Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File:                     txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier:          qIz/E+/0E3q/70y4VKMn2V77u5y6cDR4zNKDfotwfl4=
Subject key identifier:   DC:72:08:2E:3B:69:D0:A9:6A:9B:81:E8:88:93:81:53:9E:9C:A1:C9
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer:       /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial:       019F946DBD01BDDB51E61127EB3B6177BC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number:          142A
Signing time:             Fri 24 Jul 2026 14:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:47 +0000
Files and hashes:         1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
                          2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: 7CdUG3yQMhAq5v0IkOJDK8r2HVq9fuRe5dqqo1mL/NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:bd:01:bd:db:51:e6:11:27:eb:3b:61:77:bc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
        Validity
            Not Before: Jul 24 14:00:47 2026 GMT
            Not After : Jul 25 14:00:47 2026 GMT
        Subject: CN=dc72082e3b69d0a96a9b81e8889381539e9ca1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:44:50:a9:e4:5c:50:25:be:dd:fc:80:68:
                    b4:3f:fe:f1:f5:da:4d:e0:be:51:ed:46:02:6b:47:
                    57:18:32:90:ea:d3:0e:3e:39:a2:30:4a:d9:67:4e:
                    e6:f1:4c:6f:13:a3:ba:fe:de:d4:61:2c:5d:f7:a3:
                    4a:f6:18:23:4d:13:c9:6f:89:52:29:76:3c:ad:ca:
                    31:c4:90:00:0e:6f:6d:4e:01:61:bb:6a:4c:8b:aa:
                    fe:57:ec:be:51:36:35:5c:69:60:c1:4a:bb:e5:f6:
                    07:7d:7d:88:0e:4c:84:2e:29:ec:b4:62:f4:e3:a6:
                    5c:6d:0f:55:62:df:55:bc:75:84:22:1e:b3:42:10:
                    17:f4:01:ed:7f:69:07:c5:d5:f9:b2:8c:13:13:b1:
                    f2:6e:38:58:34:67:0d:96:08:46:2f:61:03:98:33:
                    da:1c:0a:e9:0e:51:e0:fb:fd:54:36:6a:0d:95:28:
                    f4:46:32:08:7b:4a:86:10:f7:11:6e:48:4d:d2:78:
                    7f:6e:f6:22:7c:94:6b:4b:73:d4:4f:a8:55:e4:65:
                    3d:cd:44:e3:8b:ce:18:e2:76:81:da:b4:26:cb:9b:
                    d4:a0:1e:03:e5:73:6c:a0:b7:b2:0b:ab:50:a2:a8:
                    9b:3a:c4:69:ae:18:6c:73:2f:15:e3:e6:09:f4:63:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:72:08:2E:3B:69:D0:A9:6A:9B:81:E8:88:93:81:53:9E:9C:A1:C9
            X509v3 Authority Key Identifier:
                keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:22:87:df:3d:ce:e1:5f:3b:70:fd:52:4a:dd:95:36:3b:
         1c:46:6a:f5:62:1b:2d:3c:60:e3:0f:58:a7:bb:2d:65:2d:f9:
         18:72:9c:09:a7:34:29:83:dc:85:f9:5b:52:21:32:09:cd:95:
         66:fe:f3:7d:19:9f:14:b8:37:47:b6:b6:bf:d8:01:d8:d2:2a:
         8b:54:d5:aa:95:03:cb:24:79:5e:36:35:26:0b:98:d5:49:8d:
         fa:92:d4:d3:e8:1c:0c:45:71:3e:e3:f7:74:65:c7:c9:b1:bc:
         23:55:68:84:ce:7e:30:4e:a8:f9:b1:06:42:26:77:1f:27:1a:
         8a:90:22:a8:9a:2c:4e:02:9e:23:13:53:b7:60:65:4f:87:4f:
         0a:87:34:39:28:f4:cd:3b:8b:6e:4d:fa:1d:0f:de:ed:1c:a0:
         62:8d:64:6f:3a:ac:68:e3:8b:2c:37:ff:f4:49:55:3f:ca:b0:
         6d:4f:aa:ea:4e:0e:71:28:71:df:38:ae:d9:40:49:fe:86:4a:
         8d:7f:11:4c:2e:26:19:5f:20:16:ad:b4:c5:6e:a7:74:6b:a1:
         a2:6e:f9:57:ac:e7:77:02:7c:a3:32:aa:bf:7d:27:3d:cf:6f:
         59:8e:7f:05:e8:d0:a7:9b:3a:92:f3:dc:8b:17:6e:79:19:37:
         71:b6:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:08 2026 by rpki-client