Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          +EtFQOa76D5iutbKRBKE1HbO+zOBcvH9HA8APpHubrw=
Subject key identifier:   70:92:5F:57:15:9F:FD:05:96:55:24:57:DF:8E:95:2B:50:43:21:AF
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       019F92118E450EAE687D551C7320765B688D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 03:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:51 +0000
Files and hashes:         1: 6xuNTY_iWkHPPmX8ImnPUwpIICw.roa (hash: rki5JF3Dn8KF0wiQ0pOA5KuyYBjrNPOOlyoFXsz/Nw4=)
                          2: Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa (hash: /UOlw8R9RHBXRNf2pHB5ILY2/31tspmHrZEY8rczLws=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: cOfHxb9q0xcXXuehfhVoyMDv35gOmNLzbheUsdxiitE=)
                          4: l6fGw5x0kwKbWm6qlO4Cb8mnozw.roa (hash: qIO5x+8uTr9xwt8GJiCJP0qK55Dhutv/sFwU3VkQhb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:8e:45:0e:ae:68:7d:55:1c:73:20:76:5b:68:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Jul 24 03:00:51 2026 GMT
            Not After : Jul 25 03:00:51 2026 GMT
        Subject: CN=70925f57159ffd0596552457df8e952b504321af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:8d:1b:d8:68:36:76:a9:f1:92:c8:be:66:
                    9b:a9:9a:a9:5e:8e:83:b2:5a:52:b9:d6:6f:de:fa:
                    79:c1:27:34:a1:73:27:55:3f:d5:77:ec:b1:15:77:
                    e9:68:c9:3c:32:5d:87:e6:11:26:c9:6e:44:45:3e:
                    a2:94:f1:6a:47:d3:43:7d:9f:7e:0a:99:d4:04:c6:
                    e1:26:2d:83:29:d4:55:8c:03:96:d3:c6:78:64:dd:
                    23:7e:1e:61:19:aa:de:c5:53:e7:5b:22:b2:ff:23:
                    e6:c7:17:e1:55:f7:eb:84:13:ee:83:17:27:ef:a4:
                    3e:46:0c:40:a3:7a:8c:d4:9d:5f:f4:19:68:e7:a1:
                    31:06:d0:4b:97:f9:d6:50:fe:f8:b1:87:ef:46:5d:
                    4b:48:54:25:1b:c1:bf:fe:b3:ab:f2:cd:1d:35:fa:
                    05:bb:b9:f2:85:4e:57:a2:08:82:0a:dd:96:fb:bf:
                    cf:f3:75:ec:14:7d:52:ec:d6:ae:75:16:15:b3:78:
                    d9:9a:ee:06:64:65:cc:2f:4f:24:44:26:b1:87:3c:
                    43:fb:64:22:6c:9a:60:de:a1:a3:dc:15:39:35:aa:
                    a7:3d:25:70:ea:a1:7c:9f:0c:9a:c7:db:4c:93:c9:
                    fd:6c:d2:b0:21:16:fd:cd:48:ef:ed:d8:ef:d4:98:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:92:5F:57:15:9F:FD:05:96:55:24:57:DF:8E:95:2B:50:43:21:AF
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:31:92:20:4c:37:52:38:02:3f:99:9d:95:5f:38:65:a8:
         81:fb:92:21:56:fa:d0:31:68:80:78:70:fa:99:28:9a:a2:4c:
         48:ac:8b:4b:e8:7b:64:45:71:b4:93:1d:f3:f6:98:69:0e:a1:
         72:31:31:35:e7:a1:23:2e:14:8d:c3:2a:86:ff:2e:33:d1:c6:
         be:ca:30:4b:e1:8a:5b:b9:be:23:65:4b:7d:52:7d:46:4b:49:
         f8:a9:6d:9e:1b:18:eb:eb:71:6e:7d:70:11:5e:18:ec:cd:d2:
         5e:c6:bf:54:76:09:6a:74:1b:14:e5:a1:37:68:26:6f:2a:45:
         dd:7e:3b:2c:98:9d:eb:b0:11:5d:3a:90:fd:5a:d7:42:a8:f7:
         ec:89:18:da:9c:d4:b9:dd:95:de:e8:dd:86:56:2d:5a:59:cb:
         23:8d:b6:5c:00:bd:ac:12:c9:36:29:e3:c7:39:b9:a8:99:ac:
         c4:61:ec:6c:7f:37:73:86:1c:d4:1a:a7:78:3f:4c:e7:df:ff:
         99:ad:da:cc:0e:14:84:22:93:5b:92:50:9d:bc:d9:a7:ff:b5:
         80:e2:d7:57:4f:73:ec:3f:57:e7:1f:d8:d2:46:6d:cb:28:b8:
         f4:cd:72:b3:64:13:ad:62:81:e5:51:ed:8f:06:3a:a0:8d:0f:
         04:f2:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:27 2026 by rpki-client