Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File:                     ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier:          J1MwfoaijzJDgRHW1+P28IV9u7jWOqJ3pXCRHTi+4Zk=
Subject key identifier:   5B:15:E8:BB:C2:7A:05:24:3B:C0:FD:C8:69:CB:1E:22:0A:8D:C9:34
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer:       /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial:       01A08B3171125DDA2AADEC6EFFB5C461CAB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number:          05E7
Signing time:             Thu 10 Sep 2026 12:01:08 +0000
Manifest this update:     Thu 10 Sep 2026 12:01:08 +0000
Manifest next update:     Fri 11 Sep 2026 12:01:08 +0000
Files and hashes:         1: HXygwNK2STzqNVll6HVDO_wB5r0.roa (hash: ZY5/8uKYBcUum4H1cHS3G78vJsO1xPm4UChz23v/ZS8=)
                          2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: lzlrlPvZP+QK5j1wuNHcKmeMQnU1rx3xAYi8p4fY6Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:71:12:5d:da:2a:ad:ec:6e:ff:b5:c4:61:ca:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
        Validity
            Not Before: Sep 10 12:01:08 2026 GMT
            Not After : Sep 11 12:01:08 2026 GMT
        Subject: CN=5b15e8bbc27a05243bc0fdc869cb1e220a8dc934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:f8:1a:b6:38:21:55:3e:4f:61:ae:cd:ee:
                    29:1c:f8:db:77:56:8d:c2:5a:a6:a3:44:81:9f:d1:
                    b1:d4:7b:38:cd:20:13:94:1c:3d:15:36:e9:0b:02:
                    f8:29:c9:ec:fa:71:67:56:70:1d:c4:29:c7:b2:15:
                    5d:86:dd:02:2b:1d:c9:79:bd:8b:39:aa:28:e5:38:
                    9e:56:f9:97:37:01:9a:d9:67:24:a6:71:b8:9c:e1:
                    f8:fd:cc:eb:09:3e:d3:c2:13:77:8c:be:6b:5e:7e:
                    d9:76:80:39:ac:e8:1d:93:ef:a7:dd:1e:99:86:2a:
                    a6:85:8e:93:55:5c:c9:d0:a8:95:6d:1f:73:d4:02:
                    d3:92:e8:5f:90:e3:9a:e7:23:49:99:22:26:13:b5:
                    b8:37:d9:ee:cf:4e:cf:eb:66:cf:05:04:a1:2c:ae:
                    d2:fb:7a:85:4a:fd:84:fe:a3:1e:72:a4:b6:07:92:
                    54:0c:d5:00:b8:ee:c9:59:10:17:c9:4c:7f:32:fe:
                    5f:07:67:be:64:a5:2d:1e:11:2a:cf:5a:a2:c2:c5:
                    b0:8e:76:cb:10:a6:89:15:3a:b9:8d:32:4e:42:c5:
                    4f:3f:96:37:e0:94:7a:d8:6a:c7:41:38:10:09:bc:
                    11:7d:2d:c0:63:52:a7:97:04:db:75:9d:6d:59:3e:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:15:E8:BB:C2:7A:05:24:3B:C0:FD:C8:69:CB:1E:22:0A:8D:C9:34
            X509v3 Authority Key Identifier:
                keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:fe:46:1d:b9:c7:c5:2b:2b:2f:02:c4:94:e7:53:b1:57:
         76:d9:33:9c:5d:fb:e7:87:4e:9b:9c:a6:91:0f:e6:0b:de:cf:
         6f:27:64:2b:1f:d4:54:39:e3:1b:81:13:37:08:c2:28:be:ce:
         99:fe:fb:3a:1f:56:55:c1:62:1b:e2:8a:a1:2c:32:54:13:a0:
         b2:b8:e6:62:5c:30:57:7d:d9:c6:27:01:ed:c5:59:88:13:b0:
         a2:dd:7a:e6:23:4d:34:0d:f9:3c:2a:4f:15:04:ab:37:5e:04:
         c1:37:74:5a:00:82:7a:ed:84:da:c6:04:2f:64:15:45:9a:2e:
         b8:d8:8f:45:56:9f:31:50:da:48:79:86:ec:8a:c8:9d:a5:c0:
         68:03:6d:48:56:63:2b:d3:10:49:24:af:7e:aa:a5:46:b8:15:
         a1:62:e6:46:10:22:e6:e1:cb:a0:65:27:d0:96:40:f0:14:84:
         ca:1e:a6:d6:b0:cf:5b:87:dc:b3:ec:ef:1a:dd:3c:34:c0:7c:
         2e:de:33:4c:6f:16:60:e8:b3:9b:76:b1:fc:3c:f6:db:13:42:
         86:48:b1:c9:67:78:88:22:30:4d:fd:e2:92:3b:f0:64:1d:dd:
         13:6e:7d:b2:9d:74:ec:f0:ad:fd:82:9d:db:c0:de:35:ec:a9:
         49:b5:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:49 2026 by rpki-client