Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft
File:                     zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft (raw, json)
Hash identifier:          3QAiWhwl9+U6lrtpwwlH+6nGxH66B+aWa1JXprwp76Q=
Subject key identifier:   D8:15:7B:8D:8D:B2:4F:E5:47:E9:95:85:97:D4:02:26:99:49:F5:24
Authority key identifier: CE:AC:F3:01:5D:30:3F:3B:B2:0E:37:D6:63:74:C1:C1:36:FE:AF:03
Certificate issuer:       /CN=ceacf3015d303f3bb20e37d66374c1c136feaf03
Certificate serial:       01A1DCF06AFF3DF0B2E4BA77CA76A037CDBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft
Manifest number:          0276
Signing time:             Sun 15 Nov 2026 02:01:45 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:45 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:45 +0000
Files and hashes:         1: a4bf04S5dcI4kEjmwxLAJkHayoI.roa (hash: /oCVymeIjx63ZJTfJn0LJz76bxndmpMPXujVHC7ipfQ=)
                          2: zqzzAV0wPzuyDjfWY3TBwTb-rwM.crl (hash: 9xyuwi8uBgGTxOgqmD13y/P0aHgLKcBWnszZIfsHLuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:6a:ff:3d:f0:b2:e4:ba:77:ca:76:a0:37:cd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceacf3015d303f3bb20e37d66374c1c136feaf03
        Validity
            Not Before: Nov 15 02:01:45 2026 GMT
            Not After : Nov 16 02:01:45 2026 GMT
        Subject: CN=d8157b8d8db24fe547e9958597d402269949f524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:1d:bd:1c:92:a2:ba:5f:50:6d:9e:d6:6b:
                    8c:75:33:98:35:b8:53:74:4c:e5:bd:b9:22:aa:1d:
                    e3:1d:1a:d1:e6:e0:db:16:7f:c0:9d:b1:16:b9:b7:
                    96:33:42:94:c5:6a:68:11:d6:84:3c:e0:7b:8c:c3:
                    22:58:4e:ea:d9:20:f8:17:bf:77:92:18:dd:5e:4c:
                    83:de:85:0a:a0:55:11:bf:52:43:fd:e2:68:56:87:
                    98:fb:9b:88:f9:ce:d4:5c:b5:85:20:b9:d4:8b:55:
                    95:49:cd:11:2e:97:4f:81:24:46:2c:c5:b5:84:2f:
                    c9:17:36:59:01:7f:07:b8:f7:56:a1:02:43:79:ec:
                    a1:9d:01:ae:17:94:9a:05:1f:0b:fc:03:e5:13:1e:
                    70:4f:69:35:e8:18:b0:08:2a:44:96:96:81:af:b0:
                    26:35:f8:55:c4:32:d3:c0:8e:6e:89:d6:85:2e:48:
                    b8:ff:88:a0:2a:bc:86:c8:ca:1f:dc:7f:5c:53:b8:
                    79:85:1d:52:e7:0a:0a:a4:38:83:58:bd:aa:68:b2:
                    2e:d3:aa:d0:49:78:16:ed:08:0b:2b:46:2a:80:2d:
                    e7:ed:60:31:6d:93:52:12:27:e6:64:e2:74:13:29:
                    19:e1:3f:47:43:ab:74:79:4a:82:c6:86:c7:1e:2d:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:15:7B:8D:8D:B2:4F:E5:47:E9:95:85:97:D4:02:26:99:49:F5:24
            X509v3 Authority Key Identifier:
                keyid:CE:AC:F3:01:5D:30:3F:3B:B2:0E:37:D6:63:74:C1:C1:36:FE:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:91:68:bb:cb:91:c0:09:be:1e:8c:f8:3c:7c:37:b8:df:
         04:31:d2:5b:be:68:f1:dd:fe:88:a1:f3:ed:62:fa:2d:be:e5:
         55:05:f7:ca:31:61:8b:9f:17:cf:eb:97:e5:58:16:f8:24:35:
         dc:ea:e4:a7:7f:c0:cb:de:a1:a9:d7:96:17:eb:26:02:49:88:
         f1:fa:3f:5e:33:a5:ce:ce:ce:4c:7b:76:4e:c3:96:a8:21:1f:
         ab:bf:f2:06:fd:4f:9d:65:29:ec:05:14:34:7e:e6:51:11:6b:
         e6:30:54:ae:2f:83:64:57:40:06:3b:6c:83:7d:8d:f6:2a:bc:
         32:93:b9:1a:c0:0a:7e:43:83:e7:e6:6c:12:f5:59:1b:5f:78:
         28:a5:49:92:2c:0c:ca:a7:48:fe:48:91:97:7f:fb:e1:58:c4:
         ba:18:15:1f:1e:2e:22:10:05:04:d3:79:b7:26:09:a9:7f:3f:
         55:08:3a:cd:01:d0:29:6a:37:ca:61:2f:61:e5:ea:cd:9b:7c:
         7a:48:0b:cc:b1:13:29:41:9e:76:e2:4e:17:d6:b0:4c:b2:35:
         61:c5:b1:72:95:47:bc:4d:80:99:d7:bf:78:52:77:36:7f:c7:
         a7:90:fa:5b:d4:7e:9b:d8:2a:5d:39:41:b1:7e:42:bf:00:41:
         94:c8:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:57:55 2026 by rpki-client