Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File:                     tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier:          ynruncbY9SIaNxonI0DFB4SY+FALtve2H0w6qnWAPL4=
Subject key identifier:   E6:62:7F:73:0C:62:64:50:B3:6D:6F:DF:6F:09:63:91:AE:A0:5B:16
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer:       /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial:       019F90914C12BB03A3D68DEEABB6874D8AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number:          0FF7
Signing time:             Thu 23 Jul 2026 20:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:08 +0000
Files and hashes:         1: dIqmIrGGl8FI-sOwGOw90e9FkJY.roa (hash: ux/S4urJBgHoaCGluZkTkGPr6Fq78RqIkr3zENS3Pqk=)
                          2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: 6/UMItmYMWGjq+jgFf6L5/pZdrnmAUyAplpccazMn2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:4c:12:bb:03:a3:d6:8d:ee:ab:b6:87:4d:8a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
        Validity
            Not Before: Jul 23 20:01:08 2026 GMT
            Not After : Jul 24 20:01:08 2026 GMT
        Subject: CN=e6627f730c626450b36d6fdf6f096391aea05b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:fa:b0:e8:e3:4e:fa:a6:2d:d2:d4:85:87:
                    5c:6f:4b:61:81:7f:e9:4e:56:b5:42:20:90:0a:38:
                    ed:a3:fa:96:83:52:55:4f:29:93:1b:99:81:bd:4a:
                    3f:4d:21:8c:6d:c7:5c:b1:d7:71:69:a0:9e:08:d7:
                    a8:2b:40:e4:9c:64:ba:9f:33:1e:a7:d5:fd:20:9a:
                    d4:a4:44:8d:7e:d5:b9:14:8c:11:6a:e0:1f:39:77:
                    ef:49:bf:df:17:4f:57:58:c1:67:6f:1c:ea:7e:ac:
                    f5:63:79:de:15:78:bc:be:87:f4:a6:29:c6:3d:a7:
                    84:da:c9:40:81:8a:d6:f1:35:90:ef:1c:29:3b:e2:
                    50:a7:2d:06:93:93:7d:aa:a8:02:d2:7f:7c:8a:2c:
                    05:1b:63:1c:c3:25:80:4e:2f:b2:9d:78:7a:24:b9:
                    73:c4:49:54:93:70:f2:ac:7d:13:53:e8:37:72:2e:
                    38:ae:05:0c:af:fd:02:2c:1d:3c:1c:8a:22:41:70:
                    ce:43:0a:af:d9:17:14:fa:00:bf:10:09:29:3c:df:
                    5e:1f:36:f9:20:c0:a8:ed:5f:45:35:8c:2a:19:45:
                    95:ae:30:29:31:8c:fc:c8:d5:93:9a:ca:23:67:93:
                    28:01:2b:2f:c1:60:05:7a:20:92:f9:47:0b:50:a2:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:62:7F:73:0C:62:64:50:B3:6D:6F:DF:6F:09:63:91:AE:A0:5B:16
            X509v3 Authority Key Identifier:
                keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9c:4a:5e:98:f3:eb:6e:b7:4a:7c:83:d1:12:5a:55:ec:b6:
         33:9a:e3:57:6c:77:74:c8:1c:7b:8f:84:5f:d9:2b:61:94:10:
         03:a9:57:c4:54:e8:01:3e:e6:89:b8:1e:58:6e:44:83:7b:98:
         cb:33:1f:b9:38:20:f2:17:80:3f:4b:b5:fd:39:53:2b:53:f1:
         84:ad:2d:9e:2b:f9:af:2f:79:c1:f3:40:8a:f8:86:60:e4:20:
         5b:4a:1a:79:bb:7a:d9:d2:0d:63:c7:20:7d:49:b8:19:c1:f3:
         ee:d5:51:f4:1b:37:f8:76:d9:26:c4:2f:83:fd:46:48:48:7e:
         0f:a3:7d:9d:69:3c:4e:fd:6d:ee:fb:1e:dd:d4:61:d7:6f:4f:
         2c:01:9b:da:d7:21:8f:6f:89:2a:d3:34:06:ed:46:db:9e:07:
         a1:b5:b9:80:dd:13:34:ab:ba:ca:48:51:ef:98:c0:9e:81:9b:
         a2:cc:94:16:d4:51:1f:b8:84:ef:cd:93:3e:3b:60:44:48:9b:
         1d:b8:b8:2b:ed:5a:0b:39:d0:86:1b:59:90:47:2e:48:0e:c9:
         d3:ef:e7:a7:d9:58:70:92:dc:9d:ed:6b:2a:4e:37:a1:ae:11:
         de:91:00:8a:4c:59:6f:0c:97:74:6d:d6:cc:c4:c4:40:29:27:
         e8:3a:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:25 2026 by rpki-client