Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File:                     Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier:          XMEdCakIEiD6nhMSF4iZae9CdPQWA24LL+BBkARpO80=
Subject key identifier:   5A:5F:33:A6:4E:D6:F3:7E:2B:6C:E9:19:8C:FD:5C:1C:55:38:EE:CA
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer:       /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial:       019F9135D80A42DEA26F0B81FA47E7F1F433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 23:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:52 +0000
Files and hashes:         1: 9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa (hash: h9CqZh0rb7DZM2DSkg1oUJ5C5eMZCB3Ebd3JWwXuuXI=)
                          2: Z2S57soliueMTVEyGovf75orajw.crl (hash: 4mjK0/jVWQjWTFLYtq8CdWtCtee8igSH385B4RB8YFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:d8:0a:42:de:a2:6f:0b:81:fa:47:e7:f1:f4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
        Validity
            Not Before: Jul 23 23:00:52 2026 GMT
            Not After : Jul 24 23:00:52 2026 GMT
        Subject: CN=5a5f33a64ed6f37e2b6ce9198cfd5c1c5538eeca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:94:20:0b:06:ca:06:3e:d0:d6:55:0a:32:
                    1f:d4:29:25:be:54:4b:f8:82:ac:07:05:86:21:be:
                    32:c6:77:9c:96:9c:9b:85:47:06:ce:8c:c4:f5:9e:
                    a0:46:8f:93:0b:25:35:2f:fb:07:78:39:64:8b:68:
                    fe:d5:db:00:62:33:c6:a7:41:0e:f5:c4:26:5d:33:
                    af:ea:e8:64:e9:3e:2d:f6:c9:9f:76:82:03:10:d5:
                    cf:54:20:0f:73:3f:b1:6f:bd:ac:89:99:e4:33:ff:
                    f3:f4:63:3d:31:fa:05:67:4e:f3:7b:18:0d:cf:ac:
                    7c:f5:be:1b:1a:6b:33:ae:50:44:ab:c9:3c:b6:0e:
                    98:75:52:75:e7:db:ff:15:c2:e4:f0:27:93:a5:1b:
                    3b:b0:95:5e:a7:a2:37:59:0e:46:9b:fb:76:d1:e7:
                    e9:3c:93:89:59:72:0b:05:ea:03:47:4f:b6:8e:3a:
                    44:d2:c8:1c:43:57:44:48:09:e0:65:61:11:89:dc:
                    32:9a:cc:e3:1c:f6:25:02:29:84:27:8a:d8:01:16:
                    8e:bf:15:32:7f:27:5d:34:75:7d:ca:49:62:53:9e:
                    af:2e:68:3a:47:9b:2a:10:b4:75:c6:a6:cf:9a:25:
                    04:82:66:89:05:61:f6:fc:35:91:f2:31:0f:2f:b0:
                    a5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:33:A6:4E:D6:F3:7E:2B:6C:E9:19:8C:FD:5C:1C:55:38:EE:CA
            X509v3 Authority Key Identifier:
                keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5e:ba:42:19:27:1b:4a:3d:9d:f3:b8:ee:1b:9c:ca:e8:0f:
         a1:94:84:5a:5e:c2:00:75:89:dc:0f:8c:9a:ca:1c:e5:b3:b9:
         82:d1:6e:23:ca:67:37:1d:6f:25:10:02:96:8a:fa:65:56:a5:
         f7:1d:50:d0:d8:89:3c:f1:0a:fd:b1:ed:c4:1b:0a:e9:9d:49:
         d1:7d:12:a3:74:a2:be:9c:ba:f2:7c:3e:32:b4:8e:e4:f8:0b:
         50:b7:87:07:27:79:96:2f:28:eb:dc:1e:5e:c3:b5:f9:52:a3:
         6e:2f:45:35:88:25:8e:eb:04:e9:4e:29:9b:78:c9:f8:c6:6c:
         1d:8b:3a:d6:e6:b7:1c:23:c3:77:9b:63:6b:6f:58:a3:ba:14:
         69:22:1d:5f:a7:1e:cc:32:66:e1:2b:2d:04:4e:af:93:b4:e4:
         17:0f:b4:f3:e1:0b:e6:0a:eb:d8:ad:65:76:65:6c:db:71:23:
         72:54:29:cc:60:29:d0:75:5a:ea:45:7c:cd:b3:0a:3f:f1:3b:
         31:17:72:48:3d:5e:2e:b0:f4:75:4a:fb:7f:57:07:f5:98:12:
         4a:f7:90:d7:7a:20:55:6e:ed:58:42:76:37:e5:a8:64:21:45:
         b3:98:5f:49:f8:ad:d0:af:fc:97:ac:7f:89:43:75:7d:7d:25:
         d6:77:98:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:51 2026 by rpki-client