Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File:                     ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier:          uDhXP+jI3B+BqKm/ZJJsiUrE4EXoGrwItWTvIXXbfr0=
Subject key identifier:   EC:EC:11:5D:DA:DF:97:56:5B:76:39:22:E2:55:23:2A:99:B7:C6:EB
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer:       /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial:       01A17883985EB783181FC32817120977A327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number:          1ACE
Signing time:             Mon 26 Oct 2026 14:00:52 +0000
Manifest this update:     Mon 26 Oct 2026 14:00:52 +0000
Manifest next update:     Tue 27 Oct 2026 14:00:52 +0000
Files and hashes:         1: 1-RWTcjebB00EEPXrCQe14UhdpaU.roa (hash: xcBiWpi6+uT5sbN5EOtc0NeFtZPbsGISgJTOn56/et0=)
                          2: Ke8kTxOnrDSRnbMan8QsXJ_XEkU.roa (hash: CPpeXl3+kqfUGFSBaMiqr+IqI4glRjRTWo/lOcIIFFo=)
                          3: XFkubg9wfX84ABip8hpjo9juzcU.roa (hash: RFSGBBaYL7X28QtoqEmxImOKkYGxx+hir2PVsN+RGjY=)
                          4: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: jNUw7hT1tGs7Xc0iYd0rQfshzju+dSJ6ZlMEAd/vCQU=)
                          5: aoxQba3i7QUm65BfMLv96JuOb74.roa (hash: QIB1S/gkkRQGrocEZtGs9uUeW1n+BujIUCxe8lcxHAw=)
                          6: j_e68P-AYa2rmUhuYOkm9hzEeD4.roa (hash: fu5OUQBQJIV8KAmP0Ju9hs+ANS87d5jd3QwiV+u9mQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:83:98:5e:b7:83:18:1f:c3:28:17:12:09:77:a3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
        Validity
            Not Before: Oct 26 14:00:52 2026 GMT
            Not After : Oct 27 14:00:52 2026 GMT
        Subject: CN=ecec115ddadf97565b763922e255232a99b7c6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:68:f2:b2:b1:a1:c3:a0:33:5d:12:9e:d7:
                    f9:1c:8d:db:ce:f2:75:a6:e9:c0:a5:9b:e3:e9:2d:
                    e1:56:21:36:f6:6b:3b:0c:87:9c:19:94:32:67:66:
                    d9:cf:60:9f:2f:32:a6:01:ba:b1:b0:80:82:b0:c5:
                    3b:48:8e:98:fc:e2:74:8d:bd:b0:ec:43:8b:42:f6:
                    14:e0:38:30:e5:a5:70:66:33:e6:f6:20:4d:1c:db:
                    7b:f5:13:33:38:22:85:03:c2:2f:b0:b4:f3:1d:57:
                    00:00:d2:67:4f:08:03:11:c8:66:70:c5:69:23:bc:
                    40:48:ce:56:b8:72:09:56:04:90:14:9a:f2:53:2a:
                    b9:9e:18:72:1b:f2:9a:a2:db:31:ac:90:e0:55:95:
                    46:a1:e4:e8:d8:d9:95:e0:7c:78:64:79:e9:b0:4a:
                    b1:8b:bb:cf:7b:60:16:a8:c4:de:b0:14:c6:e1:8a:
                    14:e6:87:6b:a3:52:20:24:00:90:b7:18:f9:c0:9c:
                    58:65:53:de:c9:1c:6b:a2:ab:7d:88:af:57:fb:a1:
                    ae:43:31:3f:e9:ee:9b:e1:62:ae:a8:2c:1f:bc:ab:
                    b1:e0:de:8e:d8:71:e2:68:10:82:b3:a3:bf:4b:dc:
                    16:55:b7:80:ea:2a:d8:9c:85:d3:82:dd:ab:53:db:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EC:11:5D:DA:DF:97:56:5B:76:39:22:E2:55:23:2A:99:B7:C6:EB
            X509v3 Authority Key Identifier:
                keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:64:96:ff:19:de:f7:87:12:a2:4e:b4:b1:f8:0c:d8:10:6c:
         85:5e:f3:5a:34:12:b1:45:c4:c4:99:0f:11:bf:a8:ac:27:4c:
         62:7a:32:af:42:d8:1a:49:1e:b3:37:9c:8a:9e:c8:97:ad:c9:
         69:4d:bd:66:09:4c:f5:e6:26:29:a0:b5:23:6b:f2:f8:40:a1:
         47:09:2a:ea:77:ee:c7:d9:47:fe:4a:d2:4c:db:e7:45:8e:11:
         cc:9a:2e:2a:06:f7:a7:16:32:f2:af:fc:fa:79:a9:cb:78:0c:
         ae:60:8e:54:97:81:0a:e3:01:22:0a:f5:ac:d3:2f:a6:0f:bf:
         86:b5:5d:ab:ba:d5:fe:9a:6e:a6:e0:6c:d7:90:85:3f:3a:73:
         26:b3:63:2a:38:11:d5:dc:76:b6:c2:c1:c8:64:3e:f8:a3:53:
         fb:22:f5:1d:b9:fc:71:06:f1:28:ac:b2:2e:42:d4:92:1b:07:
         1d:1d:73:c7:44:06:bc:dd:f0:5e:cf:e2:6e:d6:ef:8c:e9:56:
         0d:d5:e5:eb:59:09:0d:eb:7e:7a:4a:98:ac:5e:0d:c4:9d:37:
         0a:da:48:f2:78:45:3a:e2:94:f9:2e:36:3c:06:56:5e:41:6a:
         3b:80:46:ee:04:64:72:e9:62:64:cd:1b:8b:a0:f4:e3:93:6b:
         9a:e4:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:15:45 2026 by rpki-client