Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File:                     z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier:          v+FGHyWRHnBAQAxXMZWlQs26ZxauZev0uHVweD161jw=
Subject key identifier:   8D:63:3E:F6:B8:9D:0B:8C:50:07:8E:36:0D:3A:A5:90:DA:8E:CA:D7
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer:       /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial:       019F94374C4AEBE659448A847DE74226127C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number:          0C2D
Signing time:             Fri 24 Jul 2026 13:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:19 +0000
Files and hashes:         1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=)
                          2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=)
                          3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=)
                          4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: f+jNgZY4AuOZSuQ2axydtAvnXu+H/tZcVNU2Tet40Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:4c:4a:eb:e6:59:44:8a:84:7d:e7:42:26:12:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
        Validity
            Not Before: Jul 24 13:01:19 2026 GMT
            Not After : Jul 25 13:01:19 2026 GMT
        Subject: CN=8d633ef6b89d0b8c50078e360d3aa590da8ecad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:d1:6a:c9:9c:ae:7e:22:a3:88:52:65:47:
                    35:ac:80:99:97:82:0b:8e:6a:ab:ca:0c:8b:91:3a:
                    63:b3:b7:d8:13:d7:42:95:d8:5c:7b:59:ac:23:de:
                    2a:cf:11:46:77:81:af:d5:97:33:c7:4a:6e:4b:4c:
                    0c:af:ed:9c:28:96:1c:34:44:51:4a:0f:dc:78:ee:
                    a8:1c:c6:35:4a:f3:1e:9c:66:c0:7f:2f:34:e6:59:
                    b4:23:a6:2e:d2:98:1c:0d:b3:84:d5:ea:38:b3:ef:
                    57:c7:96:19:f1:be:fc:09:46:5a:1d:ff:0d:ec:93:
                    3d:38:93:87:69:de:ad:c5:57:cf:36:00:1c:56:a6:
                    d0:b4:d9:cc:d0:f9:92:00:73:6e:f4:88:d0:18:7d:
                    d7:69:c1:2b:48:8e:80:37:d7:36:b3:a7:3a:7b:dd:
                    2a:de:56:cf:d2:d2:e1:56:71:d3:b8:78:0e:26:f3:
                    7b:4b:67:fc:a4:6b:8e:4b:cf:c5:c4:2f:40:1d:9c:
                    6a:a8:7f:49:5f:07:cc:2d:a5:13:5e:1d:8e:4b:be:
                    5b:7f:72:fc:e8:bd:e6:c6:11:dd:e1:29:65:79:91:
                    98:a1:f5:67:a7:df:86:5a:39:bc:4d:40:32:87:26:
                    14:3f:2b:93:90:59:f5:7e:5d:3c:ce:1c:74:58:7e:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:3E:F6:B8:9D:0B:8C:50:07:8E:36:0D:3A:A5:90:DA:8E:CA:D7
            X509v3 Authority Key Identifier:
                keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:12:c5:d6:f0:e8:8a:ff:53:c4:27:f4:a8:a5:98:b2:c2:02:
         ab:42:20:87:14:f3:36:16:1e:d0:29:b5:69:47:57:db:1f:0d:
         b1:61:c8:9c:2d:95:2f:fd:fc:0a:4e:86:ea:6a:aa:ec:cc:52:
         2a:e9:59:82:e4:03:86:e2:b4:44:a2:ca:e8:43:65:53:5e:66:
         df:c3:54:9a:38:28:34:36:ba:10:f4:a8:31:cd:b7:3e:5f:2f:
         74:87:7d:8d:c9:fd:2b:39:a4:21:b8:84:27:55:70:24:dc:64:
         6f:40:96:bb:39:6c:d8:1b:1b:ce:10:b1:90:8a:10:04:66:44:
         3c:60:6e:78:3f:bf:4f:0e:4f:df:9d:5e:af:a0:fa:a1:48:b7:
         32:6a:14:f9:de:74:da:77:a2:ea:2b:dd:ba:db:8b:da:37:2b:
         31:38:50:17:bd:4a:c4:16:79:9e:1b:29:1e:6b:44:84:02:00:
         d9:26:39:bb:01:a2:71:e1:d1:2d:f0:d1:21:34:14:d8:5b:4c:
         4b:4d:9d:af:85:56:4f:ea:6f:bb:72:bc:be:8f:23:91:8d:2a:
         b1:de:44:98:8b:b4:44:ed:68:21:67:56:6b:1d:9b:94:2b:09:
         c6:cf:e2:8b:a8:fc:fd:d2:b0:39:51:1a:f0:c0:ab:12:70:9b:
         6f:b7:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:04 2026 by rpki-client