Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File:                     Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier:          sj8/Zq2N2woGKicR/7a84Tbp8wn2kZ9lZXxOsOHSSdI=
Subject key identifier:   3F:12:26:1B:44:10:F3:EA:5F:0D:2F:EF:4B:BA:DB:00:2F:0A:30:6F
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer:       /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial:       01A12542A404266E5AC39518ED00957BD8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number:          1AA4
Signing time:             Sat 10 Oct 2026 10:01:26 +0000
Manifest this update:     Sat 10 Oct 2026 10:01:26 +0000
Manifest next update:     Sun 11 Oct 2026 10:01:26 +0000
Files and hashes:         1: GVE1_6oeRDy2_uMOn6hXFH0Z_XM.roa (hash: vw8nSpzF36MDWeqpnJEEtvdPvfCC/FW1EffqrG7+b7o=)
                          2: GhcOsk0O2_wZIMiPsKAAT8tcjQk.roa (hash: 0yEQgIWX72p/2MzI904UFD45zO2Zp7N2aljVhqUiKrE=)
                          3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: Bzv1suRmbA/dfs2Ccr6BBxDozTlONLJLxLy6kXga/xo=)
                          4: nGvsubqHJfLRBmLWFj1cB_Id6UI.roa (hash: Atxl75aMvOwAw/Nf75/QEXAOO7v6+K8ATugv/1WaAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:42:a4:04:26:6e:5a:c3:95:18:ed:00:95:7b:d8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
        Validity
            Not Before: Oct 10 10:01:26 2026 GMT
            Not After : Oct 11 10:01:26 2026 GMT
        Subject: CN=3f12261b4410f3ea5f0d2fef4bbadb002f0a306f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:1f:9e:96:cb:cb:3d:dd:0e:5f:97:15:6a:
                    32:3c:25:00:52:c2:9c:45:cf:6e:d9:b9:95:9c:d6:
                    0e:e9:29:38:99:09:02:5a:34:d9:8d:8b:08:d2:79:
                    d3:94:1f:f7:38:e5:85:9b:67:98:37:23:ce:f4:2e:
                    45:bb:60:b5:9d:95:11:0c:48:86:ae:bf:98:e0:4f:
                    42:48:71:35:f2:7c:c3:77:de:f4:51:dd:b4:b2:5f:
                    4f:f4:a3:8c:48:79:c0:99:9d:8d:1b:f0:04:ba:a2:
                    e8:bb:ed:56:db:6c:b7:17:f2:03:68:7c:64:78:0d:
                    79:a6:cc:4a:e2:68:80:c7:51:fb:70:6c:91:33:2a:
                    5a:aa:34:63:30:23:57:90:e6:aa:85:0e:09:62:a7:
                    ae:24:82:f4:ac:c6:c1:f6:7f:76:30:f7:10:4b:04:
                    27:9b:56:9a:fd:37:63:ee:e5:84:71:a2:69:a4:e9:
                    ad:9f:82:ea:13:85:6d:3c:ae:19:47:45:d7:ce:7b:
                    8d:85:91:c6:4d:13:ef:e1:bf:5e:10:98:17:fc:4b:
                    35:53:17:d7:d5:d1:85:16:fd:23:38:26:64:98:c9:
                    8b:81:86:a0:20:33:08:9b:4d:f3:c4:65:39:43:93:
                    17:5b:55:df:70:2f:7f:a2:39:f1:1f:6e:32:91:da:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:26:1B:44:10:F3:EA:5F:0D:2F:EF:4B:BA:DB:00:2F:0A:30:6F
            X509v3 Authority Key Identifier:
                keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:71:6f:c0:f6:7b:6c:ab:1b:ce:f9:9e:52:fc:56:ec:93:3e:
         c8:11:0a:35:bb:a2:bb:63:f6:43:87:f3:47:e5:61:54:c3:f4:
         ce:d4:b8:7d:b5:fa:19:54:e0:46:a7:39:af:4e:54:04:87:62:
         32:2d:30:7c:14:d5:2d:ff:7e:4b:2c:eb:65:7a:44:34:ec:17:
         e2:c0:f3:b0:76:dc:df:07:02:08:a9:af:33:81:b3:0c:02:29:
         9e:34:0f:38:b8:41:19:a4:a0:7b:f2:e3:58:68:bb:d9:ba:04:
         51:af:36:de:34:55:bb:a8:15:6e:22:34:60:4c:68:97:de:19:
         40:87:de:1a:5e:3f:ea:98:05:25:4a:96:54:4b:e3:f2:40:54:
         18:ea:6e:42:d7:90:d1:de:c3:31:aa:d4:82:96:23:74:a0:37:
         17:11:00:58:59:06:15:b8:59:7c:6d:8d:c6:6f:81:ee:7f:40:
         13:f7:ef:d6:a1:91:2e:d5:c4:45:fa:cb:1c:07:60:e5:6b:22:
         e7:c9:9c:7a:d8:f5:d3:06:22:85:e4:3c:98:8b:8e:92:85:93:
         48:08:37:f9:a9:24:0d:28:1d:8c:6e:f3:55:9b:54:84:2e:33:
         b7:8b:1c:58:bc:7b:37:8d:5b:b5:8f:3a:cb:0c:e4:06:bc:a1:
         45:8c:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:31:56 2026 by rpki-client