Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File:                     z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier:          NZJCGZo9ORBJQMoDo88hzN7aCPZFpDNC5nSsnPpquOM=
Subject key identifier:   69:EA:BC:A8:BD:78:13:E9:5C:15:64:50:4E:74:DA:35:18:0F:E1:40
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer:       /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial:       01A12C8DBB8315BF83E0E7E2DFDE60265CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number:          0867
Signing time:             Sun 11 Oct 2026 20:00:48 +0000
Manifest this update:     Sun 11 Oct 2026 20:00:48 +0000
Manifest next update:     Mon 12 Oct 2026 20:00:48 +0000
Files and hashes:         1: 0S-ozMaRAyvvdMvSJW3g5Kk4iVo.roa (hash: OQHH+g7JmAcn53oHjDt/GSfgh8qJfjfcS42p09F0WtU=)
                          2: DfeDYFEhcGiOVGd2HiXYX5Rn1XA.roa (hash: QNfPUzw4gyDIHgNy4UB5ZpKhS1ImNQM4IAovYnRUp5o=)
                          3: NQIBAohX75IaNOk07YtqfQi_l2Q.roa (hash: FDra3udXguGsI5fh/D9xyGvlXRNRLrQbxmcagtWhiYA=)
                          4: OX-WFn34m-JD1PE0u9eYZk4qKCk.roa (hash: I9b174DioYRAA7Dm+6Il6PksgXPNmVtiUo8IS77/Rvc=)
                          5: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (hash: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4=)
                          6: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: usIjKcETmCr01WduNlT/zGG7BP38mb0pQPS8ZeqHoqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:8d:bb:83:15:bf:83:e0:e7:e2:df:de:60:26:5c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
        Validity
            Not Before: Oct 11 20:00:48 2026 GMT
            Not After : Oct 12 20:00:48 2026 GMT
        Subject: CN=69eabca8bd7813e95c1564504e74da35180fe140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:35:f2:b1:ae:df:c2:07:02:8b:6e:11:d7:
                    d9:3f:4e:fc:a1:3d:f4:15:07:17:c1:6c:75:e0:ca:
                    98:63:81:0f:2c:a1:90:81:f4:c1:21:be:29:bf:2d:
                    c7:76:b1:b6:70:b9:5a:9a:56:7c:b4:d8:45:b1:72:
                    ef:34:76:74:20:53:21:ac:b2:ef:1e:30:82:c6:2a:
                    fc:0d:a8:4f:19:12:e5:66:d7:5f:77:c1:9f:12:38:
                    50:16:87:2d:f4:7a:b0:7b:ab:89:3a:c4:e5:63:da:
                    9e:3e:fc:0b:e5:ab:b5:54:e4:68:7d:0a:dc:b5:e3:
                    47:2c:7f:2c:07:ac:3b:72:aa:5d:16:f9:7e:39:43:
                    a3:28:db:9d:80:c8:e8:90:cc:71:9c:a4:fa:7c:dd:
                    72:01:96:7c:58:09:f3:7b:88:e2:a8:71:ea:cf:1c:
                    cb:62:0b:d8:1e:cb:39:1f:4a:7b:ec:fb:a4:74:a5:
                    06:de:ee:0a:92:e6:37:2d:bf:7e:7d:4d:1d:75:15:
                    b2:d6:37:5b:69:c7:64:9a:e2:06:b6:e7:3c:42:41:
                    8b:94:f1:8c:42:a8:43:e0:ce:fd:2d:96:07:98:90:
                    88:5f:67:9e:5f:c4:6c:7c:36:8e:9b:53:a0:48:93:
                    24:d6:c1:38:00:f4:1d:83:ca:47:16:52:5e:85:42:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EA:BC:A8:BD:78:13:E9:5C:15:64:50:4E:74:DA:35:18:0F:E1:40
            X509v3 Authority Key Identifier:
                keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:49:50:a9:6a:87:d6:45:b4:14:37:c7:79:ba:ce:72:dd:
         4a:0c:85:bf:f1:b8:d6:85:cd:86:c4:56:ed:1e:09:94:9d:5f:
         20:e7:b5:17:9b:bd:a8:ff:69:3d:d6:ec:be:29:42:5f:21:a2:
         20:3a:37:c9:d3:4b:d6:b5:a3:f8:cb:ba:26:bc:3d:28:47:58:
         39:a2:c0:72:82:23:9d:4a:9a:c9:54:48:88:0f:ea:99:1b:10:
         56:0e:cf:4e:bb:5f:cb:91:5e:b2:b2:b8:f6:78:59:c8:c9:5e:
         b6:40:9d:58:34:a6:56:21:fa:7c:1b:2a:bc:07:cb:54:d5:2f:
         55:c0:84:e3:1a:23:ce:83:df:3a:cd:a1:d5:c4:18:b4:b0:e7:
         1a:b9:da:a1:b0:01:1f:cc:04:ad:a4:d6:f1:79:c0:9f:0b:a7:
         94:f0:b1:20:bd:fe:ba:d1:ed:90:7d:41:90:5e:97:50:7e:ed:
         c5:06:8c:ee:f3:a8:87:0e:81:2f:6f:a0:cf:1f:37:2a:81:c0:
         89:e2:ac:6b:ad:e6:7a:5a:6c:49:f2:68:db:a3:f8:ce:0f:4f:
         c9:52:da:69:3c:3a:d0:73:d5:b3:43:b2:b6:bd:69:bb:62:76:
         e7:ee:2c:07:ed:24:8d:7c:c2:e1:b2:59:40:97:10:c6:08:77:
         eb:3f:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:58:25 2026 by rpki-client