Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          5PFUl5ociUMbMEJC9gGGkGwc2t/9VMadLamRQdlVe8Y=
Subject key identifier:   CC:61:5C:B1:AD:22:07:F2:41:80:7B:24:EF:85:AF:01:26:26:9A:88
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       01A06DCBB037F727B137C5A0B7B3117BA39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          0FD5
Signing time:             Fri 04 Sep 2026 19:01:00 +0000
Manifest this update:     Fri 04 Sep 2026 19:01:00 +0000
Manifest next update:     Sat 05 Sep 2026 19:01:00 +0000
Files and hashes:         1: 06k5D3ZBmEUBxIHBnu9co1Dnn_Q.roa (hash: 23+3ygARGKHv+NTUhNap77ASbjdhDMj7SUzDTySx8Mk=)
                          2: 2tOQcNqia9FY_EgjlzJvmLqEZvk.roa (hash: vCVW24gm0Il+L7GD5QhbLKqrNdBKimfTZajv5G9G6e0=)
                          3: AXgiXKGJ_GI28CfbDTbrhhKV71A.roa (hash: Nt0Y8chc5qRx7gXH46hyD0eSELR+V1CAAH5JbXj+q9k=)
                          4: N-M1_Gcs5nz1z-RZbD5F2Zwy0ik.roa (hash: Eebmmc2rhKXOb9UxpkjpYhhaoAIhvKS+3sRa+Rf9xxc=)
                          5: S7xMn2WZ6tpb12ZzK2bfHpgj_jQ.roa (hash: a6xOII9rFzlXhVP9cTBhXZN2z2bq0zGYQLqbGgEi7x8=)
                          6: UnAAO5LZUpGqAlAFH0cTVQdXrPQ.roa (hash: +0fvTCTz6t0CVUgBJlyimNyAqahKNROglBmjcNIj20s=)
                          7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: O40oFfX0j6naB+pgc58ExIrNJDsI6NoApAGdA9ODhwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:b0:37:f7:27:b1:37:c5:a0:b7:b3:11:7b:a3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Sep  4 19:01:00 2026 GMT
            Not After : Sep  5 19:01:00 2026 GMT
        Subject: CN=cc615cb1ad2207f241807b24ef85af0126269a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:10:f6:93:db:3b:4d:ee:99:87:01:8f:5d:
                    58:93:13:c3:0c:89:40:6a:8e:4c:f6:9e:4c:99:c5:
                    81:9f:16:e6:df:1d:df:58:3e:1c:51:30:af:f7:63:
                    77:8a:fd:fb:8c:92:48:0c:35:42:57:6c:94:0d:a5:
                    ad:69:29:cc:d4:20:1c:d1:05:08:5f:bf:32:70:9b:
                    bd:81:2f:c3:83:a2:f2:10:84:ed:0a:a9:0d:4d:16:
                    c0:6e:12:80:75:e7:5c:e2:b8:42:cd:de:8b:f5:ea:
                    a6:cb:2e:c6:0f:51:01:37:98:34:d9:4a:af:b7:04:
                    ed:55:04:86:ae:a5:5d:6c:41:51:92:71:ba:b7:dc:
                    b2:23:ad:af:9c:b9:4d:9a:c6:61:73:d8:7d:b0:ba:
                    de:fd:f5:31:5b:41:f6:3d:6a:b8:81:73:10:64:a2:
                    04:f8:a9:5b:6c:0a:18:02:18:7e:15:16:f9:33:98:
                    2e:ec:3b:33:01:27:54:27:31:78:2f:7c:0e:3f:6e:
                    b9:c1:e7:40:ea:d4:0e:eb:fe:a1:21:ab:72:c6:05:
                    61:8f:03:75:5d:0c:4b:77:39:e2:1c:dd:26:ce:f1:
                    71:97:e3:28:da:11:81:b5:07:32:82:0d:aa:85:ee:
                    6d:8f:b0:81:fe:e0:97:2e:ae:94:95:09:d7:85:bb:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:61:5C:B1:AD:22:07:F2:41:80:7B:24:EF:85:AF:01:26:26:9A:88
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:21:76:7d:4d:36:07:42:e0:a7:fc:ed:bc:a1:a8:a9:4b:21:
         18:66:cb:0e:41:5b:fd:66:91:5d:3d:75:31:6c:fa:4b:fc:08:
         92:3b:4a:f8:3c:fc:f1:ad:77:0c:a5:c8:14:a7:74:f1:25:6c:
         f5:e6:e4:c6:3c:1f:8c:d7:7f:c3:81:c6:eb:f6:f1:b9:0c:5e:
         03:d8:de:31:c9:fa:9c:b9:3a:a9:d1:47:08:56:e1:cc:ae:b2:
         b5:b4:ae:c5:cf:9c:1f:23:19:56:dd:bb:34:f0:ae:66:88:d6:
         cf:c0:14:ac:e1:1d:29:e0:07:18:47:db:45:02:93:1c:c8:00:
         d6:d9:3d:30:49:07:ec:f3:eb:16:e0:a0:ad:74:1f:0d:ce:74:
         7e:b1:55:8b:ae:f7:c6:24:fb:b2:f9:0b:9a:9b:6f:95:09:cf:
         ea:25:e0:d8:7e:c8:94:14:85:f2:e9:bd:72:d4:22:10:14:57:
         b3:0b:51:c3:70:2d:33:07:3f:6a:27:8f:8e:4c:b0:8c:9f:7e:
         cd:3b:06:c2:94:0c:1d:59:80:67:32:80:b2:2e:89:83:68:2b:
         79:57:39:ab:09:6b:b9:7c:9c:1b:25:ba:2a:db:07:03:81:9a:
         14:45:47:d6:e3:19:6a:8c:72:e9:d9:7e:98:1a:64:49:39:77:
         e9:6e:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:57:48 2026 by rpki-client