Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File:                     Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier:          ZG4IBiFcEFeZ6cYHlhNmjCmzhTzYh9K6b4smukqoIlU=
Subject key identifier:   02:01:40:32:F7:E9:D6:47:34:9D:7B:A7:07:CD:7A:5F:8D:8E:CC:6A
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer:       /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial:       01A18CE650F403F97A462EB628648CE6C692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number:          1192
Signing time:             Fri 30 Oct 2026 13:01:06 +0000
Manifest this update:     Fri 30 Oct 2026 13:01:06 +0000
Manifest next update:     Sat 31 Oct 2026 13:01:06 +0000
Files and hashes:         1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: LlvA0hGjmR7FdpuhOkPKOH1KkUNrqYKpqNu0PMyfWAI=)
                          2: jvRgN4gTBZCwQWvT7sU22fnWvLw.roa (hash: 3jTc+7mCGjbJJX33fJfW8ThIk132yuJ9dvK3BJPg3TU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:e6:50:f4:03:f9:7a:46:2e:b6:28:64:8c:e6:c6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
        Validity
            Not Before: Oct 30 13:01:06 2026 GMT
            Not After : Oct 31 13:01:06 2026 GMT
        Subject: CN=02014032f7e9d647349d7ba707cd7a5f8d8ecc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:0f:7c:cd:a2:4b:b6:f8:ff:9c:5a:8f:90:
                    e8:a4:ab:8c:6d:84:93:10:16:d7:ad:d1:45:d7:f6:
                    5e:41:39:5b:40:87:cb:40:64:c4:9e:c7:de:29:f0:
                    c3:7b:85:6f:42:56:44:aa:e4:58:b8:a9:6f:b5:fc:
                    b4:b1:27:ee:b1:f1:88:5e:24:cb:c2:98:b2:7b:bd:
                    70:7f:a9:21:a1:a9:3b:6f:40:f6:dd:8e:f9:e5:57:
                    a9:59:77:62:4d:29:9f:86:94:fa:cd:81:25:57:cd:
                    e0:e3:00:d6:ee:bc:fb:28:84:05:b2:41:b8:c1:bd:
                    2c:e0:7b:71:5d:75:88:74:d3:5e:5c:ac:8d:f1:7e:
                    2c:47:e5:c1:9c:8d:29:e4:c2:27:74:c0:14:aa:ba:
                    f0:81:aa:98:74:fb:3b:e0:e7:c0:1c:52:af:14:46:
                    01:e4:99:a8:b4:ac:6d:0c:3a:bd:f0:b6:fd:d0:54:
                    31:85:e8:78:4d:dd:17:28:1c:91:60:53:85:46:b6:
                    6b:f0:80:63:32:aa:13:a2:bf:77:40:02:cc:57:72:
                    51:b0:f1:ef:a7:4c:dd:96:0c:53:ee:74:b0:07:79:
                    fe:25:05:52:4b:aa:d7:55:ff:ec:3c:80:67:5a:5f:
                    a5:75:83:9e:00:d9:3d:a0:5f:74:ae:3a:fe:73:53:
                    6d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:01:40:32:F7:E9:D6:47:34:9D:7B:A7:07:CD:7A:5F:8D:8E:CC:6A
            X509v3 Authority Key Identifier:
                keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:18:d1:9b:b7:7e:20:05:5f:7b:3c:59:82:26:b4:ff:07:
         42:e3:51:69:09:7b:36:e2:ca:2b:e4:72:74:96:0b:29:77:26:
         d2:82:4d:a5:0d:23:ff:08:de:8b:ba:4b:fc:b0:e6:7d:51:49:
         e6:e0:b0:1a:64:c4:4c:13:e4:ff:51:5b:41:3e:65:ba:34:f6:
         97:ee:b3:a4:3c:9c:99:6a:8c:8f:21:80:84:68:98:e2:4a:3b:
         0b:19:5b:44:d9:26:e9:9d:be:65:01:24:57:be:ca:a5:b3:7b:
         77:70:33:36:85:bd:6f:67:f5:5e:90:21:28:e1:f0:de:f2:cb:
         40:67:43:33:4b:6e:15:3e:a7:df:3a:21:fb:02:2f:01:9d:97:
         9b:d3:78:c6:8b:d7:cb:fb:a1:f1:8b:04:04:b0:94:32:c0:e5:
         a1:73:b0:0d:0a:49:54:08:68:c6:e9:45:f3:b8:54:1f:ce:b4:
         61:1e:84:98:43:19:ce:d0:5b:7e:de:e3:a7:a9:bf:b6:18:cf:
         c7:6f:1c:9b:44:cc:73:6b:3f:c5:33:be:17:b5:e3:56:e2:f6:
         81:1d:34:9b:cf:be:88:1a:04:16:b3:8c:44:14:f2:5e:a9:6d:
         06:0d:ff:b7:49:c7:f1:fc:8d:4e:11:b8:a3:1f:4d:23:84:c6:
         ff:25:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:05:01 2026 by rpki-client