Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
File:                     zWJru3tp7sn2eQsDcFVFuJL6Loo.mft (raw, json)
Hash identifier:          z2mLzhv93ZVJkT5W+YTatuls52+2bRnh/dNW6aWLTIU=
Subject key identifier:   E5:C5:84:79:2D:46:78:B6:FF:73:48:C5:0C:2E:39:E8:5D:02:42:69
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Certificate issuer:       /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial:       01A1833E83AE18B49FEBAE42D76BABE070B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
Manifest number:          1AC9
Signing time:             Wed 28 Oct 2026 16:01:14 +0000
Manifest this update:     Wed 28 Oct 2026 16:01:14 +0000
Manifest next update:     Thu 29 Oct 2026 16:01:14 +0000
Files and hashes:         1: 0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa (hash: 2PcsF5G0Mq3lPMeGvxmpYXNXSdp0a4eMQFAaAmAvtYY=)
                          2: B_S5icIbEZu3NRi7pO3M0FoxLBY.roa (hash: NpXzXVIDrJc5PoL2K8nkZP6JJq6luR8bBGM3/nlrQ3I=)
                          3: _w8qU7QLDWariPOfRN9OMYuyNWM.roa (hash: 7rGZ50HKoADJZt0gKXjNdUDKxe/HyV19YQRWiM3XHAo=)
                          4: awc83yGNtXzyjqzRMTElkzhM-Io.roa (hash: PQ/L7qMRaTtcJZl8Z1BC36Zg7hT94D0vhYdETaZzx5c=)
                          5: hEhIjS0ORg20vDLZPvNe1LJQxdo.roa (hash: zdEFOgEeugKZB5LqKjNhC4ijtd0+2zoCbXGI3USJ4wA=)
                          6: zWJru3tp7sn2eQsDcFVFuJL6Loo.crl (hash: JiqxSdyeMAG4spE2xPCHwujY1NsSJjqaz7RYogVUDRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:3e:83:ae:18:b4:9f:eb:ae:42:d7:6b:ab:e0:70:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
        Validity
            Not Before: Oct 28 16:01:14 2026 GMT
            Not After : Oct 29 16:01:14 2026 GMT
        Subject: CN=e5c584792d4678b6ff7348c50c2e39e85d024269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5c:46:3b:8e:b8:9d:29:10:65:74:bd:c4:fc:
                    b8:f4:da:fe:14:81:c9:e6:d2:b0:d9:5d:e9:07:c9:
                    a6:84:39:dc:ed:cf:47:ca:a1:19:68:8d:cc:67:43:
                    4a:35:a0:9e:a9:ac:bc:1c:03:94:a9:0d:a4:cd:63:
                    82:21:c5:f8:b6:5b:4e:8e:36:6b:2b:4f:69:2d:d5:
                    e3:92:29:e8:b7:d1:2f:db:39:76:b9:21:a2:b0:56:
                    a0:dc:4c:20:98:c6:02:d6:f1:75:5e:10:9f:4a:06:
                    d2:1f:33:16:7a:ec:6f:25:a3:b1:c0:7d:11:ca:93:
                    2d:57:62:35:e9:55:80:47:f8:86:d3:e5:2a:d9:dc:
                    46:12:d2:26:43:b6:13:41:dd:cb:fd:3b:f2:81:53:
                    18:43:89:12:7f:a8:9a:de:ea:36:3b:8d:46:c8:3b:
                    ce:78:d9:24:a3:bd:bf:5b:a8:45:23:f2:62:9a:be:
                    b3:74:17:19:82:8a:27:13:61:fa:21:06:52:73:e3:
                    7e:62:07:d4:7d:7c:87:6a:49:09:fd:cd:94:11:0b:
                    fb:d6:e9:a6:36:7d:97:9e:d3:f6:4c:25:9e:cf:41:
                    74:55:31:80:1f:bd:9c:db:24:ee:23:be:4a:41:7f:
                    e6:c4:f5:62:a8:4b:7e:7b:04:28:ae:c5:cf:38:2f:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C5:84:79:2D:46:78:B6:FF:73:48:C5:0C:2E:39:E8:5D:02:42:69
            X509v3 Authority Key Identifier:
                keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:1b:26:de:98:61:7d:3c:e7:e0:c3:f9:cc:ce:64:bd:25:
         2c:0e:17:c0:6a:c0:04:49:10:73:7b:1b:3e:38:11:cc:25:30:
         14:78:2f:2f:af:56:be:5c:a8:8b:4a:ca:61:1f:18:cb:51:77:
         b8:6d:07:2f:55:1f:91:7a:d3:19:bf:8d:1a:1b:be:17:ae:e0:
         a2:c1:ea:d5:b8:31:77:90:b7:85:94:a3:b5:7f:43:38:c5:6c:
         f0:47:17:01:a3:62:5e:4c:3c:01:38:00:e0:e1:95:c5:11:f0:
         bf:66:a6:b7:ce:4a:42:e6:f7:a9:31:55:e1:a0:e3:df:0c:a8:
         a3:c6:b0:18:a9:3e:44:3a:09:4e:c0:73:cf:d3:46:fc:7f:61:
         ae:b7:e0:4b:43:86:d1:29:90:1a:64:69:c6:02:27:ea:1a:29:
         eb:9d:19:91:87:3d:a2:4b:65:d2:2a:1a:9e:10:b0:eb:a6:6d:
         73:fc:42:90:98:4b:9e:66:4d:64:77:48:6b:d1:e5:60:81:06:
         67:a1:30:b8:ce:ac:e3:9a:73:dc:f3:5b:4d:f0:6d:da:90:f0:
         d6:7b:6b:d3:b2:78:7b:45:21:34:7a:24:6e:23:ac:5b:11:40:
         3e:d8:ad:bb:21:99:20:7d:d4:25:c3:5b:85:04:66:4b:82:27:
         cf:d7:a3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:15:58 2026 by rpki-client