Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File:                     fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier:          LBR29+FBlzQ55xBpzDsp1XE4SeqE46dtffcSrpq+rO0=
Subject key identifier:   76:74:31:16:0C:53:B6:2D:FD:62:EF:AC:B4:ED:64:C8:E7:1D:FA:15
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer:       /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial:       019F93C88967E073BB6B43E81A7E19A58A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number:          12A7
Signing time:             Fri 24 Jul 2026 11:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:20 +0000
Files and hashes:         1: GGZjVcrh7o5QnLA3XYwWxwIPlsw.roa (hash: RM/Nw8R0IKgYPKDSKvz2CTTdZeBN9XNA59dgKmXAkeU=)
                          2: U7OkwaNHpgwpk_IKbz0Zyz5OXzk.roa (hash: Fsw63Ry87JP1NMdSW0Lo12MCLQq4XEdntr9zF454Dbk=)
                          3: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: skZaadxuKaV3ai/m1oGvYu0lq+f1tWew+37gM9alBTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:89:67:e0:73:bb:6b:43:e8:1a:7e:19:a5:8a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
        Validity
            Not Before: Jul 24 11:00:20 2026 GMT
            Not After : Jul 25 11:00:20 2026 GMT
        Subject: CN=767431160c53b62dfd62efacb4ed64c8e71dfa15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:c3:99:98:76:14:67:3f:ab:17:d1:b6:4e:
                    7c:53:3e:4a:ef:59:cd:d6:49:1a:ae:d0:18:1a:c8:
                    5d:48:1b:d3:4c:2b:a1:e8:fe:36:31:0f:4c:3e:c7:
                    98:9b:a5:ab:f4:1c:6b:c0:45:fe:90:5b:1c:75:22:
                    f8:59:9b:57:da:b2:81:74:05:ac:85:1d:d1:e8:f3:
                    b2:e2:cd:ab:f8:7b:a0:af:8a:73:c5:ba:d4:a9:f2:
                    d8:97:0d:dd:cf:d5:9c:c5:ef:24:b2:92:b2:71:79:
                    3f:f5:aa:d9:4e:d8:ec:89:3e:7f:6b:7e:fd:aa:d0:
                    ee:92:d6:b7:49:ff:02:59:29:75:30:51:32:a5:e8:
                    a8:f8:88:d1:49:bd:9c:7e:66:d4:67:c2:15:37:f0:
                    2a:d5:e2:cb:0f:45:03:3b:6c:9f:d8:de:72:1e:4d:
                    0d:35:7e:ad:39:c9:59:51:a1:ec:79:14:37:d2:6d:
                    17:45:03:a5:9d:87:b2:a9:00:aa:e6:cd:2b:98:5e:
                    52:ad:dd:13:82:4c:7f:43:c0:c3:25:92:af:7b:95:
                    9e:22:04:8d:db:f1:42:c7:b8:91:84:e9:1b:d1:9a:
                    cd:ee:fb:75:af:0a:1b:b3:4d:ad:60:ed:52:8e:07:
                    cb:b8:2f:53:3f:82:38:c5:8a:6e:75:31:66:9b:6d:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:74:31:16:0C:53:B6:2D:FD:62:EF:AC:B4:ED:64:C8:E7:1D:FA:15
            X509v3 Authority Key Identifier:
                keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:2c:ea:b3:1e:23:36:0a:39:2c:23:ee:50:83:5e:67:94:
         98:3f:dd:fb:17:34:58:b7:23:e3:40:12:e8:76:18:e1:92:b2:
         90:b1:bd:c2:17:51:02:5c:7f:cb:f0:87:c9:3c:13:e7:ef:4f:
         fd:58:cf:fc:4b:6e:a2:1e:c7:a6:77:ca:56:8e:47:a4:bd:0d:
         32:3f:80:a8:74:6c:93:6b:cf:b4:a5:58:ce:8c:4e:4b:60:2b:
         5b:36:76:61:f7:8b:b2:86:c9:7f:c0:af:7f:b5:72:5f:1d:93:
         83:1d:a4:ab:6d:05:f6:4a:53:67:ff:8c:22:4d:a9:df:f9:af:
         af:aa:08:51:36:d4:f7:51:17:b5:05:aa:77:ca:db:db:c5:c1:
         20:bd:60:cc:86:35:9d:b2:78:a5:8f:d2:24:4b:5e:90:e9:35:
         1c:e5:d1:4b:03:2c:72:17:fc:56:34:46:03:ee:86:db:17:bd:
         d2:99:2a:63:31:f7:c2:aa:72:8a:10:7c:76:5c:85:5b:9b:f5:
         33:cf:11:c3:0c:c8:a7:7c:ba:f1:51:0e:5d:42:f8:4d:c2:1e:
         92:11:4c:d5:31:d8:dd:95:77:39:3e:ef:6a:f4:c7:ca:99:b3:
         14:bc:3a:ef:83:3e:90:bf:73:95:23:83:69:53:5f:43:bf:b4:
         06:55:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:43 2026 by rpki-client