Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File:                     ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier:          sRLCYsjd9PoI5WfP0bSpRUKFk1/HFjfgQ2gWrE1S0FQ=
Subject key identifier:   FB:B6:8C:96:F1:06:F4:40:6C:0A:74:F8:B8:B5:4F:35:DC:22:03:A3
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer:       /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial:       01A102B6CB5FF3A241B2087339B06A3BA8DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number:          15B4
Signing time:             Sat 03 Oct 2026 17:01:36 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:36 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:36 +0000
Files and hashes:         1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: /o7FpPS3mkzlr+Qb9P7uzUsq14b46GtjmJBOy1tqUXs=)
                          2: ZskxnuDG6fMgD-H_7uVUAYgrA_I.roa (hash: 8wU9ul7S+8AZLJpKxnijl5gAw5JCYACT07glI9IgGUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 17:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:cb:5f:f3:a2:41:b2:08:73:39:b0:6a:3b:a8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
        Validity
            Not Before: Oct  3 17:01:36 2026 GMT
            Not After : Oct  4 17:01:36 2026 GMT
        Subject: CN=fbb68c96f106f4406c0a74f8b8b54f35dc2203a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:10:19:6e:6a:ba:3f:31:a7:05:b9:75:2b:
                    3c:8d:07:fa:1f:ee:13:f3:26:a5:8b:cb:d6:21:b5:
                    a1:cb:e5:10:ae:8c:9e:a4:7b:e7:26:7c:79:7a:e7:
                    57:55:ed:2c:e8:e8:fd:66:ca:31:ec:70:7d:e0:92:
                    62:73:e1:68:39:22:45:ac:79:2a:c2:40:31:cc:e5:
                    2b:0f:f3:6e:f7:b8:df:bd:96:0c:46:3a:ae:d5:ec:
                    61:f4:e1:a1:c4:6a:5c:04:a1:ae:3a:9b:8b:6a:ff:
                    8e:4f:56:ee:c4:38:f4:1d:b6:f7:17:75:32:41:39:
                    32:2f:9b:8d:c7:6f:18:19:a9:a6:97:9b:55:59:9f:
                    36:95:26:0f:90:31:09:19:2c:ed:db:d7:90:c6:18:
                    d5:6c:e5:86:d4:af:91:03:62:86:12:48:5e:ea:0a:
                    a5:b0:d5:21:cb:b1:60:11:9a:f0:1a:91:73:97:62:
                    49:78:c5:f2:a3:0f:ac:48:57:45:b5:b4:8f:5a:2a:
                    fd:d2:cb:76:f1:1f:4c:08:18:c6:5f:4a:5d:22:4e:
                    91:33:e5:c8:99:c8:83:eb:12:fe:98:d1:39:82:88:
                    3b:d7:40:11:99:e5:01:24:50:80:a2:db:ed:84:ad:
                    9b:00:4a:38:c1:98:80:85:6d:1d:76:2d:cf:3d:9a:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B6:8C:96:F1:06:F4:40:6C:0A:74:F8:B8:B5:4F:35:DC:22:03:A3
            X509v3 Authority Key Identifier:
                keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:31:b4:8e:6b:67:23:3f:dc:cb:e5:9c:f3:75:80:6e:63:d3:
         2e:c3:86:00:31:2c:9b:03:19:5b:68:87:0c:1a:12:53:5e:bd:
         bf:a7:d0:c3:14:10:34:aa:4e:cf:c5:cb:d6:41:05:db:85:06:
         4a:90:a8:b5:7d:8c:6c:d4:cb:65:16:64:87:f3:db:09:27:27:
         01:69:9f:40:85:2d:dc:6f:89:8c:e4:50:1c:2b:ed:93:31:dd:
         d3:40:34:8e:5a:73:e0:f0:bb:bd:67:41:25:42:9f:a7:43:ee:
         52:d2:37:4a:70:4e:00:d2:b4:6b:a8:45:e8:90:07:5c:57:37:
         3a:e1:bd:e1:09:f3:8e:44:77:28:dd:ce:23:e9:6d:f7:13:82:
         0b:b7:f5:bc:d4:61:00:ed:a9:55:ee:d6:ff:18:66:d2:86:38:
         20:5d:a0:ea:4a:a9:6f:cd:eb:f2:aa:93:65:ac:4a:59:1c:55:
         72:8a:29:21:27:b6:97:f2:e0:c0:a4:a2:cb:fa:92:5c:36:a3:
         0b:de:a7:06:62:0d:83:a1:8a:66:e7:1c:c7:49:0c:fb:a5:c4:
         84:13:00:1d:42:3c:db:4d:8d:9a:83:b5:af:14:31:61:79:74:
         6a:ab:70:16:31:44:6f:ff:aa:9c:fb:51:c0:31:2c:b7:3a:b6:
         e5:dd:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:51:12 2026 by rpki-client