Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File:                     1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier:          AYMXHyBSEHpQWVGtC80hRAFfeqVLoj9QBgi/JSXkhhg=
Subject key identifier:   D5:2A:3D:36:69:61:57:69:FD:B7:41:6F:F4:1F:39:3F:EA:F0:1A:FE
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer:       /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial:       01A09057B25380923324AF8939F32BB9B6E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number:          C4
Signing time:             Fri 11 Sep 2026 12:01:01 +0000
Manifest this update:     Fri 11 Sep 2026 12:01:01 +0000
Manifest next update:     Sat 12 Sep 2026 12:01:01 +0000
Files and hashes:         1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: 4c8fDbs8ng2eIjK/Akd7yga0ePr7sW6vEJjWLtS0FK8=)
                          2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:90:57:b2:53:80:92:33:24:af:89:39:f3:2b:b9:b6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
        Validity
            Not Before: Sep 11 12:01:01 2026 GMT
            Not After : Sep 12 12:01:01 2026 GMT
        Subject: CN=d52a3d3669615769fdb7416ff41f393feaf01afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:b5:d3:6b:5d:71:97:6a:3f:1a:a9:c1:23:
                    83:50:95:a9:5e:78:a5:6e:3a:64:57:05:78:b7:d6:
                    65:f6:f3:66:8f:84:b9:9e:06:93:9d:34:8a:6b:00:
                    9a:41:10:25:df:da:7b:2e:77:cc:78:52:26:88:f2:
                    46:23:32:c9:71:3d:88:f7:c2:04:a2:18:49:87:a3:
                    53:50:c7:8c:f7:b4:24:8f:60:6c:3b:0e:7a:ea:e4:
                    44:f6:a4:5e:dc:46:26:30:75:c2:2a:e0:0f:e3:fe:
                    24:89:10:2b:a8:71:67:e9:4a:df:93:43:66:16:08:
                    1c:2f:47:92:da:92:d0:01:a2:82:8b:0c:fa:56:93:
                    e9:7b:ed:05:7d:76:95:10:de:87:af:c3:16:bb:87:
                    42:c6:4e:34:a4:4d:35:a3:09:c8:cf:eb:b7:32:b4:
                    d3:f1:e7:b3:38:b6:9e:c6:d0:b3:61:b3:e1:d1:4f:
                    ea:b7:7f:d1:b1:ed:f5:16:29:eb:9d:ee:0c:61:91:
                    ac:23:f7:e3:a5:46:24:33:ce:8b:24:9c:81:d7:06:
                    79:e2:90:0c:f4:cc:7a:0b:64:36:40:7d:af:e3:20:
                    3f:eb:e5:27:b5:65:08:1a:19:71:c3:3d:20:16:07:
                    3c:ad:7a:19:c9:2d:29:e7:a5:b9:7b:a3:6d:a7:83:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2A:3D:36:69:61:57:69:FD:B7:41:6F:F4:1F:39:3F:EA:F0:1A:FE
            X509v3 Authority Key Identifier:
                keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:06:da:b2:b1:b2:f2:e2:ee:17:91:e3:b5:44:50:07:22:6c:
         3f:17:cc:cc:27:0a:77:ac:02:39:9f:02:0a:aa:0f:f9:b0:b7:
         02:1b:a1:40:81:e6:9c:92:73:5c:fa:d2:a7:0f:67:26:66:d9:
         06:e5:00:ad:83:07:6d:fb:97:93:92:40:7a:3c:52:1a:ed:16:
         4d:7e:6e:59:99:ae:c9:18:f0:69:be:6e:04:51:d8:2b:31:e7:
         48:df:8b:5a:e7:d5:dc:ee:70:72:06:39:7f:6a:17:84:eb:8b:
         c5:87:b3:fe:86:fc:c9:21:c8:0a:b0:20:a8:10:c1:bf:b1:1a:
         47:ac:c9:ce:c4:8f:8f:6c:f9:ff:0c:f6:7d:88:35:ab:12:ee:
         d3:53:7a:ed:b3:55:84:d0:d4:07:84:c6:5d:3f:b3:f2:71:81:
         a4:e5:19:31:44:9e:33:5b:ce:87:75:30:c3:15:dd:26:de:b6:
         3c:28:21:21:76:06:f0:08:b7:78:fb:52:96:a8:de:21:4e:71:
         81:f0:9c:19:99:88:74:49:35:a0:00:49:04:21:73:d7:13:c8:
         7a:d7:a8:e0:01:ff:d9:21:09:cd:51:25:6b:d5:e0:19:90:58:
         84:d2:c3:0d:b9:b8:0d:22:93:4a:d4:9a:5b:c6:4f:ee:b0:79:
         2d:e2:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:16:29 2026 by rpki-client