Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File:                     M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier:          UtZszZfzwau+3lwfBF5JmepCnMbshU+u7+S3iJGBcbA=
Subject key identifier:   A9:F0:99:6B:8B:3A:FE:6A:72:69:93:4B:B3:B2:B9:5B:97:7D:8F:0B
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer:       /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial:       019F92482BA3321941D4E61169A36C5FD413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number:          05E5
Signing time:             Fri 24 Jul 2026 04:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:31 +0000
Files and hashes:         1: 1-_85ETz5jkHerkVT2dRSmXtqgNo.roa (hash: NQXJJj/OBTH49mc/x3onWdcUiAdq+Dhq5KpAVGXEyBc=)
                          2: 9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa (hash: NTLz7g+ZbCzTxq/x0340sjZGnuTxuJwbS2LJZglRqHg=)
                          3: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: FYJtDZ6wF103oORbjperOZVrlT5p4KwllbJKErZcLU4=)
                          4: TTHbsr6S4A2WiT-5UCVCIBGXt7g.roa (hash: tSI1qiCrhqG5RTuDVwd5YnhpKn7WMz1SwKPqjeiWtZ0=)
                          5: qzOhEMjt0ER_QeMmWb_aSnbGqDs.roa (hash: ct6/7wueiN1cFlvuwHbO2g9uKG/7TkLJNxOWY9ajqoc=)
                          6: xR7LKB9cMx20WjaSYnBDWdIRF-g.roa (hash: vumkR84YsHI2dcyHQIVTL0w8JKyaUvc5rnjqJHi4+6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:2b:a3:32:19:41:d4:e6:11:69:a3:6c:5f:d4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
        Validity
            Not Before: Jul 24 04:00:31 2026 GMT
            Not After : Jul 25 04:00:31 2026 GMT
        Subject: CN=a9f0996b8b3afe6a7269934bb3b2b95b977d8f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1a:f4:98:b7:c6:23:4b:7c:07:c8:cd:99:01:
                    a7:d9:f5:c7:6a:be:95:9b:d1:81:e1:bf:98:26:b6:
                    99:8a:ec:b5:71:90:4c:38:1f:c6:aa:fe:85:f3:c2:
                    ea:c9:a5:da:40:7c:91:bf:0c:2c:e5:a7:1d:df:84:
                    c0:5e:ad:b5:fb:9d:b4:e2:08:a1:bf:ff:94:1e:d8:
                    c0:91:7d:41:22:0a:ea:cd:b6:3e:25:c3:d9:97:cd:
                    62:8d:25:52:b0:89:27:c3:55:b3:64:36:6d:19:89:
                    d0:5c:42:fe:ff:0b:07:ae:09:3f:40:99:81:32:1d:
                    5e:98:05:5e:85:fa:45:06:8e:4a:ad:81:a6:b1:5c:
                    3d:7f:ef:75:ee:1a:18:6c:5f:80:d8:56:0e:b2:c9:
                    c5:f0:fc:a5:26:09:59:cb:1b:b5:79:51:0f:1e:51:
                    a3:d2:97:17:61:dc:ef:dc:28:c7:bd:0c:a5:59:17:
                    e9:ed:3e:fc:7d:ad:be:f8:66:d8:10:30:f5:9b:72:
                    74:b2:f7:11:a5:5c:ba:9f:06:cc:da:fa:45:c1:9d:
                    d4:1a:99:fb:ba:b7:dc:07:41:6c:91:0f:59:c9:fa:
                    2f:8b:42:22:a4:b4:e6:63:3d:77:ab:9f:aa:a7:ed:
                    c8:51:37:b6:49:04:22:8c:1e:3e:2f:4a:c2:c6:8b:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F0:99:6B:8B:3A:FE:6A:72:69:93:4B:B3:B2:B9:5B:97:7D:8F:0B
            X509v3 Authority Key Identifier:
                keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:61:72:35:c2:19:95:ae:97:56:7a:51:17:f6:b3:2e:34:05:
         ca:f8:9e:3c:3d:f0:63:79:4b:8b:87:70:b6:ca:42:f5:cc:9a:
         19:ee:98:1f:1f:31:bd:f3:fd:bd:9c:82:ce:7f:95:a3:2a:39:
         0f:8d:33:9e:fc:29:9f:92:9e:3e:71:fc:00:ec:7b:36:4b:6d:
         8b:c8:46:5e:aa:cd:a7:95:9c:87:06:ce:98:7d:a0:d9:8e:54:
         1a:b8:48:a0:03:00:d3:f1:df:8b:bb:c8:b9:74:83:55:bf:c5:
         bd:a8:a8:6e:bf:a6:fe:d4:d2:d9:6e:88:9b:87:6a:25:62:21:
         e7:c6:c2:86:94:45:9a:dc:bc:bf:b1:b5:44:51:2b:29:ee:46:
         74:46:f9:08:c0:dc:11:bf:66:5a:de:2c:4b:1d:8f:39:66:f1:
         74:38:72:83:4e:21:26:43:3b:4a:71:90:f0:7a:b4:df:d4:fe:
         e1:0f:4d:fd:4e:b6:3d:f3:e3:05:18:a2:fe:33:27:f0:07:0d:
         ce:4f:6d:ec:55:0f:21:b9:ec:5a:8b:ef:b6:39:c4:a8:d3:9c:
         c6:80:8d:e0:2b:ba:1f:dd:3d:c3:c0:dd:fe:7a:46:27:00:92:
         68:5f:7a:1b:b9:4b:33:58:75:29:90:ce:da:3c:4e:43:21:a8:
         19:d7:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:19 2026 by rpki-client