Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File:                     Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier:          FN4O0XNP0xby6HbvuSzjgC5KHnr3p7bo14G3zvW7t8M=
Subject key identifier:   1C:64:24:8C:67:D5:D0:E3:ED:77:C4:CD:48:CC:E0:9C:91:E3:3C:16
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer:       /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial:       019F92B653B83EE03FEFAE11DB46265AC800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number:          0CE9
Signing time:             Fri 24 Jul 2026 06:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:50 +0000
Files and hashes:         1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: miENZiXn+D/EQwRO6dUh4MHd1MS/6NN7ob8kUXHG3kI=)
                          2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:53:b8:3e:e0:3f:ef:ae:11:db:46:26:5a:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
        Validity
            Not Before: Jul 24 06:00:50 2026 GMT
            Not After : Jul 25 06:00:50 2026 GMT
        Subject: CN=1c64248c67d5d0e3ed77c4cd48cce09c91e33c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:10:2f:32:79:43:c1:ba:59:09:08:88:1a:
                    e9:b8:0f:f2:d9:4b:13:1a:59:c9:25:1e:b5:86:1a:
                    db:52:77:a3:08:e4:a2:aa:15:fd:6e:08:30:ab:ba:
                    14:9d:20:72:e7:91:84:53:2b:26:e8:c7:ba:20:51:
                    0b:29:93:cc:c7:7d:b3:ce:eb:e7:d1:06:7d:9c:fb:
                    2c:eb:64:cb:55:74:1e:9b:7b:a7:97:5d:f3:b4:4f:
                    31:de:99:e0:38:39:43:a9:bb:44:94:b0:66:ec:97:
                    2e:45:87:f5:28:6e:f7:19:3c:41:79:86:e4:9d:76:
                    06:cb:95:ef:e2:e5:45:0c:22:c3:40:50:e1:33:7e:
                    f8:ee:98:ad:37:73:76:e2:6c:05:af:93:58:15:fd:
                    8d:0c:6b:ce:ae:fe:fc:1c:06:3d:87:1e:fc:85:ef:
                    ea:27:e7:0d:bb:78:49:81:a6:36:0a:b5:80:3e:04:
                    e8:fa:df:83:a3:7c:26:ac:b3:39:68:08:0e:d3:fa:
                    26:5f:da:fa:81:87:93:77:6c:45:7a:00:12:4f:f8:
                    98:d4:0e:11:16:2b:cf:43:e1:01:66:58:ff:be:38:
                    63:03:2a:f7:21:f0:35:d0:d9:83:1b:6b:6d:83:98:
                    a0:fe:f8:50:45:e4:31:99:76:5c:e5:21:5a:e0:8f:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:64:24:8C:67:D5:D0:E3:ED:77:C4:CD:48:CC:E0:9C:91:E3:3C:16
            X509v3 Authority Key Identifier:
                keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:69:65:af:9a:06:37:0b:17:5e:a6:b7:74:b5:a2:07:dc:ab:
         0c:a0:83:a6:60:49:ac:3e:2f:25:16:83:5c:f2:6f:c3:ed:9f:
         62:1f:98:42:97:e3:f8:06:1c:cb:81:31:e2:7e:78:42:aa:3d:
         58:a9:7a:fc:a3:ba:6e:04:cb:f7:19:34:cb:c9:b7:50:67:7b:
         9d:56:5c:4d:e8:01:3f:35:c7:9c:e9:1e:8f:53:49:23:9c:23:
         ea:c7:4f:d7:d6:2b:99:71:a6:fa:04:52:a0:d2:04:8d:50:e6:
         c1:f6:00:13:12:69:8b:01:46:b8:19:67:96:b4:22:d7:0f:0e:
         3a:1f:be:85:4d:c6:22:b3:10:2a:63:5b:eb:b2:5b:58:98:e2:
         7e:74:9b:1f:8d:7f:b3:b2:d7:85:77:d1:f5:40:21:d7:8c:33:
         d1:b1:f9:be:9a:9c:fd:a0:29:68:6f:63:0f:ab:b9:9c:94:66:
         f7:27:7b:c8:00:80:7d:73:7e:6f:94:6a:42:39:c3:80:73:64:
         d0:53:6e:42:7e:26:39:8c:0c:33:1a:38:e5:a2:50:12:90:c7:
         e6:a0:31:96:76:73:2e:c7:68:94:6b:1b:62:db:1a:7c:0c:95:
         c8:9c:b6:c9:6a:09:62:27:94:81:28:08:21:61:ed:0d:d9:46:
         77:5d:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:55 2026 by rpki-client