Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File:                     z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier:          /q4q8kur6uEFE/Tyz+rivuONwioJpbRVDntaHDos8ZI=
Subject key identifier:   36:E1:41:61:62:AC:DA:5E:DA:CB:5F:21:2E:D0:59:8C:36:E4:68:EA
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer:       /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial:       019F94A4FC6491E5452A519F4F97F912E919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number:          19DC
Signing time:             Fri 24 Jul 2026 15:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 15:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 15:01:08 +0000
Files and hashes:         1: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=)
                          2: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=)
                          3: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=)
                          4: LBK2m0x43uiy3CDrXewo6CElebE.roa (hash: Melk19K0g3bAymWD/+lvWlNHh7zUQK9z4QHwwE2U65g=)
                          5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=)
                          6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=)
                          7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=)
                          8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=)
                          9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=)
                          10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=)
                          11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=)
                          12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: X9TUyL4AryiG3+mPaXBsaYoqtKOiy5pMYlx+oVY1I6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:fc:64:91:e5:45:2a:51:9f:4f:97:f9:12:e9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
        Validity
            Not Before: Jul 24 15:01:08 2026 GMT
            Not After : Jul 25 15:01:08 2026 GMT
        Subject: CN=36e1416162acda5edacb5f212ed0598c36e468ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:bb:63:a3:c9:8b:71:dd:83:4c:b0:f0:aa:
                    c7:e7:f0:d9:62:cd:05:c4:52:2f:dd:12:ee:95:fb:
                    e1:97:b5:4b:3c:ef:3d:8e:14:0f:01:c6:8d:1d:a0:
                    34:3e:b8:2d:23:f6:e5:1d:c8:05:18:54:23:9d:7d:
                    26:d5:1a:2e:04:5c:10:5e:4d:5e:d4:6a:0b:f9:b9:
                    ae:55:2e:1b:9d:3e:c3:8b:ec:62:50:f8:f0:03:6c:
                    11:c7:ef:ad:8a:f0:4b:35:78:c0:c5:b0:a3:af:35:
                    a3:8b:c9:cf:48:94:58:ea:fe:b2:8d:4c:47:ad:8b:
                    6a:e0:c9:08:71:95:12:29:5c:b8:21:61:2f:c5:5d:
                    c2:da:0f:58:a0:8f:67:19:33:5e:09:0d:56:9a:dd:
                    48:7e:ce:eb:c2:af:51:91:b5:f1:7d:81:5a:86:47:
                    b4:d7:8b:3a:ad:30:a7:a6:b0:c9:e8:1f:ab:72:72:
                    c4:9a:cf:35:1c:9f:3a:5b:86:30:d6:c8:e3:2e:dc:
                    1b:e3:82:d7:72:ca:fe:3b:36:f3:fc:99:bd:e4:81:
                    45:b1:d5:3d:c9:7e:2b:8d:58:ba:aa:44:b1:19:d3:
                    22:da:06:23:9b:72:74:33:1a:4f:d1:f3:3f:04:35:
                    fd:c9:57:1d:a5:8b:97:b5:2c:be:63:04:ed:c8:17:
                    d6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:41:61:62:AC:DA:5E:DA:CB:5F:21:2E:D0:59:8C:36:E4:68:EA
            X509v3 Authority Key Identifier:
                keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:88:76:9f:7c:6d:8b:51:31:38:d0:b1:17:d3:56:88:01:
         56:54:32:41:dd:7f:92:1b:a8:d3:01:e8:e6:26:3c:36:29:72:
         5b:d2:cd:0a:d6:48:df:68:aa:f0:9f:68:e6:43:b9:e5:69:43:
         09:8f:bc:06:30:a7:65:40:83:7b:3a:be:77:61:d5:1a:46:9d:
         a3:31:c4:43:80:e7:48:04:8e:4f:44:b3:83:db:45:bb:11:33:
         01:df:f9:f2:22:28:81:7e:2b:75:30:27:19:be:c3:bf:e1:05:
         0a:d0:68:85:f0:e1:78:73:d0:34:b5:4a:74:fc:8f:5b:a5:3a:
         dd:92:3c:b0:a6:dc:2c:ba:94:dc:46:9b:52:05:c9:fe:66:db:
         77:b6:86:bf:73:a7:b9:62:5f:70:40:d7:98:5b:29:79:26:62:
         c5:9f:1e:59:dc:69:75:cd:bc:9b:e0:5f:df:19:46:8f:17:ff:
         a5:ee:d7:64:cc:6a:c3:06:98:83:81:5a:14:fe:18:d8:6e:b8:
         c2:26:40:aa:06:0d:ba:18:f6:ba:ab:d8:c3:da:f0:66:48:49:
         ee:a1:7a:74:db:87:2b:21:45:5b:4d:3a:c3:9c:34:69:e2:fc:
         44:46:27:db:60:0b:42:63:e7:fe:b9:d2:b6:58:78:d1:15:9f:
         c1:cf:67:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpPxkkeVFKlGfT5f5EukZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1
NTI2ZmEwHhcNMjYwNzI0MTUwMTA4WhcNMjYwNzI1MTUwMTA4WjAzMTEwLwYDVQQD
EygzNmUxNDE2MTYyYWNkYTVlZGFjYjVmMjEyZWQwNTk4YzM2ZTQ2OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZu7Y6PJi3Hdg0yw8KrH5/DZYs0F
xFIv3RLulfvhl7VLPO89jhQPAcaNHaA0PrgtI/blHcgFGFQjnX0m1RouBFwQXk1e
1GoL+bmuVS4bnT7Di+xiUPjwA2wRx++tivBLNXjAxbCjrzWji8nPSJRY6v6yjUxH
rYtq4MkIcZUSKVy4IWEvxV3C2g9YoI9nGTNeCQ1Wmt1Ifs7rwq9RkbXxfYFahke0
14s6rTCnprDJ6B+rcnLEms81HJ86W4Yw1sjjLtwb44LXcsr+Ozbz/Jm95IFFsdU9
yX4rjVi6qkSxGdMi2gYjm3J0MxpP0fM/BDX9yVcdpYuXtSy+YwTtyBfWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbhQWFirNpe2stfIS7QWYw25GjqMB8GA1UdIwQY
MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct
NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1
LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+CIdp98
bYtRMTjQsRfTVogBVlQyQd1/khuo0wHo5iY8NilyW9LNCtZI32iq8J9o5kO55WlD
CY+8BjCnZUCDezq+d2HVGkadozHEQ4DnSASOT0Szg9tFuxEzAd/58iIogX4rdTAn
Gb7Dv+EFCtBohfDheHPQNLVKdPyPW6U63ZI8sKbcLLqU3EabUgXJ/mbbd7aGv3On
uWJfcEDXmFspeSZixZ8eWdxpdc28m+Bf3xlGjxf/pe7XZMxqwwaYg4FaFP4Y2G64
wiZAqgYNuhj2uqvYw9rwZkhJ7qF6dNuHKyFFW006w5w0aeL8REYn22ALQmPn/rnS
tlh40RWfwc9nBQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:16:56 2026 by rpki-client