Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          dK8gCB1fxXjZF5pYHgChLaJL4+2JR5CHHRh8eRmr86Q=
Subject key identifier:   E3:F0:8A:67:69:2C:E5:FC:C5:68:33:1C:82:80:F1:23:FB:A2:65:51
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       01A0D2DE29AD004E82DDE611779D57497CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          158C
Signing time:             Thu 24 Sep 2026 10:02:50 +0000
Manifest this update:     Thu 24 Sep 2026 10:02:50 +0000
Manifest next update:     Fri 25 Sep 2026 10:02:50 +0000
Files and hashes:         1: QiwWH1RtFqoFlh8ODhTHxGES8wo.roa (hash: HZ1hGzr6d7Gz+vsrN9BoASQoL9FuMmrP2dJvc65ilDk=)
                          2: QqUbGPbWnb6gjhCMOqT2grVMHLc.roa (hash: Nr3sSa3uJP0epmv5crHEIzFx3Y5ip1SyFjThlCVINnw=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: 3a1GXfoj9anfuIj7pl5aqkRcBsgxkrUv6+DOTM62V/o=)
                          4: yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa (hash: DACPJnZscxbHEOmbZYNR1bRZKHxl5ev0RDcNgFEGAgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:29:ad:00:4e:82:dd:e6:11:77:9d:57:49:7c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Sep 24 10:02:50 2026 GMT
            Not After : Sep 25 10:02:50 2026 GMT
        Subject: CN=e3f08a67692ce5fcc568331c8280f123fba26551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:24:64:0c:8f:37:3b:1a:c5:dd:16:d8:01:
                    18:a9:84:1a:6b:46:44:a6:46:d3:34:56:c9:8f:2b:
                    dc:6a:d6:7e:c4:69:6b:d7:83:3b:0d:8a:2b:d8:e3:
                    c1:8f:1f:8c:5c:a6:b8:ca:d5:7c:a2:b7:00:29:96:
                    99:54:4e:ae:5a:2d:7a:3d:5f:c0:eb:51:04:b1:c0:
                    fa:30:ec:0f:15:7b:08:7f:44:8b:1a:a0:a7:ed:89:
                    a3:87:14:e6:fb:4a:ce:f0:8a:de:a1:b6:27:3f:47:
                    04:c1:6a:36:0d:96:4d:83:f1:c6:37:c9:1b:af:89:
                    c7:e1:33:08:70:7a:54:ac:15:85:19:f1:50:9e:3b:
                    bf:a2:b0:9a:9d:4a:ef:46:29:21:ac:63:66:af:5a:
                    66:03:80:f1:89:ab:20:1f:68:d4:86:39:50:6b:d5:
                    08:c7:a1:ad:98:96:f8:3e:8c:ae:66:9a:55:ca:2d:
                    cc:41:83:56:7e:7d:f1:db:d1:a4:24:fc:99:83:a1:
                    af:dc:a8:0c:fb:d0:f4:b4:e9:4f:64:c1:4e:f6:a4:
                    b8:a3:c6:55:f8:b2:29:bf:74:d7:c8:ed:7e:65:80:
                    26:fc:dc:c8:2d:1c:2d:47:b1:79:47:d5:74:43:74:
                    a6:34:3c:ea:6f:db:05:aa:02:18:a1:43:80:83:82:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F0:8A:67:69:2C:E5:FC:C5:68:33:1C:82:80:F1:23:FB:A2:65:51
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:21:27:bd:80:94:00:51:de:96:3d:43:d2:20:64:cc:8f:43:
         e1:fc:fd:50:50:57:47:e0:00:66:60:d9:d0:36:31:15:9f:f8:
         ac:ea:8c:82:01:d4:6f:e4:13:13:ee:26:5f:e2:f8:49:e4:1c:
         6f:e6:4c:cd:0f:29:f6:3f:52:71:bc:dd:30:d1:4e:a2:9b:74:
         7a:24:ce:20:96:bd:c6:64:f4:10:4d:34:f8:f0:79:61:c6:29:
         b6:2b:40:ed:e5:9d:46:8e:a3:37:2d:21:04:e1:94:12:7f:07:
         4d:56:72:ab:98:fe:49:87:e0:c6:4b:fa:81:50:a9:82:4e:97:
         1c:98:41:d8:d8:7d:68:13:e9:a8:ba:c1:d3:74:ae:d1:aa:b9:
         ea:2e:99:25:5f:d1:b9:60:cf:94:63:16:3c:ad:f1:b7:73:e2:
         96:b7:1a:25:e2:1c:05:9b:7f:63:a0:9e:8c:51:96:22:83:7c:
         9b:ea:55:d3:ce:9b:dd:e6:fe:50:09:30:8f:01:a5:89:b8:6f:
         ea:e9:a9:c2:7f:6a:a3:0d:31:2d:e4:9d:f5:39:28:59:c5:98:
         cc:50:a9:bf:3d:48:c6:50:8a:06:67:a6:8c:0e:da:4f:8d:b6:
         ae:df:c5:b2:cf:db:b7:c0:38:74:a0:a2:75:2c:47:af:68:19:
         ba:7e:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:41:46 2026 by rpki-client