Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
File:                     K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json)
Hash identifier:          d7Djii5llj8b4QDeS21JS6ux3Sb/VBAITTn50e5TVIc=
Subject key identifier:   87:6A:6E:58:02:6D:2E:B3:BF:9F:9F:60:1E:03:70:A2:A3:6D:18:D1
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Certificate issuer:       /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial:       019F93C902E8CA5EF29B7B12ACC88435A6E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
Manifest number:          12B4
Signing time:             Fri 24 Jul 2026 11:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:51 +0000
Files and hashes:         1: 7dUk_iTWyq-CeV5sugxsu_-uM24.roa (hash: M71kUmZZx7bac9nbXal3k/LyQr/8W0Eyw9aShrmuf9U=)
                          2: JA2Y-jh-PHCmYhc4L6lveTEQpC8.roa (hash: yCR3T9OdwoX7tNGe8kaR3S1PiWc9KBcnYLkTDnQhJyM=)
                          3: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: twc9NsQqB6MbWbAqMB1pQozclJKxdrAejwdgO9/crEc=)
                          4: XdlPMT-bB9justbDAchQlf2GaJA.roa (hash: NVx53WaZg/EMVCB0M10esFX/diAZvcM3gZhX72tXbMQ=)
                          5: k2ARdikxN9KDLwEYOTj7rA03tck.roa (hash: 17Iyu6Bq3YNNwBSHGv6T+1WMQURvGsO2DjlvzlanJeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:02:e8:ca:5e:f2:9b:7b:12:ac:c8:84:35:a6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Validity
            Not Before: Jul 24 11:00:51 2026 GMT
            Not After : Jul 25 11:00:51 2026 GMT
        Subject: CN=876a6e58026d2eb3bf9f9f601e0370a2a36d18d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:95:58:cd:ac:b0:89:b5:a1:b4:d9:84:b5:
                    91:24:46:d8:76:3d:93:bb:b3:2e:27:ec:e9:8a:e8:
                    8f:80:0c:80:76:ee:c6:50:a4:4a:53:7b:07:c0:a6:
                    b1:5a:86:c4:e7:31:09:6f:ca:ac:ec:8b:34:cf:ac:
                    23:4c:62:29:95:12:fc:f2:12:90:0c:e5:b1:21:79:
                    4e:e6:27:06:3a:51:90:1d:7d:94:9e:f1:60:fe:8d:
                    d9:03:04:b6:cf:f2:18:1e:e0:d4:9f:19:8e:85:81:
                    92:a9:a9:23:f2:4a:da:dd:9c:21:83:a5:14:1e:c3:
                    b9:6b:c1:83:1a:a1:e1:ac:5d:3f:9a:3e:4b:1a:a0:
                    07:e1:b9:6b:ef:8f:d4:1b:76:da:e0:d3:84:fe:be:
                    75:62:0b:d6:2c:db:db:ba:a6:9d:e8:b6:ac:41:2e:
                    bd:2b:f1:e3:54:39:2c:e5:34:8a:7e:c1:14:5b:5d:
                    90:f1:f3:e0:c6:2a:07:7a:82:52:67:b3:3d:0e:9c:
                    34:15:99:6f:db:6d:da:6b:7f:a0:e3:be:5b:48:71:
                    e9:1d:a7:27:67:8d:18:0c:5e:c9:5f:1b:84:be:5a:
                    0b:13:15:9c:5c:1e:a3:10:05:45:3a:c6:68:0b:3b:
                    e0:e7:64:a6:11:b5:25:7c:93:13:61:3f:9e:0d:2e:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6A:6E:58:02:6D:2E:B3:BF:9F:9F:60:1E:03:70:A2:A3:6D:18:D1
            X509v3 Authority Key Identifier:
                keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:73:21:1b:77:63:92:4d:d9:a6:d3:98:b3:b5:01:9b:b4:
         5f:60:b1:c6:76:ca:f5:f9:17:1b:51:41:e2:cb:6c:24:0f:58:
         9d:9b:d0:9d:0a:e8:17:d3:9f:77:cd:0f:ff:b1:fc:62:37:5a:
         a1:15:c5:2e:95:ca:39:82:09:50:5d:e4:8b:5c:0f:c3:0c:bd:
         5f:8a:f7:f9:f7:19:33:83:42:d2:f2:57:5e:f0:d4:d3:fb:2b:
         d1:b0:27:55:f9:76:89:19:17:8c:75:47:50:a1:2f:e5:c8:d6:
         9d:2f:5b:df:95:43:b4:cc:1c:7b:9a:59:f3:93:4e:fe:d2:4b:
         2d:a6:ae:70:fc:f1:b5:4d:b7:ad:49:61:7c:99:d5:f6:2e:35:
         d3:81:6f:17:d2:14:ac:24:02:8a:c9:7b:13:49:ca:c3:0e:ca:
         d6:3b:67:23:19:84:7b:44:b4:99:69:7a:12:f4:66:43:68:ea:
         61:1e:f2:21:7e:25:d5:19:d5:9c:65:67:a0:04:b8:31:cf:0f:
         4a:fb:da:1d:9e:f5:43:52:72:cf:af:23:62:17:09:25:40:07:
         07:27:9c:c4:e5:3b:f3:b6:06:96:0b:24:07:20:46:30:54:02:
         b2:e9:fb:f4:16:15:38:73:dc:68:9d:23:3a:ea:b5:35:b5:7a:
         33:df:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:08 2026 by rpki-client