Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File:                     S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier:          nwqUcbw/d+MoJjIefe19EqmckiUjij/J50scs8OkzCI=
Subject key identifier:   06:30:70:23:3C:C3:7A:0B:9B:FB:94:8B:8D:60:C4:21:AD:22:E6:B0
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer:       /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial:       019F92480B03824806086C2F4A9CAA5A03D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number:          06A0
Signing time:             Fri 24 Jul 2026 04:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:22 +0000
Files and hashes:         1: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: +bTA8UJsvPJHDPYcwwsB2WNpKyh9WGnXaaCOVc8xqAA=)
                          2: TK0mGYfamFzjvmIKhbAYXRFUv18.roa (hash: mEStbrRzYyO+KhV7aEr8CwcL0UmalaKifwEWpoVMtQg=)
                          3: Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa (hash: uBEQAFGBVO4swE9ohNLmgnxXcBg9SBRkpgcmULSTVLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:0b:03:82:48:06:08:6c:2f:4a:9c:aa:5a:03:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
        Validity
            Not Before: Jul 24 04:00:22 2026 GMT
            Not After : Jul 25 04:00:22 2026 GMT
        Subject: CN=063070233cc37a0b9bfb948b8d60c421ad22e6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:0e:90:0d:62:2b:5b:dc:1f:a8:80:fc:c4:
                    ed:b1:0c:93:03:52:43:6c:d2:14:e4:1a:35:6f:2b:
                    bd:fe:11:7a:34:ba:da:ea:0b:2b:e1:1e:28:09:b9:
                    18:be:c5:69:fc:01:b7:ec:45:e2:30:eb:72:10:d8:
                    79:bd:9e:17:ec:ef:23:38:cc:96:58:b1:64:d2:4f:
                    1a:b1:d9:54:62:a6:3b:2d:7a:51:d0:b8:d8:f3:ef:
                    a4:c8:d5:d5:98:a9:72:92:fe:7d:64:08:b7:d1:8f:
                    b7:75:89:39:be:a2:34:24:1f:9e:c8:a3:e3:7a:bc:
                    0a:4a:7d:6c:ac:f9:38:58:c3:1b:47:27:c7:b9:d3:
                    f7:91:f8:10:ec:7e:19:fb:ec:2a:8d:2f:96:79:dc:
                    98:14:3b:7a:da:dc:17:4a:1f:1f:39:9d:77:68:73:
                    c8:5f:90:db:90:48:09:a8:a2:e5:67:d0:da:5a:31:
                    14:ef:fb:c2:4c:d1:53:f4:82:32:0d:c5:a2:52:8b:
                    f6:dd:26:f4:73:63:f8:0e:e5:1c:b4:35:05:b6:70:
                    1c:fc:bb:73:ac:a9:05:03:43:fd:e1:1b:c3:6e:58:
                    9f:8f:89:ed:8d:4d:67:14:8f:74:4c:bf:99:9f:80:
                    4f:8d:94:3f:0d:2a:02:a0:16:1a:99:13:7d:83:0f:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:30:70:23:3C:C3:7A:0B:9B:FB:94:8B:8D:60:C4:21:AD:22:E6:B0
            X509v3 Authority Key Identifier:
                keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:7d:1c:45:58:85:25:14:d7:2f:ab:19:fb:d7:29:d0:86:
         fd:81:d8:eb:43:73:8a:6d:79:ae:8c:2e:44:77:c3:ec:c1:55:
         48:56:90:a8:9c:b3:3a:fb:8e:38:bc:f7:62:e4:e7:81:15:7c:
         84:35:96:58:67:a1:d5:e5:97:e7:3d:a7:a0:c0:66:19:e0:00:
         05:ec:dc:4f:66:34:21:77:84:02:b2:d2:8d:01:52:f6:a5:10:
         69:fd:e5:6a:1e:e6:73:86:8b:18:7c:db:a4:9e:24:48:e9:55:
         20:c5:94:f7:7a:d5:b8:8c:7a:07:82:31:f4:f2:20:aa:23:2d:
         35:0c:39:6f:17:5d:3e:65:25:31:1e:60:31:43:f2:7d:03:e2:
         48:6f:e8:59:65:02:07:23:55:da:48:62:33:94:10:ae:0a:81:
         f2:09:7a:b4:e2:8f:6d:81:1b:3f:20:65:25:3b:94:5a:a1:2f:
         a5:35:ad:91:24:a6:da:75:78:1f:a8:ec:b6:a9:d9:67:f0:86:
         e2:b3:f1:31:fc:fb:d8:50:38:cd:1c:8d:b4:9c:17:43:de:07:
         33:f7:86:fb:a0:68:0c:89:ce:8e:47:1a:dd:59:12:db:08:ec:
         41:7e:e3:5a:60:d9:d1:93:66:34:bf:8b:ed:29:e5:f8:ed:18:
         6a:60:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:51 2026 by rpki-client