a6:2d:ea:
         10:88:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:26 2026 by rpki-client