Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File:                     1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier:          1v1rhFBBPePBJa/IcKGhTeP0ve00EQC8B9Rq/PBMxT4=
Subject key identifier:   06:88:96:03:08:57:FC:EE:66:8F:A6:EF:8F:A8:60:F0:41:B8:06:C4
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer:       /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial:       019F8F4784F7218CD0669FAF8C3ABA5684B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number:          129B
Signing time:             Thu 23 Jul 2026 14:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:56 +0000
Files and hashes:         1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: dT0oHkLAxqai1jb8e+XZPCwES4Rx02QM6vwGWwp47Qs=)
                          2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:84:f7:21:8c:d0:66:9f:af:8c:3a:ba:56:84:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
        Validity
            Not Before: Jul 23 14:00:56 2026 GMT
            Not After : Jul 24 14:00:56 2026 GMT
        Subject: CN=068896030857fcee668fa6ef8fa860f041b806c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:f7:da:f2:e0:75:bb:c4:e3:a7:8c:09:3d:
                    45:44:75:29:0e:68:b3:bb:60:c2:ec:f9:cf:48:85:
                    d8:33:95:f5:77:7c:d8:ae:59:a6:c6:6d:19:7c:74:
                    f4:c4:e6:4c:56:60:e9:06:2b:bb:ed:3d:7d:1c:ac:
                    8d:7b:c2:c0:5c:42:ae:ec:33:f9:fd:48:de:13:95:
                    5d:3b:b2:9a:80:90:73:88:e5:fb:2a:85:72:64:0e:
                    74:4a:d3:8b:90:5e:34:4f:b7:19:73:fc:5d:7a:5c:
                    8f:1c:8c:24:fc:13:67:6b:d6:66:23:3e:91:a6:cc:
                    07:d2:1e:a6:9a:c0:ac:09:e6:2b:f8:12:4b:be:b2:
                    85:08:6f:19:7b:44:ff:fe:7f:06:a5:18:44:97:0f:
                    05:0a:aa:61:90:0d:a2:fc:eb:11:17:e8:6a:80:df:
                    46:16:d8:e6:1c:24:17:ab:1e:9c:12:15:c8:0e:8f:
                    8c:4f:fa:22:0a:df:29:94:bb:f1:d2:f8:bf:b9:6b:
                    3e:06:b3:cf:fb:63:56:7e:5c:70:98:2c:d6:93:b2:
                    40:60:86:07:c5:9b:3f:83:67:5e:2e:4e:71:20:ec:
                    96:55:08:3f:6a:ba:c2:84:ef:52:38:37:7a:12:5b:
                    ce:0e:d9:aa:fa:30:b9:cc:5b:66:8d:96:8b:ff:83:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:96:03:08:57:FC:EE:66:8F:A6:EF:8F:A8:60:F0:41:B8:06:C4
            X509v3 Authority Key Identifier:
                keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:04:3e:7e:83:7b:36:1d:87:14:57:f8:40:e0:02:92:5e:
         7b:7a:92:4b:05:bf:85:97:dc:44:0b:63:2b:86:a5:1f:0d:ce:
         af:bc:4c:60:08:ca:07:20:d9:5b:1b:79:15:2c:a5:8d:13:38:
         dc:48:86:fb:11:2d:9f:d3:b2:62:52:7e:55:cd:6e:41:14:7d:
         48:f5:25:fa:f0:02:37:20:f1:06:32:12:35:95:c4:47:2e:77:
         80:20:ff:d8:2b:5a:d5:b5:30:03:20:dc:4c:e6:07:6c:b4:99:
         99:a2:ab:ba:d6:ac:38:54:53:2c:17:1b:c1:5b:99:5e:23:87:
         11:62:4c:a8:d1:3a:8b:1b:2d:28:26:17:da:fc:50:17:04:3a:
         d2:c2:7a:27:54:c1:a8:49:43:f3:3a:fc:11:4e:75:59:c7:3f:
         83:bd:38:ab:d8:3e:73:67:7a:ec:e8:96:fc:e8:35:86:7a:8f:
         bc:d0:18:8c:57:c7:b8:60:7e:54:5b:6a:b6:3a:6b:f8:a0:e7:
         6a:78:e0:c9:bf:b7:80:e3:c5:ef:2c:f8:cc:a5:75:58:d5:fe:
         f2:9a:f8:49:f1:7d:41:14:e7:ea:5f:48:c5:f0:0d:b1:63:25:
         5c:54:d0:4e:ab:2f:61:1d:17:37:f8:8d:25:15:2d:92:49:66:
         7e:3d:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:52 2026 by rpki-client