Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File:                     C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier:          znwK7+MNbn6ItkUKK0cntcV0iBGEvzaRlwu+H93IYsw=
Subject key identifier:   D5:59:8C:6B:B5:7F:25:FF:34:96:2A:C2:65:20:35:E0:7A:A4:61:D8
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer:       /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial:       01A178F19A988DB7808B2FD72305A1586BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number:          06E6
Signing time:             Mon 26 Oct 2026 16:01:01 +0000
Manifest this update:     Mon 26 Oct 2026 16:01:01 +0000
Manifest next update:     Tue 27 Oct 2026 16:01:01 +0000
Files and hashes:         1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: 3yMf9iau+EAy/wX43td3TU1Y7dq65Re9BhiP28Ibq8g=)
                          2: WJTr2Tk1_nZlSZj0AI0um0QiPjI.roa (hash: mYhezBwJPYjVc5I7W3f+glCZHfaPOouHpLS/423/Sw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:f1:9a:98:8d:b7:80:8b:2f:d7:23:05:a1:58:6b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
        Validity
            Not Before: Oct 26 16:01:01 2026 GMT
            Not After : Oct 27 16:01:01 2026 GMT
        Subject: CN=d5598c6bb57f25ff34962ac2652035e07aa461d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:28:1d:34:95:0a:20:6e:d9:e6:05:ca:c2:
                    61:da:20:50:dc:5e:cd:c7:78:67:ee:f8:1b:bb:a7:
                    a6:46:f5:e0:83:c3:1e:ed:f1:16:8e:74:f6:64:92:
                    29:72:29:97:a6:c1:cd:13:21:70:1a:ae:7c:3f:85:
                    00:74:5d:d8:58:27:04:c8:98:57:76:00:69:4e:c7:
                    45:13:9d:87:56:60:b0:17:ab:36:70:1c:b6:bc:8e:
                    da:46:38:80:0d:f7:9a:94:f9:1e:3d:25:2d:d6:5e:
                    3b:56:df:d2:e3:41:4a:b4:54:5b:cf:67:da:ef:94:
                    5c:62:71:e9:e6:31:70:7f:a6:99:b1:48:08:b0:1c:
                    f6:2c:c3:3f:41:18:bf:76:c5:ab:33:52:e7:9f:f8:
                    b9:12:58:9f:cc:2c:1b:b8:cc:33:2f:dd:16:9b:07:
                    f4:fb:d7:7a:5b:9a:08:82:b3:3e:ec:9c:2a:a3:70:
                    8e:a6:04:13:4a:8d:fc:70:9f:eb:d9:03:94:83:10:
                    30:b4:3b:bc:e9:ec:98:0e:56:69:20:13:f3:cc:3e:
                    b1:6b:6c:3e:d6:b1:87:b8:2c:9a:21:df:0e:7a:7d:
                    6e:69:c5:e8:42:d4:7c:5c:fb:68:f8:4e:37:c9:66:
                    08:af:f7:bf:7d:9d:c4:a6:da:b9:c3:6c:c3:3d:7a:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:8C:6B:B5:7F:25:FF:34:96:2A:C2:65:20:35:E0:7A:A4:61:D8
            X509v3 Authority Key Identifier:
                keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:09:55:62:b1:d5:35:34:5d:87:b8:b9:1f:5a:49:5a:3b:07:
         b0:fa:69:de:5d:39:ea:cc:fb:e4:ce:81:1f:1e:f6:98:81:f3:
         bf:eb:6f:91:ee:4a:c9:c1:a6:a8:80:c9:59:75:1d:bc:f4:80:
         0f:0c:f9:02:2e:82:00:17:54:27:f0:c2:f6:40:4f:91:b6:d8:
         49:5e:ff:b2:7f:fb:c2:0b:83:ad:6b:ee:3c:32:34:6d:22:c6:
         fc:f0:3e:d9:fd:04:16:13:7f:dd:b4:16:2a:02:e3:b4:53:60:
         62:3b:6c:de:ba:50:ce:e2:aa:c5:e2:47:ac:63:98:da:41:69:
         96:da:c7:e8:b7:ef:e0:7b:e3:65:df:5f:2a:dd:89:74:e3:f7:
         25:c7:81:39:1d:7f:f0:af:88:9a:4e:aa:81:6e:12:2e:a9:14:
         c1:a9:b6:d3:3f:1d:0e:10:fb:06:c3:87:49:b9:07:ba:11:47:
         29:41:a7:06:1c:31:ce:34:58:c6:6a:8a:6b:4e:3a:f3:12:f2:
         fa:b6:17:3b:e1:70:3c:49:49:fb:f2:97:31:7c:aa:06:de:ca:
         c2:31:48:43:31:ff:75:77:38:f0:98:3b:a7:ff:7d:f8:1d:63:
         4e:29:b0:e7:c6:00:9f:f1:b7:3b:f2:e4:53:6f:a3:a8:08:d7:
         ab:5b:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:35:51 2026 by rpki-client