Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
File:                     Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft (raw, json)
Hash identifier:          Cb4p0FjtCL+W8M/qYqXurP61/Oyc/meiTfcVGct/CZ8=
Subject key identifier:   7B:40:F5:41:20:02:0B:91:D9:D0:01:3D:97:AC:48:FA:2D:13:D1:D1
Authority key identifier: 67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
Certificate issuer:       /CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Certificate serial:       01A1212E647E66414B3F247C957E4940422E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
Manifest number:          010F
Signing time:             Fri 09 Oct 2026 15:00:50 +0000
Manifest this update:     Fri 09 Oct 2026 15:00:50 +0000
Manifest next update:     Sat 10 Oct 2026 15:00:50 +0000
Files and hashes:         1: Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl (hash: IyONonvhXosz+04NcCwnJMYZ+jWN07cImEm6HNUNlXM=)
                          2: _uELF3uAGWWWU-RJRHYGaIoW8U4.roa (hash: U5mRlj1KFH4M3tby5YOjE/zPfPpRLKSqjkUhZ3s2pw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:2e:64:7e:66:41:4b:3f:24:7c:95:7e:49:40:42:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=675b511bea7f18070b1a77261c1acd4a03c61b77
        Validity
            Not Before: Oct  9 15:00:50 2026 GMT
            Not After : Oct 10 15:00:50 2026 GMT
        Subject: CN=7b40f54120020b91d9d0013d97ac48fa2d13d1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a1:c8:60:40:c2:13:d1:1f:76:d8:50:6f:6b:
                    50:5c:a1:4f:86:8c:0f:45:b5:6a:4b:3c:76:54:db:
                    98:5c:83:09:ec:73:7c:3d:50:25:98:36:9b:b6:2b:
                    77:58:50:1b:ac:92:82:25:db:82:c1:c1:07:ee:c1:
                    be:4a:78:fc:1b:e7:7e:30:c4:60:11:45:75:74:eb:
                    e7:52:26:ae:15:27:1f:ae:fc:96:59:99:16:1d:e7:
                    32:6e:d3:0d:7b:73:0a:33:b3:eb:c7:fc:40:ff:33:
                    bb:12:61:34:83:9d:78:e0:6e:6d:52:fd:85:c1:2c:
                    4f:37:64:0c:a3:0a:7f:8c:e9:33:f9:76:9a:24:f8:
                    1b:ce:3f:83:9a:e5:6e:01:59:87:ac:2b:c5:79:4b:
                    b4:d1:cf:a7:d6:48:e2:1a:7b:dd:87:0d:f9:28:b0:
                    4d:61:b8:07:58:e5:21:e7:7b:70:6b:19:13:69:75:
                    d9:c4:5a:1c:ef:e3:26:a9:dd:bf:2c:a1:a0:7b:df:
                    90:18:20:c7:5b:ea:be:1f:3a:44:64:ae:15:db:d2:
                    30:25:b4:a9:c5:f1:3b:b3:8b:0a:9f:58:b1:b0:bb:
                    dc:de:a2:07:8c:5d:9a:88:91:e6:32:87:a7:61:ff:
                    6a:85:ad:dc:96:52:3c:5e:09:f3:3b:6d:11:97:65:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:40:F5:41:20:02:0B:91:D9:D0:01:3D:97:AC:48:FA:2D:13:D1:D1
            X509v3 Authority Key Identifier:
                keyid:67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:91:a5:0d:57:c3:14:4e:9a:dd:79:87:aa:27:ac:5e:72:9d:
         6b:bd:01:16:d1:02:e2:f1:6d:91:a8:0d:ea:46:6d:43:8f:b2:
         6c:8e:ce:1c:d2:3e:8f:4e:c4:c0:18:05:5e:29:31:b1:95:a0:
         89:19:b1:6e:81:ad:f4:e9:f0:54:69:6f:13:94:e4:c6:81:b6:
         06:8c:a3:c7:08:92:71:ef:f4:cd:74:06:39:b0:b0:6b:31:43:
         41:9b:50:28:17:33:a7:e1:1c:de:d8:1c:5f:57:32:e2:d9:b7:
         33:21:38:19:f8:76:f0:57:94:8d:63:ba:86:09:e3:a6:bb:f3:
         ce:42:b4:76:ff:26:db:da:42:d2:83:0e:fc:a0:4a:08:e6:34:
         09:af:a4:3d:35:02:e1:53:61:42:c1:12:e7:34:bc:91:a6:4f:
         c8:b8:21:01:46:5c:bb:4e:1d:82:1b:3a:f2:b2:f4:67:77:9d:
         15:34:52:04:15:12:e7:05:46:f9:92:ef:f9:4a:95:6b:42:7c:
         a2:0b:b7:ff:2a:e7:8a:f7:c4:dd:02:f2:bc:9c:fc:ce:27:b2:
         77:24:d7:11:fa:25:ba:d4:a9:77:b2:71:0f:4e:61:ce:6a:30:
         92:0d:e9:00:2c:46:1b:cb:08:bd:46:ab:8d:47:6a:ee:21:ac:
         cb:b3:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:40:24 2026 by rpki-client