Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          PPUVHL6guqyZ7hLRSqlz5CQtJc49ff1Mo7LZ9282j5Y=
Subject key identifier:   46:D4:3A:EF:DF:41:BE:F8:9E:50:F3:5B:F1:D8:2D:1F:28:21:5B:74
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       019F8FB58A85D40BD3D5755BCCB8F24C4D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          03EA
Signing time:             Thu 23 Jul 2026 16:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:06 +0000
Files and hashes:         1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=)
                          2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=)
                          3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=)
                          4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=)
                          5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=)
                          6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=)
                          7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: yM5kE4ajoNMYLUKnWuT8/yVZOoGv1QoulBpcEuwYPbg=)
                          8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=)
                          9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=)
                          10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:8a:85:d4:0b:d3:d5:75:5b:cc:b8:f2:4c:4d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Jul 23 16:01:06 2026 GMT
            Not After : Jul 24 16:01:06 2026 GMT
        Subject: CN=46d43aefdf41bef89e50f35bf1d82d1f28215b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:eb:40:0d:d6:70:01:e1:ca:8f:02:c9:39:
                    d8:0e:28:b0:7f:dc:9b:c7:1e:df:a7:02:ef:f0:02:
                    f4:17:36:e0:69:86:f7:76:e2:e6:35:0b:3e:33:7c:
                    97:d4:25:7b:21:88:f1:a7:1a:4b:ce:ba:c2:fd:c9:
                    37:46:29:33:2f:6c:00:05:8b:13:08:27:3d:60:d0:
                    d2:1f:5e:17:16:39:58:61:78:5a:61:2f:48:e5:d1:
                    d9:36:c8:14:98:cc:18:cc:70:1c:08:f7:8c:be:2d:
                    36:0d:d5:31:59:18:9a:6d:3e:28:5a:3e:83:63:f7:
                    a8:f6:7a:bf:74:24:57:a9:89:02:f2:28:75:a8:5d:
                    4c:3f:d7:7d:63:9f:29:e3:bb:88:5b:e4:be:5e:f5:
                    fe:3e:ee:11:b1:3e:20:39:56:d0:20:ea:25:ee:38:
                    bf:93:ce:13:0b:eb:a5:a0:d3:7e:35:58:8e:11:ff:
                    01:d4:b5:96:bf:04:e2:fb:b5:23:1e:e9:fe:d9:b2:
                    18:27:13:a8:42:d2:cf:32:46:44:d7:43:87:ed:55:
                    47:5e:8c:72:b1:d8:67:f1:b0:3a:82:e6:19:82:be:
                    9a:08:f2:8c:4a:60:ef:d1:80:4a:df:fe:8b:90:22:
                    af:89:db:96:e8:0d:d7:33:03:83:4e:5c:95:72:4c:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D4:3A:EF:DF:41:BE:F8:9E:50:F3:5B:F1:D8:2D:1F:28:21:5B:74
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:22:13:5c:f7:d7:19:80:b6:10:c7:de:a2:2b:8f:88:ca:
         57:14:0f:9e:b9:16:9f:ea:c6:ec:6d:2a:09:02:9a:73:14:62:
         fe:51:76:e9:30:05:b5:ac:ca:06:fb:9a:59:3f:61:cb:8a:ad:
         bd:29:00:ab:48:6a:a6:d9:ca:3d:84:17:7f:a4:e7:a8:f4:f4:
         cc:39:67:33:61:65:46:ac:08:37:6e:28:a8:93:55:5d:e6:68:
         c1:33:8d:d3:eb:b1:29:ca:7a:7a:39:6e:a0:09:e4:75:12:4c:
         64:e4:d0:5c:ff:01:8a:0d:7e:d8:ff:c3:14:db:3d:69:b0:ce:
         a0:64:38:6f:a0:1e:76:7c:6a:61:09:0a:61:a4:99:01:65:04:
         86:f7:a2:7c:3c:88:f3:93:70:b1:fa:63:6c:90:fa:a8:70:bb:
         32:53:bb:73:9b:e1:3a:3b:7b:3f:9a:1d:d7:29:db:9f:55:03:
         dd:6f:30:e7:7d:c0:7f:5e:b3:7c:de:dd:0a:71:34:06:f7:02:
         d1:5b:e1:5d:25:2d:f4:7f:8c:0e:f3:21:48:ce:89:01:cd:9b:
         7b:6e:7b:c7:c4:bd:9e:6c:6d:f8:67:ff:9a:75:3a:c6:68:39:
         61:db:cf:b4:01:5e:81:69:0d:bc:c5:a6:dd:69:71:ab:7c:d8:
         93:ed:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:06 2026 by rpki-client