Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          mq7dKlxBqJzZMD2BV7Qis6lcnle+5MAvAtpCi2tuvYo=
Subject key identifier:   CC:4C:AD:B2:86:B5:FD:79:2C:CB:2F:B8:C0:84:72:0F:76:C9:07:1F
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       019F9436740F2CCE40366B8F4A75A33A4328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          14E7
Signing time:             Fri 24 Jul 2026 13:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:24 +0000
Files and hashes:         1: QiwWH1RtFqoFlh8ODhTHxGES8wo.roa (hash: HZ1hGzr6d7Gz+vsrN9BoASQoL9FuMmrP2dJvc65ilDk=)
                          2: QqUbGPbWnb6gjhCMOqT2grVMHLc.roa (hash: Nr3sSa3uJP0epmv5crHEIzFx3Y5ip1SyFjThlCVINnw=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: RuqgaQecCHbIL/6Vf7lWyWK3LjlSq7Xtu35fYZOGrWs=)
                          4: yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa (hash: DACPJnZscxbHEOmbZYNR1bRZKHxl5ev0RDcNgFEGAgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:74:0f:2c:ce:40:36:6b:8f:4a:75:a3:3a:43:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Jul 24 13:00:24 2026 GMT
            Not After : Jul 25 13:00:24 2026 GMT
        Subject: CN=cc4cadb286b5fd792ccb2fb8c084720f76c9071f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:9c:27:f5:b0:68:1d:c5:eb:20:d4:b7:8a:
                    78:5f:c0:75:00:5c:c4:9e:55:fd:39:79:6a:13:8a:
                    19:77:2c:49:c4:9d:d1:d6:e1:b4:df:6e:0f:6f:04:
                    9d:77:e5:6c:52:07:84:f1:0a:6a:6a:11:86:2d:b5:
                    3b:e0:9f:c7:ef:d0:01:ac:70:c6:af:0e:ad:c0:21:
                    de:4f:c9:57:11:31:4f:86:93:f8:3c:06:a8:51:33:
                    49:2e:98:8c:14:d0:e3:56:e4:71:6c:4b:bb:fe:68:
                    f9:c3:fe:30:24:5b:cc:7d:d0:7d:65:8c:5d:bd:cf:
                    b2:5b:34:28:14:1a:fe:ec:f4:af:e3:4e:c9:01:90:
                    3f:92:69:e2:03:c6:38:7c:d6:fb:9b:37:c9:26:8f:
                    00:89:09:2a:c3:51:ff:8a:90:3d:17:a5:ca:f9:82:
                    2d:e7:af:07:69:cc:1a:49:62:91:96:bc:e8:77:79:
                    97:e0:00:86:be:ee:5f:c5:f8:29:ff:9b:24:8d:8e:
                    b5:2d:3e:e7:97:88:f2:11:30:31:b8:5c:37:38:20:
                    dd:44:0b:18:12:9d:14:ec:23:8d:f1:c6:77:54:1c:
                    1b:ea:cd:cf:72:b9:af:0e:d7:85:6b:ed:ab:40:d7:
                    2d:b2:85:33:de:c0:55:5c:2a:9f:2b:6a:a8:6b:73:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4C:AD:B2:86:B5:FD:79:2C:CB:2F:B8:C0:84:72:0F:76:C9:07:1F
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a7:43:7f:a7:55:ea:d3:ef:e5:47:d5:7d:df:94:ee:4e:d1:
         1a:f8:05:09:63:61:49:13:b0:8a:88:2a:ae:76:9b:80:46:02:
         70:bf:71:ee:6a:a6:f8:ee:34:f2:95:94:2a:77:18:c7:a4:5d:
         ca:a8:81:41:4e:56:93:62:65:f2:35:49:bb:d8:0b:da:3d:28:
         3c:ec:75:43:5f:e6:02:17:6f:f5:cc:b1:dc:c0:df:ea:1c:fa:
         33:28:fa:58:df:f0:4e:00:2b:1c:55:76:ef:bc:ee:e8:4a:d5:
         15:0f:b3:51:84:5b:7a:3b:28:30:cd:75:0c:27:5e:9f:3a:15:
         43:fa:0c:d3:80:15:94:ab:47:ca:1a:55:ff:3b:5a:99:dc:55:
         c1:e9:0d:22:75:9e:03:2b:ee:cd:19:85:30:f0:db:ad:05:5b:
         24:d5:e7:fc:ae:e2:69:00:bb:aa:36:5d:c1:74:cd:be:46:64:
         90:1a:f5:c9:79:d0:ac:d1:2d:b8:64:90:df:c7:ea:ff:61:c2:
         01:8f:14:c2:52:25:8b:b7:77:d6:c9:52:6f:72:de:9e:c6:7d:
         e4:d6:d6:3a:93:ec:6f:a9:8a:8f:5e:18:68:37:43:48:34:6b:
         c7:cc:7e:4f:33:5f:2c:9e:da:96:f1:5f:b5:75:60:cb:ba:cf:
         ec:7d:b1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:00 2026 by rpki-client