Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File:                     4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier:          zycFmfqA+SXRwniJroB/7JHv/qp7Fngfkn4ufn6Ge74=
Subject key identifier:   D6:DE:BE:E2:B3:D6:C3:30:3E:87:3B:29:6A:4C:60:76:66:04:67:AA
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer:       /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial:       019F90FF6D286C3FD8122755DA3C6CC0B392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number:          11A7
Signing time:             Thu 23 Jul 2026 22:01:26 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:26 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:26 +0000
Files and hashes:         1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: AFP16RipY07x8OrFQaHbYpCzcDEPoOWI3s9vJgZPuxM=)
                          2: qdXzckccTNRBLeVgvgBV-qMZrj0.roa (hash: 3pjw8O0uhsqIQNn1FT30jie8vZXZn3/jYkrEa74ywGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:6d:28:6c:3f:d8:12:27:55:da:3c:6c:c0:b3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
        Validity
            Not Before: Jul 23 22:01:26 2026 GMT
            Not After : Jul 24 22:01:26 2026 GMT
        Subject: CN=d6debee2b3d6c3303e873b296a4c6076660467aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:f3:10:fd:c6:23:5d:1c:7c:7a:47:4c:f9:
                    10:2c:2c:cf:11:f4:63:34:06:13:ba:f4:85:28:95:
                    f8:d2:46:36:ab:a8:b4:b4:91:2d:b2:7c:d4:ee:78:
                    28:e5:30:af:4b:5c:0a:ba:66:ef:1f:d8:0e:f8:9a:
                    66:36:ac:ca:25:30:64:42:f5:6f:e3:ce:f0:2e:d8:
                    2c:cd:e9:39:82:6c:90:65:5f:a3:d1:d9:46:72:76:
                    62:a3:1a:9c:fb:6f:00:98:c3:ae:1f:ce:16:ed:76:
                    02:d1:64:95:ac:c2:92:a2:6a:1a:cd:56:60:39:e2:
                    cb:1c:2f:68:1f:43:55:25:ce:ad:4f:3e:2d:c1:00:
                    2e:b0:08:05:c5:37:6d:8d:81:b2:ce:67:40:88:a3:
                    10:71:e8:7a:e4:2f:4e:62:eb:83:4a:66:c8:3d:10:
                    8f:43:4d:cc:a4:b6:47:63:cc:9f:72:49:31:aa:54:
                    42:0c:26:fb:94:15:f8:c6:7d:de:44:e3:e7:7e:25:
                    89:cc:20:b0:f0:ac:98:b0:ca:5b:6c:4a:8c:28:73:
                    8e:aa:3c:53:ae:de:2f:2a:79:ea:40:ab:b3:cf:69:
                    8a:0c:9c:3d:7a:91:e8:bb:41:2e:a7:46:12:c2:a9:
                    4e:e3:92:d2:87:d3:ce:ae:58:df:48:df:f0:ce:76:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DE:BE:E2:B3:D6:C3:30:3E:87:3B:29:6A:4C:60:76:66:04:67:AA
            X509v3 Authority Key Identifier:
                keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:50:26:df:46:9d:b3:ed:5d:0d:ce:09:c2:e8:3e:58:4a:
         19:63:83:46:e5:1f:98:b0:c6:3e:8f:51:0c:1c:ba:f8:a5:f4:
         e9:73:67:51:c3:ec:ec:6e:18:55:b1:c4:a7:5e:45:f0:f5:c4:
         5e:b5:35:85:77:19:e6:8a:ac:85:b5:34:c0:72:37:c1:a3:14:
         a4:1d:70:bf:6a:ed:13:88:9a:f4:bc:2c:e0:7f:70:85:89:5c:
         48:24:69:fc:99:d4:82:59:08:2b:eb:8b:88:47:51:36:33:55:
         dc:93:a9:c0:aa:f7:8f:0e:14:d2:68:c1:62:34:f7:b8:f3:3b:
         55:31:92:9c:a7:13:45:1b:55:ef:17:b1:e3:aa:ea:b7:c8:99:
         3d:7d:16:17:ae:f4:4a:bc:54:25:e5:55:c4:f8:81:8a:3b:86:
         6f:8d:30:73:bb:db:fc:a9:c0:b5:5a:b7:f3:65:a3:c0:71:6f:
         ad:92:7c:24:d7:75:e5:9f:0f:05:60:78:3f:d2:58:cf:a8:39:
         68:91:8a:6f:52:58:e8:62:6b:f9:d1:c8:bc:96:39:a6:aa:e4:
         fb:a2:33:45:ab:e5:57:11:e2:4f:43:e7:26:3b:09:95:51:a1:
         36:28:95:94:8c:4d:34:59:29:5f:3d:62:64:33:5f:5c:43:79:
         af:b3:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:03 2026 by rpki-client