Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
File:                     ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft (raw, json)
Hash identifier:          E+KcHd+L6TUJXa0TMkSJENyfhga84S9yQupQ/3Ca1rc=
Subject key identifier:   CF:2E:55:5F:54:35:07:49:5F:BC:B8:F7:79:EF:98:7A:3E:C5:29:9C
Authority key identifier: 66:6B:B2:2A:B6:4A:CE:A6:24:8E:3E:EC:D4:D6:00:79:70:46:E8:B9
Certificate issuer:       /CN=666bb22ab64acea6248e3eecd4d600797046e8b9
Certificate serial:       01A1A60153C680F0BE750689CD413DA95584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
Manifest number:          021A
Signing time:             Wed 04 Nov 2026 10:01:07 +0000
Manifest this update:     Wed 04 Nov 2026 10:01:07 +0000
Manifest next update:     Thu 05 Nov 2026 10:01:07 +0000
Files and hashes:         1: ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl (hash: l39APPKnqiYyO/cTDi/IJ0qdiMUpCIapoaCWIPj4tkA=)
                          2: iXdCxqONjbFxErLs984fDtPPuP0.roa (hash: kOe2FaHNUJoqh8TvxUecRv4MaU6ezmauA8mPBQq+gXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a6:01:53:c6:80:f0:be:75:06:89:cd:41:3d:a9:55:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666bb22ab64acea6248e3eecd4d600797046e8b9
        Validity
            Not Before: Nov  4 10:01:07 2026 GMT
            Not After : Nov  5 10:01:07 2026 GMT
        Subject: CN=cf2e555f543507495fbcb8f779ef987a3ec5299c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:5b:76:c8:1e:18:ca:ae:81:87:cf:82:cd:
                    4d:e1:c5:b7:b7:cc:36:da:d6:42:d3:eb:96:18:26:
                    5a:7f:63:00:86:a2:86:31:1b:ef:40:e5:66:98:3a:
                    75:69:24:92:6a:a3:67:28:34:bb:6a:d2:39:3d:9d:
                    89:70:7c:50:01:85:56:16:a7:c4:9e:9c:4d:17:5b:
                    84:7e:66:fb:e7:a6:8f:f9:cd:ea:e9:8b:25:43:c8:
                    dd:14:f9:fd:fb:f5:5d:29:4b:fd:d4:94:18:46:f1:
                    7a:00:44:99:bc:2b:90:dd:e3:b8:e9:17:8b:a3:7e:
                    ee:f8:c8:96:35:b8:d6:ea:cb:cd:86:48:c6:da:ca:
                    fb:9e:3c:78:eb:aa:b6:ea:e0:e8:37:0a:ab:b1:8b:
                    07:b4:94:30:e8:32:2f:90:9e:bf:82:47:4f:22:74:
                    9a:71:8a:6a:86:13:7a:7c:75:56:7c:43:4d:23:b8:
                    1a:5a:2f:29:ed:07:c9:18:97:00:28:49:bb:47:95:
                    06:29:a1:d5:ac:ec:e8:80:c8:3d:16:d7:07:cf:b7:
                    63:9d:bc:b1:fa:62:35:e0:39:bc:57:8d:1b:79:9b:
                    79:4b:b5:ca:74:82:36:59:01:ce:04:d7:f4:ff:26:
                    20:ad:4d:00:10:c5:07:9c:43:0b:3f:67:42:27:1b:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:55:5F:54:35:07:49:5F:BC:B8:F7:79:EF:98:7A:3E:C5:29:9C
            X509v3 Authority Key Identifier:
                keyid:66:6B:B2:2A:B6:4A:CE:A6:24:8E:3E:EC:D4:D6:00:79:70:46:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:97:96:14:38:7c:88:63:26:59:7e:e4:ff:a9:b5:f2:2e:
         5b:39:2a:cc:89:64:82:c7:2d:d7:de:75:1f:b4:6e:67:41:32:
         9f:dc:c6:cd:3a:d3:25:6c:94:56:4e:ed:1d:6b:12:00:70:aa:
         9c:94:4a:7e:d2:b7:f2:53:34:4e:27:63:72:88:45:2a:2a:10:
         8a:7c:ae:54:8f:36:34:ac:dd:58:0f:cc:d3:18:b6:cf:31:51:
         c7:53:92:52:3c:01:15:e1:41:d3:1f:7f:23:83:31:23:26:9e:
         16:ea:ba:a1:b6:30:5f:16:ed:49:10:60:f1:63:c4:7d:7f:94:
         99:27:f1:88:bf:ca:88:4f:f1:11:87:3d:67:be:bf:d1:61:c6:
         cf:0f:cd:a6:6a:cd:af:e1:6b:f9:63:cb:b0:85:b1:7d:7e:f8:
         75:ca:0e:d9:d2:66:0a:4b:e1:18:23:07:e1:54:27:b5:e3:4e:
         b4:4b:4f:38:88:c7:d4:01:7e:b0:ff:33:28:43:1f:3f:3c:c8:
         3f:df:3c:eb:94:27:da:77:54:91:3a:2f:0d:7e:5d:f3:c0:a7:
         ac:fd:31:81:0c:fd:88:b9:54:f5:95:5f:7e:e2:d6:6a:71:8c:
         4f:03:8e:d4:65:c6:3a:84:2a:0f:5b:4f:7a:96:ff:8d:a3:a5:
         c3:e2:41:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 13:46:41 2026 by rpki-client