Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          hp4aA6dl73ORRbFR+eDW90+cfmVrp2+pT/jh1Fy/WpU=
Subject key identifier:   73:17:12:7D:1D:2D:16:C3:A5:D9:E4:58:8D:FF:F9:AD:20:FE:8C:81
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       01A1859AA938CE1633284C3CE4D6D9DBE93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          0A4C
Signing time:             Thu 29 Oct 2026 03:01:07 +0000
Manifest this update:     Thu 29 Oct 2026 03:01:07 +0000
Manifest next update:     Fri 30 Oct 2026 03:01:07 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: tH7I77yXrgIvQN+eWpuywjF7Wt8bp6wVYyxwddgSjZA=)
                          2: io0GvTpo_VyMUyPyaPwaY5qhYQs.roa (hash: o71eBkqnQim23+RZGUgawhsMcbHLdUbBzsu6ep4SKt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:9a:a9:38:ce:16:33:28:4c:3c:e4:d6:d9:db:e9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Oct 29 03:01:07 2026 GMT
            Not After : Oct 30 03:01:07 2026 GMT
        Subject: CN=7317127d1d2d16c3a5d9e4588dfff9ad20fe8c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:43:27:36:77:12:3b:36:be:51:fc:50:9f:
                    0d:7e:0b:b6:26:26:9d:ca:9b:0d:d9:98:dc:06:05:
                    92:20:e6:d0:df:c2:b2:91:42:bd:38:f6:4e:a2:51:
                    6c:ac:01:9b:2c:94:e1:dc:e6:6c:4a:ec:07:b8:33:
                    60:d5:00:18:e5:82:75:5c:78:50:77:41:d9:37:af:
                    fb:6e:cb:64:bd:7b:7d:f5:18:95:a9:ba:1c:da:05:
                    3c:31:42:d2:b0:39:30:ac:43:0d:6d:e7:cf:5d:73:
                    9c:8f:0e:11:a0:73:fd:14:96:01:91:a4:a1:79:15:
                    53:9f:a2:35:0f:3a:46:6c:0e:b7:15:81:b4:10:42:
                    b7:30:7b:fb:ea:51:0d:7c:3a:94:19:d8:5f:01:4f:
                    d9:09:8c:92:b3:a2:6f:43:cf:c1:30:e8:30:2c:90:
                    20:53:1c:c3:3a:2a:ec:c6:53:40:58:c6:08:9e:7e:
                    a3:28:d3:28:21:01:7d:14:dd:e4:24:33:9b:51:38:
                    b3:74:ad:33:35:50:2d:00:3f:a5:84:1f:78:70:fb:
                    93:0c:41:46:43:02:5d:cc:05:64:8d:be:61:66:80:
                    eb:d2:51:d1:80:2a:13:c7:78:8c:51:98:e8:a9:9c:
                    cf:1c:f2:80:42:ac:1a:c2:67:72:bc:cf:85:12:46:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:17:12:7D:1D:2D:16:C3:A5:D9:E4:58:8D:FF:F9:AD:20:FE:8C:81
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fc:bd:29:4f:68:a9:80:d3:8f:93:75:8b:2e:26:5b:8c:cc:
         25:45:fb:b1:f5:be:30:79:3b:72:ea:3a:1d:c9:98:06:ca:1d:
         4f:0a:eb:15:94:67:13:81:ae:c7:b1:58:d3:d2:7d:be:d9:1d:
         0d:fc:07:6d:f1:7b:36:13:52:8c:b8:e7:81:58:fe:02:4d:ae:
         2a:6d:95:c3:e7:06:e3:49:ee:98:e6:9c:69:b6:2d:32:d2:07:
         d2:fc:b4:62:6a:9c:08:eb:c3:8c:0b:d3:65:3a:68:c2:6d:a9:
         92:d6:2d:e5:c5:45:70:07:23:6e:be:d8:cc:5b:fb:0d:50:28:
         39:80:dc:07:9f:0e:0f:fc:94:8a:d1:69:bb:ca:06:6c:a2:4d:
         5d:49:4e:bc:36:f0:f8:a2:c5:32:6e:b5:84:37:0c:da:fb:63:
         7a:1e:93:fa:ad:0f:30:eb:c4:00:69:91:0f:c2:43:07:72:d5:
         9d:b3:8d:59:2c:d7:d7:c8:a1:8d:fc:d0:ba:cf:fb:94:29:8d:
         96:ae:2b:fb:69:55:8e:6a:42:ce:15:2e:92:41:70:3c:08:76:
         10:08:2b:c8:8c:d9:57:a0:a2:da:49:0e:b4:f1:73:75:d8:b1:
         08:e2:31:e5:6e:19:8f:99:1b:01:ed:13:52:a6:16:7b:b3:37:
         df:35:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:46 2026 by rpki-client