Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File:                     ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier:          ZtEPKdfG4ygt47X0Y27rdA/AjyIgry3pojl52uXcaUA=
Subject key identifier:   7E:DF:37:1D:42:37:05:8E:72:A6:D7:88:DF:F9:1A:F0:F7:62:2B:84
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer:       /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial:       01A08AFAB4A562DE6A640A33E86AFC0E970E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number:          1A52
Signing time:             Thu 10 Sep 2026 11:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:21 +0000
Files and hashes:         1: 6gLAIABcMM0BdKdW8K02igz9kr0.roa (hash: uk7i7GXwXWp1hyZWUWTNojb3ILfyYgcAcHJXlD/riPs=)
                          2: Ig_zAXCn9vbFw7KxbkjMl45qbh4.roa (hash: VV7LhTzcbYlq8rfyk66GOg6XaES1MuVkOsiFHAWaNpk=)
                          3: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (hash: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=)
                          4: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (hash: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=)
                          5: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: lkZ0QEDEPrPnVKE32clYkkFIlWCI1aD1izqkgglfaBg=)
                          6: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:b4:a5:62:de:6a:64:0a:33:e8:6a:fc:0e:97:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
        Validity
            Not Before: Sep 10 11:01:21 2026 GMT
            Not After : Sep 11 11:01:21 2026 GMT
        Subject: CN=7edf371d4237058e72a6d788dff91af0f7622b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:68:66:e4:4c:5e:28:ac:0b:bd:31:6d:06:
                    64:dd:2c:5b:b0:c9:ff:ae:65:f8:c0:78:79:d6:e2:
                    14:b7:64:82:c6:85:51:a1:a2:e6:13:df:8b:78:90:
                    63:5b:70:f6:c3:ef:29:7c:be:15:9a:96:15:6d:42:
                    8a:ae:57:7c:c9:a7:a4:3c:27:fb:f7:ac:44:1c:5f:
                    01:a3:30:4d:4b:27:70:d6:35:e5:c0:41:1e:63:5b:
                    7d:f4:9a:7a:a8:ed:21:4b:19:24:95:86:62:38:bc:
                    1b:79:d2:10:d0:ca:e2:a5:79:f1:ed:db:e6:c8:97:
                    43:6e:81:20:d5:e2:db:26:e7:85:56:29:fc:f2:15:
                    08:17:11:c3:99:a8:3e:b9:fb:f2:b5:e9:b3:72:01:
                    11:f8:d1:f5:2a:4e:dc:ee:1f:19:1c:df:80:26:6c:
                    50:bc:1d:13:47:3d:04:78:c0:7e:a8:08:c6:15:5d:
                    95:5e:63:53:ee:c0:6e:aa:08:d1:99:8e:a8:ab:d4:
                    78:e7:b4:0b:00:c3:14:d4:85:56:8a:c8:af:5a:cd:
                    c1:de:4c:a0:25:56:ca:3b:7a:bb:42:67:fa:78:20:
                    d2:7d:0f:10:f1:d2:32:d1:6e:42:a2:ce:d4:09:d5:
                    9d:87:f6:19:1c:04:9a:d0:52:52:4a:d6:9a:58:33:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:37:1D:42:37:05:8E:72:A6:D7:88:DF:F9:1A:F0:F7:62:2B:84
            X509v3 Authority Key Identifier:
                keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:60:b9:9c:bd:84:b5:f8:50:6e:06:f9:18:86:78:1e:7b:ea:
         dc:12:c8:65:4e:53:06:9f:35:96:aa:d7:71:41:63:81:bc:35:
         5c:6f:96:3e:a3:27:b7:14:db:3b:2c:00:a2:66:5e:58:70:86:
         69:87:65:d4:41:30:cc:e0:43:cd:be:fd:f8:a9:8e:39:7f:48:
         fe:20:ad:b4:a1:2a:2a:5c:b0:57:a5:a4:d6:40:f4:a0:82:37:
         42:9b:f4:9e:1c:87:55:96:58:83:98:d8:8c:f2:c4:98:0a:8c:
         4e:bc:e3:f7:26:1c:c4:76:bd:72:d2:72:eb:c8:c1:aa:bf:85:
         00:db:9b:71:bc:1d:2f:4f:e0:6b:a1:5b:29:0b:97:85:a6:42:
         6b:df:98:4f:f8:2d:e3:80:d0:1e:6c:2d:37:7e:8f:b9:e7:8b:
         2f:6f:da:f2:ca:17:d0:c5:e1:10:2f:f4:7d:84:fd:e8:21:9b:
         3d:9e:8b:66:19:41:3f:7e:60:b6:95:f9:6a:ac:cd:17:70:11:
         32:01:c5:b9:48:48:ee:a5:01:6c:59:a1:b9:91:9d:47:58:f8:
         f8:76:c6:1e:e2:08:03:36:4b:49:99:4d:95:92:2e:cd:ca:11:
         eb:16:7c:ca:54:6f:c1:82:70:f9:89:27:ed:7c:f9:83:4e:06:
         cf:b4:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:33:36 2026 by rpki-client