Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
File:                     0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft (raw, json)
Hash identifier:          kfRCMSL79dxnibZWsESCIiziAPoxGLHrttSTOiz+Q20=
Subject key identifier:   64:BA:C8:2C:13:D8:36:19:71:D5:50:F6:82:46:0E:7B:79:05:06:90
Authority key identifier: D3:37:3D:1D:C6:14:8C:B2:70:95:08:76:AB:AF:D7:40:1D:43:32:B0
Certificate issuer:       /CN=d3373d1dc6148cb270950876abafd7401d4332b0
Certificate serial:       019F8F10A23765998BE33CA9BE5BFA6EDD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
Manifest number:          40
Signing time:             Thu 23 Jul 2026 13:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:59 +0000
Files and hashes:         1: 0zc9HcYUjLJwlQh2q6_XQB1DMrA.crl (hash: 4slO8ayH0L9jZLV2LYrNFUWBtzeTSXcwNz1vBk3hULg=)
                          2: WfDkBo6-ByY2M_9lVfhhbvJ8pG8.roa (hash: JE6Ay7MaZYnar46SXXtpFkglHNLfLDb6FMY0RRt+DYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:a2:37:65:99:8b:e3:3c:a9:be:5b:fa:6e:dd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3373d1dc6148cb270950876abafd7401d4332b0
        Validity
            Not Before: Jul 23 13:00:59 2026 GMT
            Not After : Jul 24 13:00:59 2026 GMT
        Subject: CN=64bac82c13d8361971d550f682460e7b79050690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1d:87:7e:a1:ee:25:2f:ab:98:1d:d3:a7:91:
                    c8:48:de:28:93:c0:56:75:a1:64:d3:de:f5:58:e0:
                    f5:f4:cf:ef:f3:e5:a3:62:4d:20:db:fd:e5:42:de:
                    0e:80:b6:77:5b:43:67:7e:2a:ee:1f:70:db:40:94:
                    06:76:ff:19:d9:dc:0a:61:32:bd:ca:05:26:18:ef:
                    86:1a:e4:26:ed:bc:24:4c:d6:b1:af:ca:55:a3:b4:
                    eb:ec:11:6e:7c:99:06:a1:b0:8d:13:73:84:ba:28:
                    82:e8:08:e5:89:d1:1e:a6:89:1f:ac:50:f2:3a:cf:
                    0c:ef:ca:e2:07:0a:3c:7b:26:82:dc:36:67:1a:25:
                    e0:fd:6a:e6:21:15:53:68:3b:d9:35:43:47:e5:de:
                    6a:60:d5:fe:49:18:c1:92:51:63:89:a6:dd:77:0d:
                    a1:05:64:4b:e9:87:9e:f6:69:83:a7:7f:b4:d1:4a:
                    84:27:6b:e1:dd:ca:79:05:7a:e6:4a:49:27:cc:0b:
                    e0:d7:09:f1:6e:b2:55:e2:68:ac:47:90:54:89:c7:
                    d9:35:08:f9:13:3c:a4:c0:23:78:3b:4c:7e:3e:7e:
                    bc:df:24:c8:fc:82:2b:4f:0c:9b:e0:c3:4a:11:48:
                    dd:10:e6:e9:ac:36:6c:20:4c:f3:d9:ec:07:09:8f:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BA:C8:2C:13:D8:36:19:71:D5:50:F6:82:46:0E:7B:79:05:06:90
            X509v3 Authority Key Identifier:
