Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          E2LJJwsmgSyK/I3Ykx1bO7BDcXJ/qyALFMs7OMkg1Uo=
Subject key identifier:   37:D1:98:46:9A:76:FB:6F:A6:D5:5A:4D:24:12:9B:53:11:F8:D9:C8
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       01A0D9837E94EE06DF38436CFEE7B0669A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          0ABE
Signing time:             Fri 25 Sep 2026 17:01:08 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:08 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:08 +0000
Files and hashes:         1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
                          2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
                          3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: a32Jiwx0rpOWgBnzNgCy95ZKPYbd7lOxTUeHk3hZjRE=)
                          4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
                          5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
                          6: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
                          7: GpC8kKK46MldSup1gVZrU7Mojzc.roa (hash: 6Lu5Oq012D9LKfKVQhXUujBxyGtMssHHbOSP5uQ8bhw=)
                          8: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
                          9: NGpHbF0qELe-yypRyZG8QYDDkQ8.roa (hash: STZ8+oAAgWpB89YtrloGqm8ffW2z9KJfLq0rIu0hcT0=)
                          10: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
                          11: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
                          12: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
                          13: eSvAFbt4I_ny3rlI1qsQVvR095k.roa (hash: ASQ/McMElv2jG1XUE+eDIGnRMZkt0bsbVgcxyB63q5k=)
                          14: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
                          15: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
                          16: qfDAGHDDZhbG_VUXj0goKE-xsTE.roa (hash: 00PBxTZATabx2MDk9b4T2x5pqNTy64WZzmYqaLHUFhk=)
                          17: qp8bK0_zELwwRnea3kYnPZuv5kU.roa (hash: KKFbcXLRieVJeInE5UEIj+fyTeLEa9fncQ29NqsfdFw=)
                          18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
                          19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:7e:94:ee:06:df:38:43:6c:fe:e7:b0:66:9a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Sep 25 17:01:08 2026 GMT
            Not After : Sep 26 17:01:08 2026 GMT
        Subject: CN=37d198469a76fb6fa6d55a4d24129b5311f8d9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:fc:dc:52:2a:d7:07:1b:5b:a6:86:d0:1c:
                    3d:51:57:70:02:1d:9d:89:0a:2c:a5:10:44:02:fb:
                    b5:28:27:40:c8:dd:db:7b:d6:58:5c:86:fe:e4:45:
                    9e:7f:35:18:cc:93:28:0c:06:c4:b1:78:d1:0a:2a:
                    c2:02:39:9c:7c:ff:0d:fd:7d:b9:a6:80:1e:05:b0:
                    3c:8e:12:67:ba:85:ea:34:fc:8f:6c:6c:c2:c7:c3:
                    7a:7c:41:9f:8b:c2:9a:0a:49:23:17:20:d5:82:30:
                    f7:40:88:02:d9:70:c0:67:e9:21:2c:29:23:3e:53:
                    4b:a7:43:2a:05:47:16:f2:70:da:95:cd:33:a9:58:
                    2b:c7:0f:b3:0d:25:9a:1c:f3:2a:1b:17:1b:20:4c:
                    1f:9a:25:4c:88:7b:df:bc:2a:10:2c:57:27:62:d4:
                    96:29:8d:73:4e:54:19:d8:6e:e7:5a:c2:16:ef:92:
                    85:52:df:1d:d3:98:18:0d:2c:0d:31:17:1d:1d:98:
                    69:dd:79:36:96:11:9b:10:83:e6:af:38:f2:44:ff:
                    92:71:d4:91:ce:94:3b:cf:95:ef:63:03:24:eb:58:
                    31:59:4b:79:ea:01:6e:bd:0b:2c:94:72:44:be:ca:
                    e2:c6:f0:0f:b4:51:09:f6:10:c7:4c:48:c6:bd:91:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D1:98:46:9A:76:FB:6F:A6:D5:5A:4D:24:12:9B:53:11:F8:D9:C8
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:eb:dd:62:40:36:0e:43:58:5f:2e:8a:d4:07:7a:40:0f:
         0a:2e:b1:80:c2:f5:7e:ca:90:09:5c:c0:47:a2:0b:4a:29:97:
         34:a8:2e:07:ca:94:d5:28:61:b0:93:88:11:41:ba:6e:00:2b:
         e7:02:a3:f4:33:93:61:b5:fa:0a:ff:8f:0c:cf:6f:90:61:a7:
         f6:06:b0:b4:42:ff:66:34:08:2c:91:2a:e0:d8:65:5a:1c:dd:
         ce:e7:01:83:b4:57:bc:ca:97:32:df:7a:75:a8:56:15:ed:ad:
         0a:f7:02:8a:ad:ff:6d:59:5e:23:23:df:58:eb:9d:e9:ea:46:
         24:4c:3b:1a:ec:e1:39:3e:32:5e:73:85:20:3e:85:bb:c1:8c:
         57:fa:6d:35:1e:1f:dd:41:5f:bb:cf:dc:d7:ea:33:8d:f3:25:
         72:d1:1b:63:90:6a:4a:d1:3c:19:13:52:9b:5c:98:f6:7f:05:
         1a:89:62:bc:42:e9:54:3c:fd:fe:22:e2:a7:fe:18:c2:b3:8f:
         75:4a:a6:b9:e6:03:73:74:63:8c:5e:6d:6a:63:4a:70:24:3f:
         b8:8c:65:6a:b8:2c:52:fc:11:e8:d3:7f:68:45:1e:89:b7:20:
         c7:e0:c8:2c:07:26:ff:55:34:b5:89:75:13:31:11:4d:68:a5:
         79:f7:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:35:07 2026 by rpki-client