Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File:                     ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier:          irAy7Y1m+oE5dGAy9F2RRVEqnVFrLJnmi7/lFHb0NZ4=
Subject key identifier:   61:B3:9D:EC:C7:36:D7:23:44:38:08:28:83:3D:D9:63:B1:0C:93:66
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer:       /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial:       01A102ED844329A7024EBF96A574B2C09F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number:          0F4E
Signing time:             Sat 03 Oct 2026 18:01:22 +0000
Manifest this update:     Sat 03 Oct 2026 18:01:22 +0000
Manifest next update:     Sun 04 Oct 2026 18:01:22 +0000
Files and hashes:         1: GIwn7Ck5x0M3g3Z3wUrAZY6t5Mk.roa (hash: 0w+iLSqmbR4WPnPbrbH22kzCE+MBLkbht/g2Ar8v4bo=)
                          2: ReFkwY7yC_OqL_QtCLEERfe4ZYU.roa (hash: Uu5Ab9ANIRps6JfvpwU04cQY7DufU/VQnwBZqhMdO3Q=)
                          3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: 5UKuNKJAYvjzpt6DT2+0zTP12RLpIJ8uTQPW4uiOSwU=)
                          4: u3TdxIiSdHZuruqxqQiEZo4fgyg.roa (hash: Gxz/5+LVbuXKE6SJIXyAeZ3z6fP7tMc2crLU4gzrMmw=)
                          5: za0KCchEnO8zwmW-feM7Z3UncjE.roa (hash: cvLyxJf9J4OkfgwQV4Z4jYKejpKF+XIzROZmSetrmI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 18:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:ed:84:43:29:a7:02:4e:bf:96:a5:74:b2:c0:9f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
        Validity
            Not Before: Oct  3 18:01:22 2026 GMT
            Not After : Oct  4 18:01:22 2026 GMT
        Subject: CN=61b39decc736d72344380828833dd963b10c9366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:47:f0:91:2e:da:6f:4c:4d:84:98:6a:5d:
                    01:57:56:76:45:fe:20:ea:7a:31:e5:bb:b3:30:13:
                    55:a7:75:71:3b:8c:88:44:b6:fa:f2:56:cd:e4:92:
                    9b:39:55:41:a1:80:39:34:21:6f:c8:d4:94:0d:15:
                    08:e3:16:a1:3c:91:be:77:8a:d7:6e:0f:b6:bc:1e:
                    f8:03:00:c7:54:3b:72:16:14:fe:25:0f:1a:d6:33:
                    35:13:e0:2a:03:25:4c:c7:dd:e4:f2:64:9f:8e:68:
                    83:6c:b2:90:df:a7:b5:c2:85:ce:d6:95:c1:f7:7b:
                    26:db:7a:46:8f:44:24:6c:12:e0:b9:6f:98:6c:d9:
                    9d:4a:ef:42:46:01:99:d9:2d:52:bb:f6:39:a5:93:
                    06:7d:2d:80:e0:90:bd:96:2c:6e:54:a1:ba:b3:6a:
                    85:08:85:14:64:bc:73:2f:df:94:44:aa:fd:4b:fe:
                    01:cf:01:e0:63:dd:b2:ef:59:8f:f2:7b:30:08:c2:
                    ff:d5:38:46:11:42:e6:01:77:24:8b:5b:35:2c:cd:
                    63:3e:7a:0f:d2:a9:ec:52:f8:e2:32:ac:5a:95:b0:
                    40:18:86:9d:53:e9:40:5f:9d:34:bb:65:72:73:61:
                    f7:49:96:0a:85:7a:a0:83:82:0d:f6:81:e7:d1:f5:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B3:9D:EC:C7:36:D7:23:44:38:08:28:83:3D:D9:63:B1:0C:93:66
            X509v3 Authority Key Identifier:
                keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:04:f9:9e:a7:57:f7:d6:fc:2b:48:09:cf:6f:72:93:4e:
         f3:1f:ae:2d:8d:23:c5:4a:dd:e9:7e:94:af:e8:88:c0:2a:5d:
         1c:16:7b:fc:23:2c:ed:60:38:87:14:4c:a7:9a:5d:74:a9:be:
         f6:aa:b9:d3:37:3b:e7:97:ad:62:af:bd:52:ca:9d:b6:e9:d0:
         ac:30:02:bd:01:84:ac:68:6d:40:3c:2b:f1:15:ba:38:69:de:
         91:c0:23:15:8d:33:a8:be:72:1b:1d:6b:21:fa:07:ce:90:dc:
         87:1c:d6:47:d0:9d:dc:c2:51:c0:69:48:ce:0c:60:7a:44:12:
         cb:c1:d3:e6:a3:05:8c:03:7d:8f:52:d9:86:0f:a2:f2:13:20:
         3c:59:7f:10:78:62:cd:d0:b1:29:7d:be:7c:b3:72:93:e2:40:
         8c:31:f8:1f:18:29:3a:72:9b:6e:52:0e:84:91:45:cd:77:9d:
         34:91:9a:27:e0:dd:9e:0f:40:a6:54:c5:28:e3:1b:c9:47:97:
         a3:4f:d4:ee:a3:42:c3:cc:62:d0:51:69:92:a5:23:1b:48:17:
         38:85:57:12:9a:9b:4c:97:06:3f:62:2d:43:f2:d8:24:c4:84:
         48:73:3b:31:18:4e:39:d7:a4:fd:47:30:43:2f:54:f7:a1:33:
         82:92:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:37:58 2026 by rpki-client