Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File:                     zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier:          wFhQQqJT8QE91WNWG0da/Ie+X0EYMJMHKKtY3xhyDUA=
Subject key identifier:   EE:D5:BB:81:63:E9:86:77:CB:77:94:E5:4D:DE:99:80:57:CD:44:AF
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer:       /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial:       019F92ED067B121D7E49827E53F47D00E14E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number:          04E3
Signing time:             Fri 24 Jul 2026 07:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:34 +0000
Files and hashes:         1: Km70r9ZluIFWUWDTroK0EcNtFeU.asa (hash: 4KIjNcxdlDbHOAyZqsFN/eOm7U/uPtAQN9uazXQ+ATk=)
                          2: SJnvGTH7bR41e5sWsYIQeWDc_EA.roa (hash: 2jW13TfSzXoQtuBntu6l4+b+fs69bx4ZNVoFcIWRCOo=)
                          3: TGdsEBW0dA1vBlmQUvr6OCjcRdA.roa (hash: DkyX51xLuQvm/HIMS5Gk0Y7OjI/mNozxguG8FiDw6c4=)
                          4: eLtqqzfmHaENjrYjDWaZNiVaiNM.asa (hash: 3qdH7YILG+mohvpaVfJujhp0nSwMuCtR0l4DOroE8fE=)
                          5: kTM5AwyuwsmweHVqh4Sx5C7l3lk.roa (hash: 9Ex97t0Gq70q6AwRnqwBR36JInydAPypzTvDsdOkxbE=)
                          6: lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa (hash: xyC0OirskdCSUadmtCeoUwblgPmS4gYDwVr6k8DHX9w=)
                          7: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: o9+isVc0pzNsiQhoL6PJ4oh51Q+BrTjW1HEByyRH3B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:06:7b:12:1d:7e:49:82:7e:53:f4:7d:00:e1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
        Validity
            Not Before: Jul 24 07:00:34 2026 GMT
            Not After : Jul 25 07:00:34 2026 GMT
        Subject: CN=eed5bb8163e98677cb7794e54dde998057cd44af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:80:19:4e:72:50:61:32:22:37:78:ae:91:
                    02:15:3a:87:e5:7b:ac:53:2b:5e:8b:17:0d:d6:c9:
                    03:64:2f:d1:4c:16:87:34:99:82:f7:25:68:8e:b0:
                    d6:22:03:d1:80:e8:23:46:c8:e4:9b:0d:c8:54:e0:
                    c8:fb:16:1c:35:ae:b3:ef:b9:a2:d6:7e:3d:c8:85:
                    3c:78:c2:42:fb:d1:a5:88:a4:8b:2f:7b:4a:c4:8c:
                    39:a0:d1:07:8d:0c:76:bf:36:cf:60:26:44:89:f0:
                    63:a4:75:f6:62:63:30:1a:cc:79:12:da:42:f0:c0:
                    0c:9a:e1:cc:10:8d:e2:90:e1:52:52:40:f0:7c:ba:
                    bd:9a:7a:24:9a:1f:8f:61:3a:7f:35:c1:25:ad:f2:
                    45:12:0e:b1:dc:e2:2c:7d:55:b6:6b:f1:5f:5e:d0:
                    a1:e0:09:43:c3:e8:6e:8b:ae:de:31:81:58:39:9a:
                    47:90:34:4c:93:0c:eb:28:b8:42:a9:33:84:76:ae:
                    b8:12:97:81:42:3d:d5:17:d7:cb:83:ce:5a:22:97:
                    cd:51:12:92:bf:dd:b7:f0:9d:02:c1:f8:1f:d2:24:
                    fd:30:92:14:b2:d8:0b:9d:62:6d:b0:d6:40:4a:de:
                    6d:bc:f1:eb:c1:4a:58:c6:ce:99:db:d4:e9:75:50:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D5:BB:81:63:E9:86:77:CB:77:94:E5:4D:DE:99:80:57:CD:44:AF
            X509v3 Authority Key Identifier:
                keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:f4:ca:aa:67:fa:b2:b0:8c:f3:6e:b0:5c:31:59:4a:f1:
         d4:57:8e:3d:5e:ef:87:00:5c:66:ea:d4:59:38:ae:49:e4:7b:
         4e:19:47:85:26:34:b7:00:e3:b2:12:85:7f:c7:c2:7e:96:72:
         a6:a7:1e:99:d3:7d:09:da:d0:80:55:45:1b:c3:d1:79:de:19:
         23:ad:b2:74:2e:da:dc:85:1a:c7:b5:6e:b8:a9:1f:87:cc:34:
         59:b5:7a:95:a4:84:04:64:ed:1c:8c:76:9e:ae:56:a1:d3:79:
         1b:6a:0e:48:b5:bb:d2:38:0f:a0:01:dd:07:cc:96:49:da:b2:
         e1:78:4e:81:c6:90:65:7c:f5:85:1d:94:a2:92:b4:69:68:99:
         71:a5:71:e7:1a:b9:68:05:68:61:5d:21:33:0f:18:88:07:3e:
         9d:a7:6e:3a:3a:b9:51:78:96:37:4b:64:b8:66:f8:9d:24:11:
         02:b6:21:69:c3:6a:39:ba:8b:13:90:f4:8d:43:a8:ea:db:f9:
         d3:56:23:0d:7e:5c:41:d1:04:30:8a:a5:d2:5c:0b:dd:b7:0d:
         ae:81:02:29:0b:9a:b1:61:bd:8d:d0:fe:95:56:8a:59:c7:a6:
         06:b0:8f:e1:50:41:b6:ad:7b:33:68:db:53:4e:02:60:b5:a0:
         a9:6a:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:48:38 2026 by rpki-client