Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft
File:                     5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft (raw, json)
Hash identifier:          aCT0ZYSlLE+szgTLCfcZT6U7nZ8BeYDUBI3QJY+0Q1s=
Subject key identifier:   4C:F0:E8:AA:8C:6E:28:B0:EE:55:FC:2E:FA:A3:A3:38:FB:82:D3:FB
Authority key identifier: E5:93:05:64:7A:FF:EF:D7:2C:4D:7A:0E:13:52:2E:D9:7E:7F:78:F1
Certificate issuer:       /CN=e59305647affefd72c4d7a0e13522ed97e7f78f1
Certificate serial:       01A11B63B70BFE25C3431E0271055B530DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft
Manifest number:          010C
Signing time:             Thu 08 Oct 2026 12:01:21 +0000
Manifest this update:     Thu 08 Oct 2026 12:01:21 +0000
Manifest next update:     Fri 09 Oct 2026 12:01:21 +0000
Files and hashes:         1: 5ZMFZHr_79csTXoOE1Iu2X5_ePE.crl (hash: sExlCKAzUGAKCorRj+1l0jJBq6Ums7kBwYzAo/j6cPg=)
                          2: h8qBbhSusuq9upRRpmjdAL8J4Ng.roa (hash: LD2zVdPb/QGZotJ+OVpm+7m1ov66z3ukSOwQ1x7dwnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:63:b7:0b:fe:25:c3:43:1e:02:71:05:5b:53:0d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59305647affefd72c4d7a0e13522ed97e7f78f1
        Validity
            Not Before: Oct  8 12:01:21 2026 GMT
            Not After : Oct  9 12:01:21 2026 GMT
        Subject: CN=4cf0e8aa8c6e28b0ee55fc2efaa3a338fb82d3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:29:9e:a4:e9:d4:ca:0d:b1:08:23:0b:d0:
                    c6:95:82:08:88:3d:be:ec:ea:96:7f:18:f3:25:d7:
                    69:7b:b4:8e:6b:c8:00:0e:27:8f:2a:76:c4:58:d2:
                    72:86:01:ab:47:59:35:c8:a3:f8:0b:9c:e4:bd:6d:
                    e9:76:03:d1:46:e2:23:5a:50:4a:0d:a6:f3:d6:88:
                    b4:6d:28:31:c0:0b:2e:9a:9c:a3:62:9b:f1:3c:50:
                    98:d1:29:17:b5:e8:b3:ba:bd:89:e9:bf:40:8d:93:
                    04:9e:2d:08:f1:9d:a2:a6:ad:06:f9:e9:ef:db:68:
                    4b:39:7a:6a:d4:44:f8:5c:30:a0:79:6d:4b:07:81:
                    a7:15:f6:21:e3:bf:cf:80:62:dd:78:48:43:46:dc:
                    ec:6c:ab:e2:23:20:d4:b1:a8:25:91:16:50:78:9d:
                    6f:20:b2:92:f0:b0:ec:72:d8:ba:ef:5c:c2:80:03:
                    de:39:7e:56:f2:37:16:c3:7b:d8:2b:58:9a:59:fa:
                    b2:9d:29:fb:12:5d:90:43:aa:41:1a:c5:38:1d:4e:
                    54:09:fd:88:22:26:fc:c9:e0:42:87:2e:9d:7d:39:
                    39:5f:3d:5b:f9:43:db:4c:ce:31:0d:a4:d4:df:c5:
                    c5:e1:81:24:cb:72:ac:ab:87:00:bf:1a:f8:9d:5a:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F0:E8:AA:8C:6E:28:B0:EE:55:FC:2E:FA:A3:A3:38:FB:82:D3:FB
            X509v3 Authority Key Identifier:
                keyid:E5:93:05:64:7A:FF:EF:D7:2C:4D:7A:0E:13:52:2E:D9:7E:7F:78:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:08:2f:e4:7b:49:42:0f:fb:bd:31:47:38:8f:c3:c7:c7:57:
         6b:79:91:11:04:ee:b0:e6:12:78:87:c9:d3:03:a4:4f:21:13:
         9f:02:69:89:78:31:8f:b2:66:43:9f:b4:e4:41:2f:14:a0:b3:
         74:c8:cc:e6:1a:f3:4c:49:48:2b:e9:f3:a6:1f:97:80:4b:88:
         83:10:e5:69:84:f2:b8:8c:7b:71:bd:cb:f3:0e:33:09:50:bf:
         62:53:6a:60:35:35:43:40:38:82:d3:dc:74:fa:52:f6:0f:3a:
         7c:6d:d2:b0:63:50:0c:d8:c6:4a:f6:09:8b:a0:04:6a:c6:a0:
         3f:47:33:2f:50:91:fe:69:4e:2f:ac:55:7c:7f:95:10:48:b2:
         7f:f5:27:35:35:d0:fc:29:e7:c2:7e:00:8a:4f:a2:70:4d:af:
         d9:6c:10:da:42:b2:f1:8f:5b:72:c1:d1:a7:ef:32:c6:3a:a3:
         fa:c2:de:9e:be:9c:2f:9e:58:c6:28:2e:00:9a:8a:14:b7:bc:
         29:30:98:b7:5d:9c:b8:20:18:62:dd:fe:61:e2:f0:0b:db:87:
         4f:6d:2b:4c:01:46:e6:fc:c2:9d:f4:60:33:d0:8f:96:35:40:
         5c:df:2a:2a:d4:68:ae:d8:f9:4f:eb:f8:f6:48:10:ca:24:dc:
         54:83:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:51:25 2026 by rpki-client