Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
File:                     ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json)
Hash identifier:          BQ5D2DZfI0WtfMIBwhUhVQW6YjR0piyphN9SnfgOpts=
Subject key identifier:   97:EE:D3:42:FA:3A:F4:A5:9F:20:E7:83:E3:22:33:F0:6D:58:4D:05
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Certificate issuer:       /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial:       01A179CCE8B445A23B0D21443C2738272E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
Manifest number:          175A
Signing time:             Mon 26 Oct 2026 20:00:34 +0000
Manifest this update:     Mon 26 Oct 2026 20:00:34 +0000
Manifest next update:     Tue 27 Oct 2026 20:00:34 +0000
Files and hashes:         1: VrGbU3QOrHG9m3kuxOwRhUx6Wbg.roa (hash: hDz07lJqNzJNY545cD3FDRksWHSBVWWDKwpbA8KVi0Q=)
                          2: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: BT+igilkJNfos4bM+N9yhCj2FlIOiDWmg+2kmIKfNvI=)
                          3: eKcVeXq2wt0SKbLGS84_xIQwRyI.roa (hash: o/AvUkqirZcVTc0Fj5CZijcSI6/NhaqXETyeyP//FGQ=)
                          4: enrj7Rmn-Rbin2HO4jtah8-M3bU.roa (hash: NrW7rDMpz8LFJnfE1GrWjyKulkBnQDA8wPMx4nsv1l4=)
                          5: vY_Y2rXzdf11VrMeTl5FVuF7Wcg.roa (hash: K8iieu6LpRNKFrHbCk+qEiKWtP8c1OcOi1kq2jJqsAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:cc:e8:b4:45:a2:3b:0d:21:44:3c:27:38:27:2e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
        Validity
            Not Before: Oct 26 20:00:34 2026 GMT
            Not After : Oct 27 20:00:34 2026 GMT
        Subject: CN=97eed342fa3af4a59f20e783e32233f06d584d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:68:cd:91:e1:3a:70:12:1b:06:39:6e:6a:
                    aa:a4:8e:98:12:06:18:de:70:c4:f4:4c:69:2d:c7:
                    7d:70:02:df:30:dd:c3:3b:dc:45:53:e2:f4:1c:0f:
                    63:6b:21:15:87:92:8d:13:7e:d7:07:62:2f:26:3e:
                    e4:20:eb:5b:7d:51:66:15:96:42:c3:29:8f:6b:06:
                    34:fc:a5:70:97:a0:fb:a5:f2:0a:cc:fb:9d:d8:1f:
                    cd:02:37:01:3d:85:22:ff:3b:62:ec:c3:45:ea:e7:
                    d4:86:18:2d:86:23:99:35:e7:2c:f4:ec:7b:91:22:
                    ca:97:09:83:c4:ac:8d:da:79:55:a0:de:70:c5:8c:
                    f7:c3:a5:38:ea:b7:2a:e5:2b:84:fb:86:09:c8:73:
                    e3:33:3e:98:0e:fd:1c:1c:6e:ac:1a:a4:d3:f7:3f:
                    cf:ba:92:35:e0:09:0c:ba:e2:b0:a4:62:88:13:47:
                    4b:f1:f5:8b:00:fd:4c:96:ac:46:04:1e:7a:11:8c:
                    de:c3:b0:92:f5:36:80:7a:7a:4b:41:71:89:01:bd:
                    d3:fa:45:b7:59:e7:17:9d:f2:18:af:82:48:b8:6b:
                    03:68:a1:62:49:37:2f:3b:c5:c8:70:eb:3c:d2:04:
                    f1:69:33:80:2e:41:d3:ba:8e:b0:4f:c8:f4:bf:39:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EE:D3:42:FA:3A:F4:A5:9F:20:E7:83:E3:22:33:F0:6D:58:4D:05
            X509v3 Authority Key Identifier:
                keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:bb:1a:78:bf:14:b2:67:08:38:6b:3f:5f:8e:2a:02:49:
         bc:fe:db:82:ef:13:d5:bc:90:ed:cc:0a:84:37:2a:cb:a9:52:
         bd:4e:e4:a4:93:73:7f:06:50:00:2f:a2:89:a6:09:96:90:e1:
         c4:fc:69:c5:16:7d:dc:79:32:07:89:2a:85:c2:66:59:b2:5b:
         2a:35:69:6d:72:0e:67:c6:12:92:a3:da:35:5a:b8:55:7b:b0:
         f0:04:86:a0:9c:a4:9c:9e:30:2b:6c:90:f7:1b:34:81:80:64:
         cc:d2:ec:57:e1:85:c7:70:db:f7:b5:81:a6:1a:34:a4:fc:cc:
         4d:88:ef:8d:67:b1:71:c3:c8:26:5c:2f:48:e7:73:c2:91:84:
         b6:8b:dd:2b:c1:53:9b:02:6d:08:2c:93:4d:4b:1c:87:24:54:
         d0:c4:bc:ef:07:f7:24:89:fa:c2:43:e1:2a:6c:b4:3f:87:02:
         71:dc:e3:d9:e9:e7:fa:36:5c:3c:1f:97:e0:d8:df:31:da:7d:
         cb:ab:f8:81:95:1d:12:05:5a:8a:92:0a:6e:61:79:d2:b1:f5:
         db:81:c8:6e:f7:19:b0:67:d8:43:3d:0c:65:85:e9:d1:50:43:
         cd:91:85:0d:24:8e:57:09:e2:9d:0f:cd:15:da:b1:0f:0b:08:
         d7:6c:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:05:46 2026 by rpki-client