Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
File:                     ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json)
Hash identifier:          sbXozQpg72dHpkgAf200kSR5JELGpMd0HrHKCSXteE0=
Subject key identifier:   D1:64:FF:C0:AB:FE:64:7D:ED:52:04:78:25:D9:C1:A9:A6:28:0E:27
Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
Certificate issuer:       /CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Certificate serial:       01A08C0D5EDBE3C5C058E442218EFFE5136E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
Manifest number:          179F
Signing time:             Thu 10 Sep 2026 16:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:21 +0000
Files and hashes:         1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: TvRU5AlFCtVcW20h8m1UzeP08gwglB92Tr72oOgNq0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:5e:db:e3:c5:c0:58:e4:42:21:8e:ff:e5:13:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3
        Validity
            Not Before: Sep 10 16:01:21 2026 GMT
            Not After : Sep 11 16:01:21 2026 GMT
        Subject: CN=d164ffc0abfe647ded52047825d9c1a9a6280e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:0e:10:9f:1e:c4:d8:70:c4:43:1a:ea:f2:
                    60:4c:d9:6a:91:37:55:a2:b9:12:28:24:8a:f6:e3:
                    c2:f1:e8:d1:83:b0:c0:ec:44:14:ec:66:89:d5:15:
                    89:8b:9a:e6:f4:89:87:d9:91:e3:5f:99:5f:22:2e:
                    1b:a9:5d:64:68:03:2d:4b:61:0b:8f:d1:a5:e6:34:
                    c4:c4:f2:00:bd:c3:a2:40:56:1b:38:25:b1:38:f2:
                    08:03:f9:03:9b:17:75:1e:bc:06:53:2b:4d:1b:3f:
                    e2:4f:4b:71:f3:9b:2d:9f:a6:03:6e:a3:bf:4d:6e:
                    0d:ba:cc:58:6b:48:02:fc:ce:37:97:9a:31:be:8d:
                    dd:c5:e7:28:bc:fb:4b:44:91:e3:bd:f4:07:c2:9d:
                    be:cf:20:26:d6:e7:80:ce:6f:d2:0c:c4:a7:e6:67:
                    ad:e7:fc:a0:e9:d2:48:5a:f9:c5:b7:67:9e:12:9c:
                    07:d7:4d:e8:4e:61:f8:41:76:0d:e5:74:8b:a4:d9:
                    17:e3:97:01:17:37:36:c6:c6:b9:52:22:e8:30:32:
                    27:9c:64:ce:97:91:8a:54:2e:ff:ab:51:bc:cf:b7:
                    66:b9:8d:69:e7:66:0e:d7:11:7a:4c:bd:b4:fd:36:
                    20:44:26:73:f0:77:9c:d1:3f:92:48:2d:05:98:51:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:FF:C0:AB:FE:64:7D:ED:52:04:78:25:D9:C1:A9:A6:28:0E:27
            X509v3 Authority Key Identifier:
                keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a9:17:ef:9e:5b:78:b3:42:5a:71:9b:e0:9e:d4:9c:70:eb:
         2f:3b:a3:4b:89:70:19:53:6c:5e:fe:8a:2d:1a:49:4e:ac:ea:
         08:7f:e8:ef:66:9f:e4:1f:c8:e3:db:65:1b:d2:06:3d:81:96:
         9d:dc:5b:59:89:5c:09:38:5d:13:cf:ad:dc:93:b3:57:93:78:
         b3:e7:3f:e5:cb:4a:e6:26:10:e2:01:a9:97:4e:10:e3:ef:96:
         28:b7:10:2d:2d:54:eb:22:6f:7c:b9:29:1a:a6:47:18:09:fe:
         69:2e:aa:ea:8b:ca:b3:8a:cd:09:53:1f:99:80:8d:33:75:fd:
         3f:af:3e:81:0d:89:b4:e2:27:df:00:82:eb:0b:c5:44:ad:75:
         e9:ef:09:a6:ec:08:9d:d5:50:46:c2:03:24:7e:8c:23:aa:de:
         c4:ab:c6:91:03:72:84:cd:45:6a:c9:36:11:3c:23:3e:42:a9:
         21:8f:28:9d:13:47:ea:03:bd:65:1f:af:c9:a9:58:fd:48:cd:
         da:1b:c6:78:7d:bb:9c:3d:97:d7:4d:88:f4:4c:68:45:c4:c9:
         3b:fd:13:78:71:1d:82:c5:2b:16:12:53:a7:fe:45:97:b6:b8:
         cb:3c:18:da:87:94:c3:c1:f7:b9:23:40:84:cc:aa:69:d8:0e:
         ad:24:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:08:21 2026 by rpki-client