Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File:                     ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier:          dhEsZ14rLXk65YWQDNJMp3Q3Hmrz9NW0h717qdEQHLc=
Subject key identifier:   F3:B5:1A:52:44:06:80:1F:3D:8F:84:56:80:29:3E:54:D0:4F:5D:38
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer:       /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial:       01A0F3B1665B7E8A7FF55BA9C7EA2D3178AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number:          1A10
Signing time:             Wed 30 Sep 2026 19:01:24 +0000
Manifest this update:     Wed 30 Sep 2026 19:01:24 +0000
Manifest next update:     Thu 01 Oct 2026 19:01:24 +0000
Files and hashes:         1: So8muBWRfIb_bocA-uBwGx60z8Q.roa (hash: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc=)
                          2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: Q0WV2OIS6+Tussz0EZCzppCGNeHRQ3ciqsuPhwHp1i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f3:b1:66:5b:7e:8a:7f:f5:5b:a9:c7:ea:2d:31:78:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
        Validity
            Not Before: Sep 30 19:01:24 2026 GMT
            Not After : Oct  1 19:01:24 2026 GMT
        Subject: CN=f3b51a524406801f3d8f845680293e54d04f5d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:74:38:80:28:47:47:69:49:ff:3f:1e:1c:
                    d3:80:c7:2c:94:58:de:57:d9:98:10:7f:ed:f2:bf:
                    7d:c7:8b:8d:bf:66:55:41:81:58:2f:8a:99:50:3e:
                    72:6d:e3:a1:54:1b:3c:53:ca:f2:24:4c:1f:70:04:
                    7a:02:56:e2:3e:67:87:9f:31:78:08:13:30:eb:0a:
                    42:4b:02:84:f2:fe:4c:c7:d3:8f:dd:22:c0:39:30:
                    ca:30:e3:bf:b6:89:79:ff:6b:ac:e2:0d:69:09:18:
                    b9:ab:52:b4:a5:86:82:3e:b8:16:dc:98:98:48:bc:
                    46:44:47:03:08:26:e5:f5:10:14:96:b9:4c:8c:03:
                    c5:2a:06:bd:fc:43:44:90:f3:8e:13:ca:aa:cc:0c:
                    de:5c:ae:46:05:fb:bc:37:53:c1:29:71:af:9a:b7:
                    e6:dd:0f:07:01:25:a5:9e:48:77:ce:5d:3c:d2:eb:
                    ca:9b:b2:6e:16:8d:da:e7:a5:93:8f:b9:e5:47:27:
                    2d:6a:87:7d:bb:ed:44:63:ad:4c:36:6b:53:cf:64:
                    0c:91:37:a1:79:9d:55:e2:0e:7e:c9:93:04:6e:c0:
                    1b:3b:ca:60:b9:e5:f0:d3:c6:76:0c:da:af:d7:24:
                    41:9b:83:7f:47:24:08:0e:d6:1f:28:a7:99:6b:64:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:1A:52:44:06:80:1F:3D:8F:84:56:80:29:3E:54:D0:4F:5D:38
            X509v3 Authority Key Identifier:
                keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:86:47:75:f5:11:38:32:0a:d0:73:d1:8b:9b:b1:ca:62:
         a3:41:ee:2b:ba:4a:c1:9d:17:7f:dd:b5:63:58:2a:55:d7:87:
         06:38:de:94:92:d1:d3:b0:78:2e:5e:52:6e:2c:27:02:91:f2:
         cd:2f:4e:ad:16:58:32:2a:9d:87:34:c1:be:8e:d0:8e:c8:8b:
         d2:93:fc:93:62:9a:62:1d:5e:06:13:c7:51:58:a4:6b:70:c0:
         c3:bc:43:75:27:13:4b:a4:22:47:92:01:3f:0a:55:47:16:f7:
         8d:ea:ae:49:6f:22:a8:36:8f:02:1c:d6:f1:c7:3d:ab:69:d1:
         f6:c5:67:a6:31:db:7d:9b:21:c5:7f:79:b9:0b:8e:92:a9:1e:
         4e:e7:f4:72:f1:49:48:84:9d:19:f3:18:a0:08:ac:42:a1:62:
         fa:08:1d:04:70:06:f7:00:60:49:ac:42:b0:0b:84:d3:72:a3:
         fa:38:a8:62:6e:f2:43:cf:1c:f6:32:8b:71:65:c2:07:89:8d:
         6d:a7:ef:10:70:17:57:fc:86:26:67:c0:9e:76:58:ab:9a:6a:
         83:1f:1a:97:4d:70:bc:40:20:27:4a:95:27:a1:d1:60:04:a4:
         2e:88:1c:06:09:cc:31:ef:50:c8:2f:93:fe:dd:d5:f0:8b:2b:
         90:ea:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:41:59 2026 by rpki-client