Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.mft
File:                     ZWTNWDyj7V7mHQecNi1OOf_qY6k.mft (raw, json)
Hash identifier:          IN10g5Fhd3f26kNGk9WlDhmAnVVsO2b1usaLtaYr8W0=
Subject key identifier:   05:90:78:9D:64:82:40:DB:DB:BA:80:51:C2:D8:F5:BA:72:CF:E3:40
Authority key identifier: 65:64:CD:58:3C:A3:ED:5E:E6:1D:07:9C:36:2D:4E:39:FF:EA:63:A9
Certificate issuer:       /CN=6564cd583ca3ed5ee61d079c362d4e39ffea63a9
Certificate serial:       01A020565428FA137B41C8E2770561F2E8E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWTNWDyj7V7mHQecNi1OOf_qY6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.mft
Manifest number:          01DB
Signing time:             Thu 20 Aug 2026 18:02:03 +0000
Manifest this update:     Thu 20 Aug 2026 18:02:03 +0000
Manifest next update:     Fri 21 Aug 2026 18:02:03 +0000
Files and hashes:         1: ZWTNWDyj7V7mHQecNi1OOf_qY6k.crl (hash: FC8RovjO7OIxFX6ecbyfcIjDIjhU2UJvC6wc1X/296M=)
                          2: _D9qS-8DScnc_2I6GqJqvVKb0NE.roa (hash: by/V+9jlEV4exXP9BXZGcUReXmY3vjq1g4eXzgdYxqA=)
                          3: gDjWhW75y9WBXXvDeumWa7DTWZ8.roa (hash: THuvn9uWHTRPEbAvXJTYqXwFigFzVrDFgO2on01Peuc=)
                          4: m0S6_WzWlrHR_2JCITRe_ZXwGnA.roa (hash: me1fB1mJ0Ch7//Q7zoSWoOV6hA8e2Ax4/+PxpVsvA8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWTNWDyj7V7mHQecNi1OOf_qY6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:56:54:28:fa:13:7b:41:c8:e2:77:05:61:f2:e8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6564cd583ca3ed5ee61d079c362d4e39ffea63a9
        Validity
            Not Before: Aug 20 18:02:03 2026 GMT
            Not After : Aug 21 18:02:03 2026 GMT
        Subject: CN=0590789d648240dbdbba8051c2d8f5ba72cfe340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:eb:c6:43:93:5a:aa:59:6d:1a:19:bb:da:
                    7c:d9:f3:03:64:dd:cb:ce:c9:0d:6b:0e:75:8c:ba:
                    22:c1:71:d3:67:77:0b:ab:39:f9:ff:9a:0a:f5:03:
                    22:bf:b9:31:a1:93:1c:6b:b3:87:08:06:17:08:f4:
                    fb:9d:a0:1c:92:00:05:5e:1b:d8:96:e6:bc:48:09:
                    ca:41:da:8f:ae:e9:51:87:4a:12:68:87:a7:3e:2b:
                    37:5b:31:dd:08:12:79:82:09:91:a5:1f:a2:66:0c:
                    71:41:52:b4:75:af:9f:ee:cf:1a:9e:3a:e1:49:77:
                    6f:d7:db:67:38:8d:be:5d:95:8c:0c:e7:55:7a:d3:
                    5b:fd:45:ee:7b:b8:ca:62:4e:6c:3e:fd:85:99:5d:
                    1d:c2:b9:56:3c:8e:21:65:a7:91:f0:44:b2:55:f3:
                    5f:2b:88:ec:b1:23:30:eb:cf:e1:40:c7:69:b9:8e:
                    ef:c7:93:99:64:6b:ca:bd:29:1f:b6:ec:d7:43:26:
                    c6:b3:40:70:11:74:27:b3:fb:75:b4:8f:cc:e3:ed:
                    66:06:d0:fe:4a:ae:69:79:4d:44:f1:f2:eb:90:6e:
                    23:1e:3d:03:ab:d3:df:4b:b2:1b:42:2b:59:0e:87:
                    ab:ff:ae:0c:54:45:af:e6:fb:fb:12:a5:ac:72:90:
                    7b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:90:78:9D:64:82:40:DB:DB:BA:80:51:C2:D8:F5:BA:72:CF:E3:40
            X509v3 Authority Key Identifier:
                keyid:65:64:CD:58:3C:A3:ED:5E:E6:1D:07:9C:36:2D:4E:39:FF:EA:63:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWTNWDyj7V7mHQecNi1OOf_qY6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:83:35:18:43:42:99:a4:c6:c2:c4:48:d0:bd:40:5f:16:24:
         74:55:2f:c7:5c:bf:38:e1:86:a5:b6:62:64:73:03:ed:6c:25:
         9b:68:3f:14:82:6a:f5:4b:59:82:17:01:b0:bc:41:e0:97:8a:
         f8:25:a4:6a:42:45:bc:d5:11:71:a3:8d:37:d8:d4:45:d8:f3:
         10:4b:91:06:a9:25:4e:05:0c:cf:be:d8:87:8f:01:9b:a3:01:
         49:56:5c:8b:19:ee:5e:01:c3:6c:c1:7e:62:a6:8f:ca:5d:e4:
         0a:c9:1f:a3:fb:a4:d0:ae:0f:6b:5e:c5:7c:f5:db:20:98:13:
         b5:32:a6:c3:5a:d0:c1:02:ed:e6:a0:1d:17:79:6c:27:d5:d2:
         9a:50:5b:0e:97:a5:0e:ad:80:f0:bf:b4:08:06:3d:0e:dc:28:
         b4:45:b1:e9:3d:0f:87:e5:36:19:b2:bb:ac:7e:ce:d1:57:53:
         f6:b5:49:ef:10:e9:30:f3:bd:b7:27:05:d4:37:97:7f:3b:8e:
         65:16:1b:ed:1c:b8:9e:96:14:b2:f1:a6:84:98:a2:70:ef:26:
         b8:2f:8a:c0:b4:53:6d:81:60:6b:1a:e6:40:0e:b0:ad:13:6d:
         61:8f:56:ca:3f:c5:12:cf:c8:a7:94:e9:82:4d:5b:dc:e3:cf:
         59:19:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:11 2026 by rpki-client