Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          KjFPWj0w/QGjt1rcNV0XGCvHlxiFBTDxddFKP4/oexk=
Subject key identifier:   99:70:48:0C:18:A2:8A:2D:2B:19:70:FD:22:78:A4:96:EC:57:F5:09
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       019F90FF681BCDD76D500CA202DE631161BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 22:01:25 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:25 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:25 +0000
Files and hashes:         1: IDKw72UDV4fBvKey2_GXU4YBDRA.roa (hash: qTZQ2NPnaEey/BLWGhLNERBs92D0ttnILDap5h0iO4A=)
                          2: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: JbdIdoDk8S9NGx/s1sungrosjps3s0pqaAnMw9qcbSc=)
                          4: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=)
                          5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:68:1b:cd:d7:6d:50:0c:a2:02:de:63:11:61:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Jul 23 22:01:25 2026 GMT
            Not After : Jul 24 22:01:25 2026 GMT
        Subject: CN=9970480c18a28a2d2b1970fd2278a496ec57f509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:67:1b:71:2d:72:82:14:25:e6:e9:20:cb:
                    3d:59:90:30:ae:9f:a2:3c:e7:65:18:e4:10:dc:ca:
                    f2:37:4b:12:86:fa:6d:70:ca:aa:28:de:55:bd:53:
                    d6:40:32:1d:80:2a:5b:90:1d:35:cc:79:70:57:97:
                    f7:79:cb:ee:48:75:a8:36:12:2c:66:fd:7d:d1:6b:
                    49:9b:7e:9a:f3:f0:6a:5c:d6:66:6c:52:fb:49:10:
                    99:27:72:2f:6b:65:43:03:fb:e5:4e:e1:1b:ad:4f:
                    28:c8:39:af:c5:35:27:3a:52:4a:6b:62:7f:10:34:
                    08:07:10:28:ac:67:71:6d:28:cc:bf:e1:4e:49:65:
                    bd:01:28:ad:09:11:b8:af:da:cc:84:e4:6f:ae:24:
                    3a:ef:9c:8d:3e:8e:85:88:b0:12:92:23:8e:e4:27:
                    f9:3a:f2:bf:67:dd:32:92:2d:09:d8:b7:5b:7a:f0:
                    f5:31:ce:84:3f:fb:0c:3a:1a:36:31:7b:bc:8e:72:
                    80:60:2b:64:28:1a:7c:a8:8f:30:51:6f:5f:33:6b:
                    b3:82:0d:0a:b4:8d:40:8a:8a:93:05:2a:a7:f2:e9:
                    28:be:27:ef:41:d8:8e:43:64:ee:99:17:98:e3:df:
                    a7:36:51:6e:2d:a5:1b:79:12:de:73:52:16:e9:d7:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:48:0C:18:A2:8A:2D:2B:19:70:FD:22:78:A4:96:EC:57:F5:09
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:99:c5:2e:d2:ea:8e:b9:71:21:de:5b:e6:c0:61:e8:ca:
         61:0e:ca:d1:2e:21:74:d2:4f:a9:c9:97:84:1d:11:18:31:b9:
         bd:c6:00:9b:cb:62:ca:ec:73:08:21:ed:57:25:af:cd:3b:14:
         f7:f1:62:62:3b:fb:be:77:0b:fb:d3:90:25:7e:37:56:0e:04:
         68:e3:b4:d9:d0:c5:76:fb:a7:19:2a:32:da:a9:90:35:8f:1d:
         39:08:90:ae:78:c9:76:ff:e9:83:6f:6f:1f:13:7f:93:16:7f:
         2f:73:f8:59:36:89:6b:92:44:3f:88:67:d5:c6:e6:5a:f3:57:
         67:ba:37:11:50:cf:87:95:97:ed:1a:1f:2f:c6:86:12:c4:32:
         a2:23:be:46:1b:ef:79:7b:45:36:47:9c:80:62:d4:b8:66:5d:
         93:2f:eb:f5:76:38:a9:7f:32:e8:17:1c:7d:ad:af:cc:c9:fb:
         d4:32:b5:9f:07:e7:4f:6f:f1:44:76:0c:40:b9:98:df:20:ea:
         0c:f5:f5:b2:f4:48:3e:4e:92:f0:44:98:43:8a:60:03:0a:62:
         8c:25:a3:6a:63:e0:2d:68:90:9c:55:6d:41:36:3f:72:a6:4a:
         8a:22:45:0e:3d:35:fd:24:37:7f:7b:e8:e4:11:de:8b:db:02:
         93:5c:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:15 2026 by rpki-client