Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File:                     ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier:          9FXwNsTl71eil3qV7L+pxLsQ0uzWff6LHvf5OJcyW9Y=
Subject key identifier:   8B:9D:9C:39:B2:A4:90:FB:7E:17:4D:34:4D:47:78:D5:00:F8:B8:34
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer:       /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial:       01A1DFB9FE144E3123F486000D3347FF9583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number:          0A72
Signing time:             Sun 15 Nov 2026 15:01:10 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:10 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:10 +0000
Files and hashes:         1: X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa (hash: r5fWgTPjjmB31St0AmzLTssy0JP6/zDB0uGldcQoQt0=)
                          2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: ArLZRI0tQ8zsPTxcWtydfwAr4hsSWW/npV/IOe8BfJ4=)
                          3: pbOnM14FBGbBbt13YVtewZP_2tQ.roa (hash: QF3tVszgFzePTz3dxu9AP7R+NV7UXuG0plXFea94dww=)
                          4: tU70CLv_FnaoDz0xj6FPiJvGn-k.roa (hash: G4YFrMOaB3YYQfWSQNKXIK2SLKAYNELC+w3hU94N7bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:b9:fe:14:4e:31:23:f4:86:00:0d:33:47:ff:95:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
        Validity
            Not Before: Nov 15 15:01:10 2026 GMT
            Not After : Nov 16 15:01:10 2026 GMT
        Subject: CN=8b9d9c39b2a490fb7e174d344d4778d500f8b834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:6a:25:6d:10:30:ff:a2:8c:ea:dc:cc:ec:
                    a3:e4:ef:d6:ad:88:e4:1d:bb:42:57:8d:36:b4:5e:
                    dc:94:d3:b2:f1:00:c1:36:37:1f:81:2a:9c:c5:14:
                    ec:32:ce:35:4e:16:80:fa:84:d5:83:e5:82:9b:0a:
                    dd:d8:18:b1:72:e0:b1:52:56:44:bf:6a:1d:60:af:
                    f3:99:24:d7:0a:04:8c:44:34:3e:b9:c4:08:05:22:
                    77:a3:37:11:87:88:82:30:2b:22:b8:05:81:04:29:
                    f5:62:e1:7b:8a:07:fe:ba:82:c3:0d:43:31:d5:29:
                    08:ce:2f:c8:cb:eb:e8:43:9b:92:0b:f4:a4:16:4d:
                    87:20:41:01:79:66:3c:b8:65:e4:3d:f7:a6:bb:0d:
                    cc:a6:52:09:54:e1:a3:78:c4:cf:9c:bb:a6:48:59:
                    9e:d0:60:8f:c4:06:d1:e3:a6:2b:b6:e0:5c:8a:b3:
                    86:6a:c3:c8:39:47:cb:20:e4:35:59:52:cc:8f:a0:
                    21:ab:53:c3:20:b8:cd:e0:d6:d6:49:2e:6c:f2:75:
                    5e:c4:22:ae:3b:15:e0:f7:0c:80:5e:e0:02:9f:d3:
                    7c:11:ea:2f:06:7e:76:e6:4e:6f:b4:51:19:b3:15:
                    8e:5a:5e:6c:3a:cd:e7:48:df:0f:13:88:ec:c5:7a:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9D:9C:39:B2:A4:90:FB:7E:17:4D:34:4D:47:78:D5:00:F8:B8:34
            X509v3 Authority Key Identifier:
                keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:55:8f:1b:e5:2b:cd:77:58:08:86:73:04:17:3b:c8:f6:8e:
         7e:56:4a:d5:15:0d:99:48:97:f0:9d:eb:46:a2:3b:ed:c1:df:
         4f:99:d6:3a:24:c4:9e:bd:09:d8:18:68:56:49:da:d2:55:aa:
         26:1d:7d:54:fb:3f:6a:9d:10:30:0d:9e:55:53:a7:b0:f0:99:
         e0:64:f6:26:27:65:55:75:45:59:47:86:eb:bf:af:7a:ec:14:
         d3:3d:bd:95:9e:af:a3:31:76:0e:39:09:cc:11:bc:1c:74:e7:
         c9:fd:cb:17:a8:2d:4c:05:f2:91:ed:9c:5f:b1:ba:16:11:f0:
         4c:22:9a:f1:37:45:af:cc:22:b1:62:c9:9c:d1:a1:e2:48:b5:
         f7:c7:05:fb:68:ca:eb:41:b5:69:02:77:31:c8:43:c5:df:a1:
         9a:5d:83:c4:63:e8:3e:2b:3b:df:ca:ab:70:5e:6f:45:df:b1:
         d0:15:ac:a2:39:0e:ca:9e:77:64:74:10:72:e7:70:bd:b6:3d:
         5b:95:38:c4:6f:08:6a:a3:ce:25:14:b0:92:c2:4b:18:f9:4b:
         6b:46:e3:d3:66:c8:f6:77:bd:10:98:2a:57:2f:31:f3:56:41:
         1c:25:20:74:3d:66:09:15:fe:de:30:e6:77:b9:95:df:20:22:
         93:bf:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:17:10 2026 by rpki-client