Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
File:                     Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft (raw, json)
Hash identifier:          7Y1f8mJb14+mfu6R2WB5cIhGdbMd9+ZCqzBpGXdNUww=
Subject key identifier:   96:8B:F4:E7:77:50:C1:9C:01:2F:E3:2E:FE:DE:95:FC:66:AC:3B:92
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Certificate issuer:       /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial:       019F916D83A29F072959CB937B0CB8EE0F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:41 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:41 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:41 +0000
Files and hashes:         1: B4CslqeFh_G7kj31dFxVS_tQHdk.roa (hash: MrHNRAPoEgRUnj3uJCShn3/l5/jArte2wDeGYtIzlP0=)
                          2: IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa (hash: CQ228xdqWMGw11CGwR9Uzvgy1Q7ztTnBAHC18ATjAq4=)
                          3: NzEbjZMTTNc2f7hUh_DfDiEmK50.roa (hash: LA2UVOwQLl1GFakMw+qYipgL+jCj7BhKjZLnryCHmW0=)
                          4: Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl (hash: A5sXdJFjbvDbWppTqUvORTlUbJnCCXo4ZEC+omN1wps=)
                          5: SwlwWC6qeIOhSte4Utz7PdUgqHg.roa (hash: yli4qoeWd8be0mGTI1Qdhmlvgjg03i5HcPN89QNf6ro=)
                          6: YV9r1QeLQLzsNDA1e3nBSw4JJKg.roa (hash: DakRO0YaXIPdaZGDlB/0rhFuDBB490F3NKmIPT2J1GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:83:a2:9f:07:29:59:cb:93:7b:0c:b8:ee:0f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
        Validity
            Not Before: Jul 24 00:01:41 2026 GMT
            Not After : Jul 25 00:01:41 2026 GMT
        Subject: CN=968bf4e77750c19c012fe32efede95fc66ac3b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:03:0e:b8:6a:df:4a:57:3e:09:c2:b0:28:
                    d2:14:b8:d0:68:1e:a7:62:cc:9f:42:40:0e:50:f8:
                    a9:05:e6:48:19:20:ec:3f:44:76:29:4a:c4:af:f9:
                    62:fd:35:da:38:f5:39:60:81:6f:12:f8:da:7a:90:
                    76:e5:06:d0:ca:9d:d9:16:24:63:d6:74:d4:89:75:
                    a4:0a:9a:7b:ae:58:f5:3b:4f:48:1c:6f:9c:fc:ca:
                    59:7b:b0:81:e2:d7:55:27:73:2e:50:5f:d8:d1:a7:
                    26:bf:0f:dd:39:23:22:f5:b7:91:73:68:ac:b5:18:
                    05:79:3f:57:26:95:f5:89:d5:51:a4:1d:ab:da:55:
                    af:a3:96:ee:c7:5d:57:65:97:ba:11:2f:5e:f9:e3:
                    8f:70:84:80:6a:6f:a4:d6:af:6a:b0:f4:aa:8b:6c:
                    0f:cb:f4:d1:49:98:b4:95:6f:c1:a7:a1:34:a4:07:
                    21:c0:51:ec:89:7f:44:73:97:6c:b4:99:80:94:c5:
                    ff:61:d4:2f:ed:bf:5d:b3:4c:ac:89:56:32:a9:74:
                    d0:b2:9d:8a:35:4b:8d:1c:24:bd:1b:49:56:a2:4f:
                    7c:1d:68:c7:90:84:63:33:ac:fc:61:c9:c7:47:0c:
                    8e:79:e1:ee:72:95:01:80:6f:ce:bb:f5:73:01:77:
                    7f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8B:F4:E7:77:50:C1:9C:01:2F:E3:2E:FE:DE:95:FC:66:AC:3B:92
            X509v3 Authority Key Identifier:
                keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:22:c1:cb:49:62:f5:13:15:8e:62:21:50:c6:1d:27:49:3c:
         68:b7:da:b7:c8:b1:ef:69:4a:8f:e4:57:72:1b:b2:3a:51:71:
         08:4d:d8:e1:90:b7:38:2a:26:37:be:84:0a:22:3d:eb:92:3b:
         0b:0e:b3:4e:c7:de:49:fe:45:f6:ec:da:31:77:8c:dd:b6:7c:
         21:a5:18:02:54:8b:58:ba:6c:4f:d5:01:74:e4:0b:0b:3e:7f:
         6e:77:ed:80:a9:91:ab:9a:db:d6:a8:1c:b2:ae:a2:d2:19:dc:
         03:6b:ac:e3:25:b4:60:8d:ec:96:86:13:ec:8b:10:0a:b4:10:
         98:2d:ca:a2:b9:fb:5a:c6:fb:48:6e:a9:6d:53:70:5b:b3:fb:
         f2:03:c5:57:0d:fc:45:77:4b:83:39:52:03:13:6d:4e:35:c1:
         59:c0:9e:1e:e7:98:41:22:10:17:86:60:3d:bb:fc:23:68:0e:
         2b:0c:9a:68:13:5f:b4:85:2c:26:7a:0e:c5:ef:9f:cb:36:39:
         0a:2f:97:54:0d:a7:23:a5:78:5d:c6:6e:78:7c:a9:b7:87:45:
         fa:3f:ad:c2:6a:d3:3a:10:e8:8d:83:ce:d9:be:85:2a:65:32:
         34:38:82:a9:45:ac:88:14:cc:ee:69:f4:2f:5e:cc:c4:e5:0d:
         dc:22:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:13 2026 by rpki-client