Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File:                     zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier:          3YvGpQh9ZD7MifBnNbGY6xDgN4iMBoHacbd1mEhideY=
Subject key identifier:   4A:07:3C:3E:E0:F3:C4:B9:1D:70:87:C6:64:52:64:AC:89:59:8C:04
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer:       /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial:       01A08AF9E50E75D2EADA55502E24B88ED7C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number:          1074
Signing time:             Thu 10 Sep 2026 11:00:27 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:27 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:27 +0000
Files and hashes:         1: TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa (hash: hjAmuYuA2bu34wGu3wYkNL+2UTuhOaLaJGD6bAnWUE8=)
                          2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: P7xuWe+nNRNTlCuECTkniBg9kN3vNhhCuYrp4oHy25I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:f9:e5:0e:75:d2:ea:da:55:50:2e:24:b8:8e:d7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
        Validity
            Not Before: Sep 10 11:00:27 2026 GMT
            Not After : Sep 11 11:00:27 2026 GMT
        Subject: CN=4a073c3ee0f3c4b91d7087c6645264ac89598c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:a8:bf:f5:fe:a2:c2:9b:e2:06:52:f4:2b:
                    45:fc:a2:9f:1b:da:50:91:35:21:45:89:8d:71:b1:
                    43:65:a8:9e:6f:72:b3:6d:2c:cb:d7:32:66:5b:51:
                    bc:52:a2:49:0a:c7:54:17:c0:cb:21:aa:5e:03:e7:
                    aa:4e:24:7b:46:b5:e6:b0:db:7f:d1:b4:45:9e:f9:
                    ad:28:65:92:66:bc:27:8e:9a:36:b2:72:91:69:2a:
                    c4:48:3d:f0:49:60:76:6c:c4:0d:fc:a5:01:c2:e8:
                    bd:5f:fa:08:08:df:37:3c:00:3e:6a:57:7e:8f:a7:
                    d8:11:05:eb:b5:b8:57:f9:60:4e:cc:4f:d8:ba:ed:
                    9f:16:22:7d:23:8b:be:fe:68:e0:69:8b:19:bf:b4:
                    2e:38:63:84:87:6e:30:02:5c:47:17:4d:6b:ba:0c:
                    2e:47:ea:dc:c2:b5:3f:28:ab:52:44:25:28:87:bb:
                    93:92:46:75:02:e7:d6:a3:ea:82:5d:62:11:44:c9:
                    65:fc:9d:2a:f0:d4:c3:69:f3:6b:bb:3b:85:ef:6a:
                    12:bc:0a:a7:f0:54:34:56:ee:d8:6a:19:bf:fc:6b:
                    9a:01:2a:c0:07:7f:a2:14:e2:11:f8:3d:7a:95:94:
                    d7:dc:fb:c7:ce:c7:8d:0c:b3:19:be:2d:77:9a:7c:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:07:3C:3E:E0:F3:C4:B9:1D:70:87:C6:64:52:64:AC:89:59:8C:04
            X509v3 Authority Key Identifier:
                keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8c:66:39:2c:47:29:2b:62:8e:a4:d4:50:ad:73:25:a3:53:
         1f:b3:57:4f:e2:1c:c8:0b:d9:ff:c3:ab:2c:d8:2c:86:3c:f4:
         88:e4:af:bd:27:9b:cd:8c:dc:8a:1b:2a:d3:a7:ec:a6:a3:5a:
         a3:97:59:2b:f4:69:f6:b3:63:17:d3:35:d1:40:92:b0:21:20:
         64:5e:5a:df:2e:d4:6e:24:2f:6d:63:59:57:48:4b:7a:f6:ca:
         6a:c6:10:58:81:93:36:eb:fa:76:74:83:1f:c0:44:ad:3a:63:
         18:54:69:1c:3a:e9:9e:c7:bc:44:0b:2e:52:65:aa:5a:0c:c8:
         31:a7:20:41:85:86:0c:1a:16:0c:3f:3c:a3:2a:b0:b7:b6:2a:
         76:e7:4e:38:47:e0:c9:c4:a3:c2:6d:cc:88:80:2a:09:77:62:
         f3:23:ac:76:4e:b6:42:1d:c2:6c:ec:a7:e0:b7:21:7b:2e:e6:
         64:01:5c:f5:3f:93:4c:da:7a:58:53:bf:0b:1f:8f:d3:02:78:
         99:9c:bd:02:89:3a:9c:00:9b:4b:60:2c:57:b7:34:d6:da:61:
         40:53:61:47:ac:d7:6a:4b:3e:2b:0c:c9:ca:8a:2e:7f:7d:71:
         11:cf:0e:b3:1d:d0:d7:04:77:53:e0:30:66:6b:86:67:19:ec:
         a7:f5:91:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:45:03 2026 by rpki-client