Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
File:                     zWJru3tp7sn2eQsDcFVFuJL6Loo.mft (raw, json)
Hash identifier:          rV66n0RQu4koXm0nHjpEqsBVadIjE3299QQKYfC4vSo=
Subject key identifier:   0A:63:DE:16:FC:AC:AE:C1:37:56:59:CB:80:BF:89:92:9F:D6:AE:89
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Certificate issuer:       /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial:       01A1DBA6A3A08F4EF3FCD71EF7551808D375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
Manifest number:          1AF8
Signing time:             Sat 14 Nov 2026 20:01:33 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:33 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:33 +0000
Files and hashes:         1: 0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa (hash: 2PcsF5G0Mq3lPMeGvxmpYXNXSdp0a4eMQFAaAmAvtYY=)
                          2: B_S5icIbEZu3NRi7pO3M0FoxLBY.roa (hash: NpXzXVIDrJc5PoL2K8nkZP6JJq6luR8bBGM3/nlrQ3I=)
                          3: _w8qU7QLDWariPOfRN9OMYuyNWM.roa (hash: 7rGZ50HKoADJZt0gKXjNdUDKxe/HyV19YQRWiM3XHAo=)
                          4: awc83yGNtXzyjqzRMTElkzhM-Io.roa (hash: PQ/L7qMRaTtcJZl8Z1BC36Zg7hT94D0vhYdETaZzx5c=)
                          5: tnPaXTyswkX357A39kelPR3li7M.roa (hash: 1eq/iOnEjhYgGBLROWfpw18V6R7LJTeC8nJiWr/RJf4=)
                          6: zWJru3tp7sn2eQsDcFVFuJL6Loo.crl (hash: 3iPwuFFnOFXQc6AhmsqhPAjYigWRzzaUIc80iCAhJ7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:a3:a0:8f:4e:f3:fc:d7:1e:f7:55:18:08:d3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
        Validity
            Not Before: Nov 14 20:01:33 2026 GMT
            Not After : Nov 15 20:01:33 2026 GMT
        Subject: CN=0a63de16fcacaec1375659cb80bf89929fd6ae89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:39:4e:f8:6a:97:d2:cc:f7:94:1b:5e:3d:
                    fa:b0:3f:5f:16:31:aa:0c:7c:8e:92:81:ea:31:0e:
                    cc:8b:46:65:6b:ea:ea:c3:00:62:3e:ab:92:a7:d0:
                    c1:59:5a:85:79:92:22:af:b7:cf:60:8d:ff:b0:0a:
                    e8:79:54:ef:a6:88:cf:22:28:7a:6a:c4:20:8a:6b:
                    01:47:d8:75:fc:0c:47:db:e7:0e:44:70:85:b2:d5:
                    c8:5e:d6:b1:a3:af:b4:9d:55:7c:58:4e:42:c0:86:
                    e9:08:97:ed:49:5c:64:95:2c:fe:e0:a8:d1:4a:35:
                    04:12:14:01:76:4b:af:de:06:90:bb:a1:19:93:3b:
                    78:35:f6:dc:ba:b3:5b:b4:ff:ad:97:0a:94:44:a2:
                    9e:b3:23:35:a4:e7:3d:3c:8a:49:05:04:92:70:f7:
                    d4:21:fb:47:10:cc:50:5a:5a:36:c6:83:ce:ca:1a:
                    d9:d3:2a:89:b9:a1:0d:22:ba:99:d6:f9:52:3c:c8:
                    5f:4f:d9:5a:31:ea:c8:20:6d:13:ea:dd:b0:fb:ad:
                    9a:ac:b6:e1:f8:3c:0f:65:47:32:7a:29:e9:65:ab:
                    d3:84:8e:e3:9b:c7:17:4d:7e:b4:e3:6a:35:4b:ee:
                    b5:2f:4e:c4:20:5d:ac:bb:55:bc:f4:7a:c2:b5:eb:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:63:DE:16:FC:AC:AE:C1:37:56:59:CB:80:BF:89:92:9F:D6:AE:89
            X509v3 Authority Key Identifier:
                keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:bd:f9:36:02:9f:6f:2f:44:b8:54:b8:be:b2:33:37:8e:
         a9:90:dc:84:40:ca:31:81:76:ff:df:dc:57:7f:8f:c5:e1:d0:
         f2:a7:51:9e:68:30:a8:bb:15:f2:0f:57:89:89:fe:46:25:55:
         3b:86:4f:2d:d9:4f:b2:04:21:41:06:2b:ee:ca:97:90:22:02:
         a5:4e:0a:7f:13:b4:25:72:c7:f8:07:5c:8e:ed:16:d0:57:a9:
         b2:ad:af:69:ad:0d:2a:09:f3:64:3d:c7:3e:e6:48:c9:01:be:
         fe:32:ba:9d:c4:12:af:27:60:57:ef:1d:07:f6:01:d3:de:e3:
         50:a0:a1:63:b4:d3:71:ea:04:3c:b5:9b:37:33:4e:d6:d1:f9:
         7e:51:5b:e9:cf:8e:e7:4c:e4:b5:28:4a:62:1c:41:50:5e:13:
         d3:e5:ab:b9:27:57:e5:d0:06:fe:10:cf:12:6e:35:2c:71:a6:
         bb:51:a1:39:72:c3:f3:d8:ae:7a:3a:99:91:ab:c4:23:0b:4a:
         ce:35:55:e1:35:e1:06:e5:fc:8c:81:72:27:54:35:b1:16:64:
         ae:b4:67:48:6b:a6:78:35:db:69:77:81:b1:60:e0:36:df:01:
         3d:85:06:71:e8:a0:49:d3:35:d4:1d:8e:67:bc:c7:42:2c:9e:
         cf:79:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:44:35 2026 by rpki-client