Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File:                     ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier:          34vQYTq4AQVAauYJ4wr3YpFb+oBOkEJEAJ9OYXQCXzM=
Subject key identifier:   2F:9D:F0:4E:FA:25:B2:72:3C:97:4A:16:1F:A0:00:9D:45:81:C7:17
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer:       /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial:       019F927F87EC9CAE8C64D813349882F94D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number:          195B
Signing time:             Fri 24 Jul 2026 05:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:58 +0000
Files and hashes:         1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
                          2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: EwJ2Pr8Z1ss+7489QO+FnFkNSltrXUwYEwCx0qu7TZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:87:ec:9c:ae:8c:64:d8:13:34:98:82:f9:4d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
        Validity
            Not Before: Jul 24 05:00:58 2026 GMT
            Not After : Jul 25 05:00:58 2026 GMT
        Subject: CN=2f9df04efa25b2723c974a161fa0009d4581c717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c2:f0:e3:34:24:69:88:c8:92:1f:57:98:fc:
                    11:8d:f8:6d:80:a8:8e:7e:42:d9:ca:30:f0:d4:4d:
                    22:40:58:79:f5:eb:79:e3:b0:69:63:c7:ba:7f:88:
                    b2:4f:12:7f:01:3a:21:fa:b8:ad:27:16:77:dd:7f:
                    19:a1:b4:50:01:b3:be:26:07:77:a3:d3:91:d6:f2:
                    89:ee:82:3d:8a:fc:47:5d:0c:40:f7:bc:be:3d:ef:
                    d1:9f:96:3d:2d:c5:2a:5b:bc:86:5d:6f:82:92:80:
                    b5:22:1f:44:91:33:c5:8b:22:94:08:25:7e:fb:30:
                    47:17:30:36:59:0b:16:d7:2b:10:97:20:fe:bd:4a:
                    14:ec:e9:30:05:ac:49:8d:a0:c2:f8:3f:b8:95:63:
                    b6:16:c0:83:a6:6a:b5:0f:53:b0:df:ac:e0:14:63:
                    e5:98:bf:13:86:44:39:55:ac:69:94:19:04:d0:2c:
                    e6:c8:97:d8:db:50:5a:32:9b:18:9b:13:49:63:71:
                    ff:ce:6c:37:a3:ae:a4:28:6e:16:e0:59:2e:9f:b4:
                    27:ff:c3:f7:c4:64:27:8c:76:fc:22:7e:04:2c:73:
                    79:16:c5:2c:48:55:6c:b8:76:40:6c:c2:ea:37:a5:
                    52:a6:55:af:2b:55:cc:68:be:d9:0e:3e:fe:62:1a:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9D:F0:4E:FA:25:B2:72:3C:97:4A:16:1F:A0:00:9D:45:81:C7:17
            X509v3 Authority Key Identifier:
                keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:c0:2a:ed:f3:1d:50:0d:5d:b1:bb:d2:70:fc:1e:6a:43:
         14:eb:41:e1:18:38:25:c1:eb:35:9a:a3:58:f8:81:c9:71:c1:
         ca:ed:37:63:50:db:d5:13:65:ab:f5:10:e8:96:0b:59:65:ce:
         65:f9:4a:17:9c:79:07:0b:12:22:7a:8d:c7:a3:6f:2c:e3:9f:
         35:42:6f:af:cc:c1:01:89:93:9e:b6:0f:e1:0c:90:66:7c:8d:
         79:d8:a6:61:99:7d:c4:96:27:f7:e3:f1:75:09:dc:49:c1:5f:
         f0:d2:8c:78:79:7b:01:5b:87:8f:51:27:ed:5c:1e:d6:19:35:
         f8:15:d4:93:cb:8d:13:87:86:6c:71:78:f1:96:1b:80:b4:60:
         c9:7b:22:28:4c:5c:f1:5b:4e:5f:37:6a:d2:17:f3:ca:34:6e:
         1b:c3:d9:88:b6:c5:10:8c:60:3a:7b:d9:e8:10:82:7f:bc:85:
         f8:d0:79:1f:31:9b:14:f2:34:d9:13:fe:b3:ab:10:cc:c7:35:
         4d:98:df:3d:e9:9b:28:a5:c0:2e:50:32:c3:db:7c:a3:7c:27:
         62:33:86:47:54:13:1c:00:4d:55:33:b1:6f:b0:55:e6:60:af:
         a3:64:c2:f9:b9:34:d3:46:96:d2:a1:12:4e:0a:d4:3c:8a:5c:
         06:74:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:46 2026 by rpki-client