Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File:                     zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier:          Gs3axfjhQMQ2RkNVkCzc2p7UvIJgvyIY6HFQ8/9X4V8=
Subject key identifier:   B6:85:9C:E8:A3:72:13:D9:37:B6:02:78:F9:F8:F2:03:59:C0:4C:E2
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer:       /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial:       019F924913D77C43C7759CF73664187616C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number:          147D
Signing time:             Fri 24 Jul 2026 04:01:30 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:30 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:30 +0000
Files and hashes:         1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
                          2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
                          3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: tgGT95QjoMsYNoCCltSGUpbfWzLtD7u2DA0N4DkzbnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:49:13:d7:7c:43:c7:75:9c:f7:36:64:18:76:16:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
        Validity
            Not Before: Jul 24 04:01:30 2026 GMT
            Not After : Jul 25 04:01:30 2026 GMT
        Subject: CN=b6859ce8a37213d937b60278f9f8f20359c04ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:01:38:4a:1c:dd:07:ac:93:8b:0c:c2:68:
                    b2:7e:39:16:fb:13:be:8f:d8:03:02:6f:7a:33:86:
                    68:05:b7:50:8c:63:27:33:36:3c:91:78:71:54:48:
                    2b:0c:c4:a6:07:df:ab:eb:20:bf:b0:c3:49:7d:e1:
                    be:27:a8:a6:13:44:7a:4f:b6:23:92:59:48:a5:6f:
                    2b:6e:4e:32:1b:c8:ea:35:6a:8c:9b:9f:33:18:f4:
                    00:71:95:df:eb:cf:ab:03:e8:02:4c:1e:47:11:2f:
                    e4:99:51:64:bb:44:03:4f:47:2f:cf:4b:18:a4:35:
                    1e:1c:a1:c6:7a:a2:37:3b:e6:ff:86:36:ec:2c:8b:
                    c1:a8:83:f7:10:51:f0:85:29:08:d0:21:ca:83:a7:
                    44:a4:93:2a:1c:e9:38:7c:5c:73:8a:da:f5:27:af:
                    8f:98:44:43:5d:e0:17:ef:e2:57:8f:0a:82:eb:06:
                    d8:0c:af:21:8e:b8:3e:8d:a5:e9:a8:b9:1b:21:f3:
                    c7:61:b6:ba:f6:85:48:c9:a3:0e:57:94:d3:01:8c:
                    28:1e:34:d1:3b:39:41:ec:5a:46:be:9c:ca:a3:e4:
                    eb:f0:63:aa:d9:ff:f7:83:50:c5:19:98:f9:b0:c5:
                    12:82:78:f4:b7:ad:f0:4b:9a:c9:32:c3:4c:33:ab:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:85:9C:E8:A3:72:13:D9:37:B6:02:78:F9:F8:F2:03:59:C0:4C:E2
            X509v3 Authority Key Identifier:
                keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:47:64:e4:4d:02:22:14:f8:c4:f4:2a:4b:15:05:7f:fa:14:
         07:7c:f9:b8:28:36:0b:43:3f:4e:3e:90:56:09:7a:21:86:59:
         a2:50:8d:b8:29:40:6b:64:7e:c6:63:87:c9:ed:8f:0d:0e:42:
         19:28:e3:56:d7:b2:50:61:15:20:18:ba:af:04:dc:b7:f4:de:
         08:51:1f:bb:ac:37:03:36:0b:25:c7:08:10:37:7a:d3:b4:79:
         da:25:f6:ca:04:34:b2:94:3c:85:92:26:58:8a:0b:52:e2:fa:
         d0:67:5b:49:ef:fe:15:d1:dd:6c:ae:f7:5b:55:13:b8:cf:45:
         2d:93:73:e5:0a:9b:e7:fd:54:49:23:e1:de:2b:04:20:f0:86:
         dd:d7:82:a0:f9:0f:a0:1f:26:20:bc:1a:24:1d:03:4f:7f:1c:
         d7:2d:75:23:41:35:42:7f:19:5c:1b:ae:d8:08:4d:32:72:42:
         51:eb:a5:14:10:78:b4:79:3b:b5:67:35:0f:90:79:2a:ab:7b:
         2b:5e:f0:e9:46:40:c3:f2:51:1d:77:78:bf:6e:d9:aa:91:0d:
         d6:7a:49:a8:a1:65:c4:55:f9:38:2d:9e:3b:36:17:14:13:aa:
         be:c0:c9:e0:c2:1b:44:19:d5:9f:f8:8e:2f:21:0b:22:42:86:
         ec:9b:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:00 2026 by rpki-client