Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File:                     mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier:          a5zL9kUa8oU9Wx7DTLAC8xbLSFEhCMDLtxAOgMFvuvs=
Subject key identifier:   73:64:CB:1E:2D:FD:7D:63:42:6B:26:78:C0:8E:34:A3:34:2A:87:58
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer:       /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial:       019F905A3CA9CF4FCD923F3645645C2629BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 19:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:00 +0000
Files and hashes:         1: 1-hSBct9w7V_v2aJj7OfoONMoQtc.roa (hash: 8Rt7WyNoryQAHJMpDa6SeX8TdTMr+iEX/3ANZvJf5vE=)
                          2: 5MZBnWU5gNxUVds2GS_ctx40VqM.roa (hash: QG6wEupT4WWEY6cienEgpE1K7AnWp3lnUif0PehHGFE=)
                          3: eCDlzK7WYx2wyI-MhH3sYue8XDg.roa (hash: 98RRinAUWzlpQnMjZqJmjkePB1/6O3taw25GtrD0NQY=)
                          4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: F8w/eshh22H95cFFCkcto3EBhMdc86uITKh1+/CPDg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:3c:a9:cf:4f:cd:92:3f:36:45:64:5c:26:29:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
        Validity
            Not Before: Jul 23 19:01:00 2026 GMT
            Not After : Jul 24 19:01:00 2026 GMT
        Subject: CN=7364cb1e2dfd7d63426b2678c08e34a3342a8758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:6e:f6:44:ed:27:f1:6a:e7:f3:75:c4:fd:
                    0a:9e:77:e8:f5:3c:bc:55:1b:b6:1f:84:71:d3:09:
                    d9:10:5f:69:1f:19:9b:76:2a:4b:4d:fc:38:44:fa:
                    e7:9d:cc:44:81:da:32:d5:5a:b7:4d:c8:5e:ca:d8:
                    3a:a2:73:47:dc:36:ba:eb:a7:ad:b1:1c:bb:a1:c4:
                    84:da:98:bd:f0:70:bc:96:a5:15:e3:d5:3c:bb:9f:
                    05:fb:26:eb:34:7b:50:49:6c:e2:fb:bf:e3:9a:c2:
                    2c:a0:8d:53:40:86:51:ff:08:53:8d:d5:59:4b:52:
                    4d:8a:d8:fc:d8:de:6f:54:29:ba:b2:fd:fc:6f:4c:
                    a1:16:a9:a1:3f:a5:29:19:7f:ce:4b:2d:e6:df:1f:
                    58:af:e3:60:fc:72:f8:9c:b0:a3:9c:62:c6:d5:1b:
                    5f:38:e7:95:c9:2b:43:47:16:9f:44:19:d4:28:ae:
                    89:c9:e2:97:0f:d2:e3:fc:49:99:25:2a:e9:4f:6f:
                    08:af:43:1b:be:b8:46:2a:a2:b5:80:85:d4:fa:08:
                    ad:49:b8:27:05:0b:a7:b3:c8:48:16:41:1c:cb:00:
                    2c:18:1e:2f:32:01:f9:fe:02:48:8c:e5:ee:f3:b2:
                    48:3a:4e:a1:d2:39:00:d5:34:e9:6a:17:99:0c:ba:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:64:CB:1E:2D:FD:7D:63:42:6B:26:78:C0:8E:34:A3:34:2A:87:58
            X509v3 Authority Key Identifier:
                keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:de:4f:37:04:6e:4f:62:83:9b:9b:a9:cb:6d:06:ee:18:26:
         23:45:b1:87:b7:fa:a8:68:3b:80:b5:06:4f:89:fa:16:37:ad:
         a0:f6:3c:a3:04:4f:73:75:3e:08:f0:c7:2a:9d:e6:78:f9:32:
         48:6b:f4:eb:7d:14:a2:38:fa:90:9d:f1:08:d2:2f:67:b7:ee:
         89:38:fa:70:99:b3:f5:3a:4f:bf:bf:0b:9c:dc:43:8f:6e:f8:
         40:c7:5a:54:06:f5:3f:95:a9:0c:b4:b4:aa:33:8c:60:4a:9e:
         bd:17:8b:ce:a5:e6:76:7d:78:05:5d:05:b2:ca:4c:f4:eb:ff:
         98:bd:75:b5:16:76:ac:83:58:76:16:6f:00:35:93:50:5c:b4:
         7c:87:0a:dd:9f:9d:6c:af:7b:3f:7f:63:46:cf:3b:f8:18:28:
         a7:4c:79:18:9c:8c:3d:64:da:31:34:6d:08:53:c6:f3:29:f7:
         33:5b:c1:87:c9:f5:5a:a1:18:35:53:5f:ec:05:09:04:27:79:
         46:ec:eb:5a:02:f3:65:93:e2:a8:67:46:4c:65:47:f5:83:28:
         f3:c6:fe:74:a1:f0:65:07:85:a2:ac:dd:04:42:b4:eb:ca:52:
         cd:ea:45:2e:aa:10:39:1c:29:d2:b0:87:22:0b:ee:8c:3f:82:
         02:3f:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:31 2026 by rpki-client