Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
File:                     zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json)
Hash identifier:          Daq5KbEaEqhSSRR1/xjDJ1vW2kRfKypGOSsR1fFBpZw=
Subject key identifier:   6C:63:41:15:5B:A7:DD:CE:D4:00:A9:95:DD:33:1A:BE:6A:D9:25:6F
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       01A16F4990C2378FF5B0BB23494CFEA7BD1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
Manifest number:          1437
Signing time:             Sat 24 Oct 2026 19:00:54 +0000
Manifest this update:     Sat 24 Oct 2026 19:00:54 +0000
Manifest next update:     Sun 25 Oct 2026 19:00:54 +0000
Files and hashes:         1: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=)
                          2: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=)
                          3: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=)
                          4: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=)
                          5: _FlJUcg_DAf-rn0fybI98kXRLSM.roa (hash: Na55+I4JuVi9sdUSuFm0DnoQALRTqrpEY/axc5aZZGs=)
                          6: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=)
                          7: a_baIkGFreZCkQEDrTUpOc9RljI.roa (hash: oCF0GgcCbPHk3wbbPuSP852CME0/FbCGLSMKdZU6cDI=)
                          8: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=)
                          9: dOwr2B8WnphDIXpwhxX7hEeAXoc.roa (hash: avK0kgve7pfAgs0RWzv3wt9hc94t2lmnhaoGfrVsWwI=)
                          10: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=)
                          11: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: NECp2Bf1PHKZjERlpphGLwWJrUkI9lInDx8E4RADYLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:49:90:c2:37:8f:f5:b0:bb:23:49:4c:fe:a7:bd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Oct 24 19:00:54 2026 GMT
            Not After : Oct 25 19:00:54 2026 GMT
        Subject: CN=6c6341155ba7ddced400a995dd331abe6ad9256f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:03:68:6c:99:9b:1b:4a:fc:de:52:85:4b:
                    3b:8b:0d:07:49:e8:8c:57:75:d8:3f:61:9c:ad:a9:
                    46:81:76:47:46:99:8a:9f:d7:20:b0:72:33:b0:14:
                    64:2c:e9:c5:e7:9c:b8:3f:bb:9e:44:ea:51:46:ef:
                    f7:80:c4:78:67:4d:c9:68:97:82:0d:ac:9f:05:24:
                    ff:b2:92:27:8b:a3:10:5a:d0:66:7c:65:0b:95:35:
                    ae:fb:ea:67:43:df:93:b3:60:31:d6:f9:cb:22:6f:
                    97:df:ea:11:6e:b9:5d:a3:3b:60:54:ac:10:2d:0d:
                    89:ca:71:e2:ec:3e:8c:a8:1e:f9:dd:a2:85:53:9e:
                    9d:90:87:bb:1e:40:c7:ef:ca:db:4a:59:df:0e:0a:
                    d7:32:1b:54:67:62:21:28:b2:7a:d7:13:ec:3e:06:
                    5f:d8:bf:36:e2:1e:02:be:eb:8c:a6:5a:1b:6a:a1:
                    87:7d:1c:0b:a5:3e:5b:ee:dc:b3:c5:3e:bd:1a:d6:
                    04:8d:8f:79:70:30:2a:f0:36:cf:5d:5e:d9:0b:c1:
                    4d:85:a5:dd:69:22:20:2f:68:6b:16:00:d0:ed:60:
                    28:5f:cd:a4:3e:1e:6c:1b:13:84:13:4d:70:5a:f9:
                    b4:80:f8:90:ba:cf:54:73:6a:1d:2a:c9:2a:6b:ae:
                    26:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:63:41:15:5B:A7:DD:CE:D4:00:A9:95:DD:33:1A:BE:6A:D9:25:6F
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:01:06:ce:f6:84:25:52:72:83:64:50:60:15:6b:a8:ee:
         4b:b2:00:93:ff:73:c5:a0:91:93:89:34:02:01:5d:f7:5d:e4:
         ca:fb:fc:0c:20:d4:4c:76:7b:aa:1d:17:71:2f:f0:2b:0d:01:
         5b:ac:f5:fb:85:a2:0b:31:ce:b5:55:54:ac:71:d8:32:4a:bc:
         b1:89:01:04:5a:a7:d0:71:70:88:ae:ee:45:b7:65:a5:44:3d:
         3f:4e:96:79:47:d2:2b:5e:c0:ee:42:31:64:51:9b:53:5a:a9:
         20:13:51:49:68:7d:34:11:a0:03:e3:e9:fc:ba:73:4c:47:f3:
         19:f2:3d:02:0f:18:03:2b:5d:78:29:f9:c8:89:8d:b2:9e:c1:
         e6:6c:35:8f:65:18:d2:a3:36:20:2c:98:64:94:5c:9c:19:12:
         ba:28:30:ff:24:7b:38:0b:d9:df:da:f6:d8:45:f0:07:15:12:
         49:ff:2f:c2:0d:c3:a6:ff:ac:e3:2c:6c:1d:2e:c9:36:8f:35:
         c7:19:40:78:45:4a:34:f3:dc:c6:89:c2:36:1f:cd:1b:7a:81:
         7a:d2:a0:51:07:df:74:ca:26:f2:d9:9c:49:d9:79:87:22:dd:
         b7:1f:ac:4d:91:c2:d0:a9:6f:9d:8c:72:50:cd:c1:43:e9:e8:
         32:f6:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:54:41 2026 by rpki-client