Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
File:                     RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft (raw, json)
Hash identifier:          kor0MH2xlWp53OYrJO1VyusxZAd4w/i7Be+Owy+nz/I=
Subject key identifier:   A5:91:C1:C9:CB:A2:4D:EB:28:9C:AB:40:C3:D8:26:8A:25:83:E3:41
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Certificate issuer:       /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial:       019F8E6B3BEBB511EBAA38AF3068E2E9A994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
Manifest number:          010C
Signing time:             Thu 23 Jul 2026 10:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:20 +0000
Files and hashes:         1: 9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa (hash: 55R+jdR0UJQmE1oLQNFzIpJd7w8rR1Qa8V5eWHVN66M=)
                          2: Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa (hash: 6I/UFrfGHL7pXTEoCzAXCGu9B83vEUFGM5JCdXCnrA0=)
                          3: RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl (hash: Gxn1ByxtHASCxbwowVMZNa0rMcklGiEFwmpXJiwDvNk=)
                          4: Rmzfw1Pn6oVl0YpHmqW6MW62cKY.roa (hash: ez1Yu6hc8zQKp0+BPfF1FCgIwY7OKVfVqthIubkAHaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:3b:eb:b5:11:eb:aa:38:af:30:68:e2:e9:a9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
        Validity
            Not Before: Jul 23 10:00:20 2026 GMT
            Not After : Jul 24 10:00:20 2026 GMT
        Subject: CN=a591c1c9cba24deb289cab40c3d8268a2583e341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:01:71:ff:90:8f:35:3d:0c:0d:80:fd:ad:
                    61:e8:ec:00:4d:9e:2a:b3:60:7b:49:25:c0:21:62:
                    29:55:15:36:04:fb:b1:b7:71:9f:a1:5a:e5:58:46:
                    e2:0e:44:e6:18:a0:7c:56:90:f1:5a:15:a4:00:1e:
                    2b:95:d1:05:20:bd:e4:33:6b:20:fc:22:8d:27:76:
                    a5:f1:87:86:44:d4:d4:ad:29:ed:ed:f4:82:86:37:
                    ca:cf:c1:c1:f6:a0:cf:7c:3f:51:39:8e:a1:24:f4:
                    70:16:9e:21:7e:b0:ea:88:79:b4:a0:97:dc:2a:54:
                    ec:a9:98:cb:32:40:45:ad:02:8d:23:78:42:0c:cb:
                    a3:92:66:09:bb:8f:ce:f7:ea:5f:e8:93:80:e8:29:
                    bd:13:7f:36:2b:55:39:3d:b6:09:f6:5c:42:09:7c:
                    8b:eb:1c:77:5c:de:d1:b6:6f:53:04:7e:76:36:81:
                    58:07:82:00:7b:99:85:9b:80:e0:7c:26:7a:8d:a5:
                    e5:6b:48:3f:64:5d:7d:d2:3c:9f:eb:93:19:7b:a9:
                    a7:7c:3f:40:22:1f:94:95:44:2a:6e:7b:08:af:99:
                    53:2f:1a:d3:a0:13:3c:c3:e8:ff:99:11:ad:55:c0:
                    83:79:8f:dd:43:f1:c1:2e:e7:c9:ae:2d:c8:a1:60:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:C1:C9:CB:A2:4D:EB:28:9C:AB:40:C3:D8:26:8A:25:83:E3:41
            X509v3 Authority Key Identifier:
                keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0f:5d:f8:44:74:08:43:7b:e9:e9:4c:8e:63:2c:8f:7f:cc:
         91:57:73:53:32:3d:43:47:ab:f8:d2:e7:5c:82:7a:67:11:98:
         1d:c0:80:e5:6c:ef:ff:e9:73:f6:63:55:da:42:5f:0d:40:8b:
         d9:45:7e:cc:8b:46:49:1e:c2:c0:c2:f6:23:44:df:b7:6d:ed:
         a2:c9:43:62:bc:03:b9:a5:b1:ba:fd:a5:6f:70:82:fb:e2:c2:
         d6:f2:6d:e7:61:73:26:80:15:a3:78:85:25:3f:26:84:0a:9b:
         4a:4d:f8:ad:6e:22:49:6a:60:48:f6:3b:f0:17:83:2a:ab:25:
         29:79:e3:fc:eb:ae:0d:1c:4e:fa:f7:c5:a1:5d:be:6c:e0:60:
         5d:75:d1:4f:b4:c3:aa:2d:21:e8:ec:c4:92:9e:f9:bb:a9:77:
         7c:e4:d9:f2:d2:50:a7:98:fe:e2:38:65:ab:c2:15:41:ab:a5:
         da:49:d7:b3:00:96:74:f5:96:40:66:c9:14:48:09:4a:bb:d3:
         ab:c4:98:6e:8c:96:e5:88:b6:c9:83:19:39:bb:ad:d6:0e:8c:
         33:18:d9:c7:83:df:64:6f:db:2d:ae:1d:39:32:87:d1:b7:c4:
         39:d1:31:9d:85:e6:7d:44:87:c9:78:62:f7:ca:05:20:59:29:
         5b:68:fb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:12 2026 by rpki-client