Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          63LPhSGg+VBApTBYUYuFq58x1OkFWROyJtSyXIaBD0A=
Subject key identifier:   43:99:AF:93:CA:E6:95:EE:10:14:F7:A5:60:DB:6D:C1:9B:6D:05:29
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       019F9512487E0DCF3D47EF3FFD60B1FB7D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          0539
Signing time:             Fri 24 Jul 2026 17:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:31 +0000
Files and hashes:         1: 4nSUIwtH1PWVtjZBsb7u8aGIHdg.roa (hash: bX+Qa++BgGAVTurdoW+HtFnLZYYAEuUvxiVv/7oFu2g=)
                          2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: 4D/3+fHpYu9v8jdRMWZoda5o+uwANYjWe+1lxuq/huQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:48:7e:0d:cf:3d:47:ef:3f:fd:60:b1:fb:7d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: Jul 24 17:00:31 2026 GMT
            Not After : Jul 25 17:00:31 2026 GMT
        Subject: CN=4399af93cae695ee1014f7a560db6dc19b6d0529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:1f:30:ef:05:90:97:59:ed:2d:89:d7:0b:
                    b2:13:56:32:71:46:06:73:fc:cd:3f:7a:40:45:98:
                    30:f6:86:c5:70:64:ab:e6:0d:0d:99:c3:c5:c8:ac:
                    0a:85:fb:a5:45:a0:1b:82:1c:7e:b0:e8:cc:ff:55:
                    18:af:c2:9e:88:8c:b7:a6:50:c8:a5:1e:92:d4:fb:
                    50:68:8a:ee:0f:63:74:a6:fc:cd:10:c9:d0:8a:81:
                    cb:3d:9e:b3:2b:e2:68:b8:c2:2a:96:5b:f9:d1:94:
                    52:5f:92:49:98:8a:f2:c1:c4:7e:ef:3b:85:ec:91:
                    a9:75:93:fb:39:16:18:09:49:65:c6:4e:9e:1f:c5:
                    76:73:02:99:5c:ff:7b:d2:52:b3:4c:69:8a:ca:fa:
                    e3:c4:f0:66:e4:e5:c0:64:6c:ad:d5:56:32:2f:14:
                    23:75:f4:a8:b9:47:e8:11:cc:db:3d:d8:db:1b:7f:
                    33:38:f4:0e:74:f7:aa:e3:dc:a9:6c:da:a5:e8:39:
                    46:c7:1d:ac:4d:c0:64:ca:ef:87:ee:b3:2b:dd:96:
                    fd:4d:84:7d:7d:5e:e6:93:7a:59:3a:91:30:de:05:
                    12:17:e4:eb:d4:77:e5:2b:3d:be:be:9b:e3:e6:92:
                    85:bc:18:06:29:37:f3:39:f2:cb:3e:d8:e7:f8:1b:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:AF:93:CA:E6:95:EE:10:14:F7:A5:60:DB:6D:C1:9B:6D:05:29
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:70:3f:a5:c7:a3:03:56:db:a4:a4:25:4b:51:6d:a1:b4:99:
         8a:a6:b7:47:42:63:5c:6d:55:ee:6f:68:13:4b:2e:76:4f:a1:
         da:db:ba:37:0e:79:13:83:db:f5:5e:af:04:fa:67:f1:5a:0f:
         da:55:c1:4f:33:9f:f6:60:7d:26:ea:94:d5:78:33:0c:37:ed:
         0e:11:4b:fd:94:e6:f5:27:61:c3:6a:5c:ba:53:29:b5:46:46:
         4f:0d:85:a0:4d:a3:cd:d5:2b:7b:57:4c:1f:78:96:36:ab:9a:
         9b:51:4a:21:b1:31:5a:2a:1d:44:16:e7:85:17:40:6c:e7:4e:
         c9:a4:4c:a8:46:aa:b9:27:83:b6:59:ff:9f:41:1d:41:1d:42:
         26:89:e5:27:b9:58:5a:37:7a:da:f9:44:2d:4b:ee:14:7e:fe:
         bb:95:b2:28:a0:d3:75:d0:bb:20:1e:4a:cb:d3:84:9c:d6:1a:
         1d:11:c3:cf:fc:99:9f:e6:71:8e:d8:ed:fb:a9:8f:80:f6:63:
         93:01:a7:94:fb:cf:6d:18:85:73:7d:1a:f3:e7:b3:c8:9d:69:
         79:25:1c:22:61:e7:cd:37:d3:bc:61:c2:58:5f:69:38:04:07:
         74:75:ad:f9:fb:4a:98:33:06:99:4a:cf:a3:1f:7d:40:5d:77:
         c6:45:ad:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:20 2026 by rpki-client