Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File:                     fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier:          oh60YH7t5WI/EWMkkoJL8kh+CAiFJAVGPMMwV7jNJ+w=
Subject key identifier:   5D:C6:8F:EB:A4:0F:A2:BD:F2:CF:C7:D7:AF:DE:AA:C8:D1:0F:78:0C
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer:       /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial:       01A1423A911D3CD0D107F0CFC129FB98ADE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number:          09F0
Signing time:             Fri 16 Oct 2026 01:01:36 +0000
Manifest this update:     Fri 16 Oct 2026 01:01:36 +0000
Manifest next update:     Sat 17 Oct 2026 01:01:36 +0000
Files and hashes:         1: Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa (hash: clgOLfDosWYDvBNQpvRzT03uYQs9EulKVPuKsnJ+7Yg=)
                          2: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: 3kdhpDKYiH94MTo1vKL7B9ObkaDbhmXgkVRR4/iN1Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 23:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:3a:91:1d:3c:d0:d1:07:f0:cf:c1:29:fb:98:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
        Validity
            Not Before: Oct 16 01:01:36 2026 GMT
            Not After : Oct 17 01:01:36 2026 GMT
        Subject: CN=5dc68feba40fa2bdf2cfc7d7afdeaac8d10f780c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:e3:25:bd:09:c8:d5:18:a6:1b:b9:0e:b0:
                    c6:d8:53:a0:3b:13:8f:a0:41:a6:aa:6d:2a:06:fc:
                    32:8f:e3:89:95:96:11:49:ca:4d:67:7f:42:b1:a3:
                    71:c9:6d:6c:46:8a:94:23:05:cf:a0:5b:3f:9f:3c:
                    9e:d6:e1:0d:ab:62:f7:1c:da:04:f5:4e:7c:71:70:
                    ef:00:32:a1:e7:0e:4d:b2:17:58:b6:85:3e:ab:d8:
                    6c:a0:f7:40:73:01:8a:46:43:f9:09:07:df:56:62:
                    5f:8d:6d:ff:db:fc:8e:ee:90:9a:27:42:cc:6e:6a:
                    cc:53:5d:b5:2f:9d:68:5e:55:2e:5c:12:77:08:e1:
                    b0:db:c6:38:6c:26:d8:ad:8c:96:2f:5d:6e:21:55:
                    64:94:0f:9f:1f:b0:a8:f4:70:30:f8:be:22:d3:8e:
                    0e:b8:22:fb:0d:d5:38:51:76:fb:02:f4:23:d5:49:
                    61:fa:01:be:c9:a4:85:38:e2:16:8c:3a:ee:bc:9d:
                    4d:a5:fb:99:20:dc:7e:3c:ad:14:4a:f3:27:fb:85:
                    a9:e4:fd:72:68:22:a7:3f:9c:7d:cb:25:df:f0:2d:
                    14:27:83:e5:30:54:fe:8e:d8:da:f1:d7:39:34:05:
                    7c:1e:af:82:6a:60:d5:26:1a:ba:ca:50:0f:3f:db:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C6:8F:EB:A4:0F:A2:BD:F2:CF:C7:D7:AF:DE:AA:C8:D1:0F:78:0C
            X509v3 Authority Key Identifier:
                keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:09:e1:fb:6a:9f:16:e4:4e:2a:f3:37:85:0f:72:90:4e:b1:
         32:74:05:5b:2a:60:6f:98:04:31:58:a4:73:f5:03:d5:8b:25:
         28:e1:3a:64:f9:05:42:f9:4a:67:59:24:18:53:db:10:63:00:
         bd:29:e6:0e:47:c5:1b:ba:5e:69:6c:be:2b:df:20:cc:4a:42:
         f7:88:4b:15:48:65:ea:90:61:52:1f:95:34:32:6b:32:7d:0a:
         a3:b7:e8:b9:d6:7e:e7:aa:7d:41:75:a8:c1:35:42:48:49:11:
         79:57:b8:91:27:ab:c1:1e:22:15:fe:df:b5:99:4b:7a:6a:85:
         21:ad:69:fc:40:6e:7c:69:44:57:af:46:74:4a:bd:33:61:a7:
         49:b4:bc:dc:61:a0:dc:46:dd:e1:57:d1:75:6b:a1:95:59:9e:
         40:36:d9:65:8b:9a:ac:a8:fb:e7:b9:e1:b9:5b:81:58:00:63:
         f3:41:94:96:05:d8:02:51:db:d7:b4:e3:fb:a8:bb:27:5a:36:
         b1:db:64:a8:48:8c:22:18:5b:74:a4:a7:db:d0:58:61:34:03:
         39:af:4b:5d:93:84:ea:d4:b5:5d:80:44:04:1d:cd:51:66:de:
         ec:5b:4f:1c:0f:59:5b:d3:af:0e:f4:77:99:78:50:bc:3b:72:
         49:ee:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 05:23:03 2026 by rpki-client