Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
File:                     ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json)
Hash identifier:          7XwxPaJgtjsqeUYAxXD2J8VM7aVhDicLZlh1vd/Ep5A=
Subject key identifier:   0F:70:A0:41:B7:A0:2F:EB:00:05:35:03:67:5F:67:A5:B4:A8:EC:E6
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Certificate issuer:       /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial:       019F95B7A4FE2670DB442908391D861BB7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
Manifest number:          18D1
Signing time:             Fri 24 Jul 2026 20:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 20:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 20:01:08 +0000
Files and hashes:         1: OAIvzsBtuFZey51F26GoFlgIcXk.roa (hash: RrRzXT/cIeb31Wmixj2eJEHKu80nNaBp4OOEc3gjdd4=)
                          2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: wZsaRc87hmj1ClXPyp2tXpcoEBuLz0kI48X0M0RrDPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:a4:fe:26:70:db:44:29:08:39:1d:86:1b:b7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
        Validity
            Not Before: Jul 24 20:01:08 2026 GMT
            Not After : Jul 25 20:01:08 2026 GMT
        Subject: CN=0f70a041b7a02feb00053503675f67a5b4a8ece6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:d8:77:6c:58:4a:2d:9e:21:7b:34:bb:f0:
                    64:1e:c9:2d:2e:8b:e8:35:8d:cc:71:af:1b:05:28:
                    b7:eb:a2:89:ae:ba:8d:92:15:50:38:f1:7e:9d:1c:
                    84:4d:53:ae:1d:95:1f:05:ba:45:8f:7e:18:9b:8f:
                    3b:c3:6e:c7:97:06:5c:74:66:68:02:d0:2a:e7:69:
                    79:f0:7f:cc:4e:e0:de:e4:1c:ac:85:17:39:f2:bb:
                    b4:0e:df:2c:5a:3f:4c:64:40:6f:5f:44:80:29:77:
                    aa:0e:06:d6:6f:4d:0e:0b:f7:e2:37:5d:e5:5d:1a:
                    8e:2f:55:bc:13:f8:38:72:23:4d:53:bc:bb:e3:05:
                    d4:64:c7:b5:cd:15:54:f9:31:84:a6:ae:30:b9:ae:
                    44:52:7d:6a:dd:57:39:1d:b9:25:7b:04:b2:88:f0:
                    ae:58:61:03:cb:93:65:27:1e:99:36:7b:24:c9:b6:
                    45:dd:1b:86:36:e2:fa:84:e8:cf:1a:7a:0a:4c:26:
                    bf:cd:75:f0:06:2e:64:72:f7:06:44:bd:fc:7c:c5:
                    84:bf:ff:6c:1c:cc:14:2f:70:1b:06:ec:c8:e2:6d:
                    0f:72:8c:60:a8:1d:04:df:ad:ba:c1:cd:c2:e9:ee:
                    8d:02:e2:c4:84:28:40:2c:8f:3d:b4:0b:d5:7f:30:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:A0:41:B7:A0:2F:EB:00:05:35:03:67:5F:67:A5:B4:A8:EC:E6
            X509v3 Authority Key Identifier:
                keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:80:83:26:ba:98:da:d7:d2:5a:57:42:fc:76:0a:15:1e:
         a2:96:2a:4c:ca:11:1e:57:3c:9e:a4:d5:24:af:fa:13:9a:38:
         13:e7:fc:d1:34:36:f2:1f:79:c0:5a:0d:f3:d4:09:d2:fd:f3:
         7a:2f:c9:d0:47:64:5f:45:af:82:0f:83:95:6a:a9:ca:11:95:
         6e:bd:bb:e0:fa:ac:e9:8b:52:b8:a2:1c:bb:d6:81:94:7d:9e:
         17:7a:e2:fc:ca:cb:79:f8:e8:d0:cb:68:44:79:87:7d:b3:db:
         6b:41:da:eb:46:ef:04:df:55:1c:90:60:d5:40:7f:e8:b3:bf:
         2b:03:9a:f1:c3:a2:d0:80:6b:ee:10:4f:11:85:f1:82:93:29:
         79:ef:db:7e:b7:aa:9a:dd:40:85:73:53:39:0f:b2:0e:88:5b:
         78:f2:39:de:96:aa:ff:b9:22:15:f9:c0:dc:0a:77:1f:1b:eb:
         ef:fa:9f:1c:8b:d3:45:e8:36:5c:56:20:4b:36:99:ec:20:b8:
         68:10:79:08:ab:4f:7e:6e:32:4b:ba:ec:5e:48:e0:b5:ae:62:
         5d:97:3a:db:32:a1:3e:bc:b4:5f:70:71:cb:d5:1c:8f:ce:fb:
         61:2a:fe:a7:33:c1:f2:e8:1f:91:38:6f:9d:f4:c0:ad:f1:50:
         ee:19:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:46:39 2026 by rpki-client