Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          TiA6zPwtdD/jZgedvge2QTUZeiNaTHLkqeFNgzNxrmw=
Subject key identifier:   52:47:B6:32:AC:7C:0E:79:C6:E5:A0:09:02:2A:00:74:91:80:52:97
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       01A1298D348E83C022CC9D85A729FC12B996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          1A9C
Signing time:             Sun 11 Oct 2026 06:01:22 +0000
Manifest this update:     Sun 11 Oct 2026 06:01:22 +0000
Manifest next update:     Mon 12 Oct 2026 06:01:22 +0000
Files and hashes:         1: 6xuNTY_iWkHPPmX8ImnPUwpIICw.roa (hash: rki5JF3Dn8KF0wiQ0pOA5KuyYBjrNPOOlyoFXsz/Nw4=)
                          2: Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa (hash: /UOlw8R9RHBXRNf2pHB5ILY2/31tspmHrZEY8rczLws=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: 7Lk8NBAi7iO2gs6pdteCSS57dgQYaZyY5k7D4wDjBqY=)
                          4: l6fGw5x0kwKbWm6qlO4Cb8mnozw.roa (hash: qIO5x+8uTr9xwt8GJiCJP0qK55Dhutv/sFwU3VkQhb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:8d:34:8e:83:c0:22:cc:9d:85:a7:29:fc:12:b9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Oct 11 06:01:22 2026 GMT
            Not After : Oct 12 06:01:22 2026 GMT
        Subject: CN=5247b632ac7c0e79c6e5a009022a007491805297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:2e:ab:4b:7a:18:7d:26:36:48:aa:d0:9c:
                    6c:f0:a9:b5:17:f1:02:cf:6a:2b:d8:94:30:6a:e7:
                    e6:d2:81:e3:28:f3:74:33:58:10:26:14:5a:ec:a3:
                    19:19:b4:5b:9f:8f:b6:2e:1f:b5:e0:75:20:bc:fe:
                    31:df:5e:df:69:53:42:7d:9c:22:88:ed:64:35:52:
                    51:b2:e3:b0:03:bd:65:a3:4c:13:c1:95:cc:43:54:
                    e2:4f:2a:09:25:ee:ea:1b:87:5a:e1:84:88:75:60:
                    8e:9f:e3:34:5d:97:73:98:59:e6:01:c8:c6:cb:0b:
                    b4:ce:09:c6:c3:5a:af:52:93:e2:c4:1f:9d:54:1c:
                    85:5b:73:36:b9:a7:5f:d3:f1:26:fb:cf:26:9a:6b:
                    10:14:34:5b:e8:2f:3b:d4:f8:59:13:33:85:3a:20:
                    fa:6d:27:40:d0:22:c4:80:52:9e:64:c1:a7:00:18:
                    18:b8:ed:15:f5:69:90:c7:fd:b1:f4:9a:63:0c:22:
                    1e:6d:2b:d9:ad:04:d5:48:84:4f:1f:50:73:b9:60:
                    b5:6b:c0:7d:2e:7c:38:e5:d8:24:41:1e:93:ea:20:
                    2d:7e:bc:57:32:ae:38:a3:6a:2a:97:a1:ed:24:17:
                    16:22:c2:75:e2:1b:42:5b:c9:e3:03:f6:36:d3:be:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:B6:32:AC:7C:0E:79:C6:E5:A0:09:02:2A:00:74:91:80:52:97
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:18:a7:04:91:f8:ce:78:88:46:b2:50:6f:c6:1e:8f:bb:de:
         6c:91:68:b4:0b:a3:69:cb:5f:11:3f:48:ac:bb:22:6b:88:d8:
         dd:30:72:9c:5d:cd:b9:78:41:90:19:e3:80:99:c9:9d:b5:3f:
         40:23:5e:0a:2b:0d:9e:a9:da:4f:0c:97:4b:21:dc:c1:67:6c:
         b3:e9:ef:3a:a7:1d:c2:58:da:41:4e:4d:c1:4b:4c:bb:92:de:
         56:d0:32:48:7f:9d:ef:26:d2:13:68:fb:79:e4:fa:76:51:60:
         a3:be:c7:41:58:42:5d:5d:57:ca:1c:48:d0:75:04:7a:fd:22:
         1f:4d:2e:a8:e9:3e:71:fd:68:79:df:b3:7c:7c:0c:34:99:e3:
         26:07:29:15:9a:13:ba:bd:f0:bd:3b:8f:22:60:69:af:20:f5:
         0d:05:9b:e4:00:37:f0:c9:d2:36:1f:40:85:f5:24:a0:56:78:
         3a:47:0c:c5:11:dd:55:82:8d:34:e3:06:96:e0:dc:86:a4:18:
         d2:2a:23:bb:15:06:88:43:e6:3d:e8:e6:08:67:88:c2:0e:38:
         7b:db:d0:1d:bf:de:7b:21:8c:c3:65:8a:86:d9:8b:18:19:2e:
         46:8d:0a:82:93:4f:fd:8e:c3:84:df:f3:59:d5:26:5b:c2:1f:
         b4:c1:7a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:35:53 2026 by rpki-client