                keyid:D3:37:3D:1D:C6:14:8C:B2:70:95:08:76:AB:AF:D7:40:1D:43:32:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:c7:8d:77:91:d4:4e:b7:bf:a7:96:bb:d2:e1:e4:42:75:
         fe:20:62:6e:ab:a1:f1:03:52:f7:5a:7f:24:61:e9:f6:9e:85:
         d8:da:c9:aa:22:5e:66:e5:04:97:0c:51:1b:f6:72:1e:41:d2:
         c4:1f:37:32:8e:09:ce:ff:c6:bb:29:f3:ea:db:22:b4:bc:ad:
         fe:7e:75:98:01:d7:02:d5:fd:c2:59:75:fd:1a:58:e9:86:b6:
         3a:12:28:1f:0b:19:a9:16:bb:13:47:c6:33:bc:6d:f0:c2:b7:
         97:e4:bf:fd:97:7b:bd:b7:72:43:0f:e0:02:c5:85:3e:df:9a:
         79:b5:c8:4d:b4:43:8b:79:9c:88:33:b3:35:7f:9f:7e:32:35:
         c5:fe:7e:56:fd:6a:ec:10:d1:9b:77:91:fe:b4:7d:21:81:8e:
         55:8f:4f:bd:a8:29:6b:a2:d4:de:d8:80:bc:4d:a3:01:9a:9c:
         ab:ea:d7:6e:63:fd:01:84:f8:c5:ac:1c:ca:7a:e7:e4:12:7b:
         6b:ff:68:97:5d:b3:87:28:48:0f:5a:e0:2d:50:b8:fd:a7:7a:
         9a:95:00:b7:b9:87:3e:46:db:76:3a:64:9c:cf:10:41:ed:4c:
         de:27:21:cb:23:15:e6:79:8a:81:cf:3b:f4:14:97:5b:aa:36:
         db:ec:c5:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEKI3ZZmL4zypvlv6bt1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzczZDFkYzYxNDhjYjI3MDk1MDg3NmFiYWZkNzQwMWQ0
MzMyYjAwHhcNMjYwNzIzMTMwMDU5WhcNMjYwNzI0MTMwMDU5WjAzMTEwLwYDVQQD
Eyg2NGJhYzgyYzEzZDgzNjE5NzFkNTUwZjY4MjQ2MGU3Yjc5MDUwNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+h2HfqHuJS+rmB3Tp5HISN4ok8BW
daFk0971WOD19M/v8+WjYk0g2/3lQt4OgLZ3W0NnfiruH3DbQJQGdv8Z2dwKYTK9
ygUmGO+GGuQm7bwkTNaxr8pVo7Tr7BFufJkGobCNE3OEuiiC6AjlidEepokfrFDy
Os8M78riBwo8eyaC3DZnGiXg/WrmIRVTaDvZNUNH5d5qYNX+SRjBklFjiabddw2h
BWRL6Yee9mmDp3+00UqEJ2vh3cp5BXrmSkknzAvg1wnxbrJV4misR5BUicfZNQj5
EzykwCN4O0x+Pn683yTI/IIrTwyb4MNKEUjdEObprDZsIEzz2ewHCY95vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS6yCwT2DYZcdVQ9oJGDnt5BQaQMB8GA1UdIwQY
MBaAFNM3PR3GFIyycJUIdquv10AdQzKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpjOUhjWVVqTEp3bFFoMnE2X1hRQjFETXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNzhkMjgtNTk0ZS00YTBkLTg5OGIt
Yzc0MDA3MDlhOGRkLzEvMHpjOUhjWVVqTEp3bFFoMnE2X1hRQjFETXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zNzhkMjgtNTk0ZS00YTBkLTg5OGItYzc0MDA3MDlhOGRk
LzEvMHpjOUhjWVVqTEp3bFFoMnE2X1hRQjFETXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3PHjXeR
1E63v6eWu9Lh5EJ1/iBibquh8QNS91p/JGHp9p6F2NrJqiJeZuUElwxRG/ZyHkHS
xB83Mo4Jzv/Guynz6tsitLyt/n51mAHXAtX9wll1/RpY6Ya2OhIoHwsZqRa7E0fG
M7xt8MK3l+S//Zd7vbdyQw/gAsWFPt+aebXITbRDi3mciDOzNX+ffjI1xf5+Vv1q
7BDRm3eR/rR9IYGOVY9Pvagpa6LU3tiAvE2jAZqcq+rXbmP9AYT4xawcynrn5BJ7
a/9ol12zhyhID1rgLVC4/ad6mpUAt7mHPkbbdjpknM8QQe1M3ichyyMV5nmKgc87
9BSXW6o22+zFaw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:54 2026 by rpki-client