Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
File:                     K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json)
Hash identifier:          Va3jiE1RvpNTb2OkMfw/bho7Dg7hRb+J2R8h9VXgty4=
Subject key identifier:   AC:3E:F2:FB:E6:09:67:F7:4D:2E:47:95:87:82:EB:01:57:12:A1:11
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Certificate issuer:       /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial:       01A1DE396DD1F412E3F0E54B039DB0BAAB46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
Manifest number:          13E4
Signing time:             Sun 15 Nov 2026 08:01:07 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:07 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:07 +0000
Files and hashes:         1: 7dUk_iTWyq-CeV5sugxsu_-uM24.roa (hash: M71kUmZZx7bac9nbXal3k/LyQr/8W0Eyw9aShrmuf9U=)
                          2: JA2Y-jh-PHCmYhc4L6lveTEQpC8.roa (hash: yCR3T9OdwoX7tNGe8kaR3S1PiWc9KBcnYLkTDnQhJyM=)
                          3: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: pp2Si7DN+U69TR+iVW561AEvV780pGZwXyzv/u5BXME=)
                          4: LEaYGSQnv22iJzPRvzPOdVVtaWo.roa (hash: z2ahNg5bgqMVHymhQz6Igehe9MSKxQ8t/he5J048EGU=)
                          5: XdlPMT-bB9justbDAchQlf2GaJA.roa (hash: NVx53WaZg/EMVCB0M10esFX/diAZvcM3gZhX72tXbMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:6d:d1:f4:12:e3:f0:e5:4b:03:9d:b0:ba:ab:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Validity
            Not Before: Nov 15 08:01:07 2026 GMT
            Not After : Nov 16 08:01:07 2026 GMT
        Subject: CN=ac3ef2fbe60967f74d2e47958782eb015712a111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:bc:bf:02:18:16:fe:4d:d0:fa:61:15:65:
                    8d:b7:cb:45:14:68:b5:ca:f8:ab:b4:8f:92:9f:9e:
                    b0:ca:8a:58:87:a4:4a:82:29:2d:66:bb:f5:d7:07:
                    f6:45:75:41:47:b5:2e:41:f9:62:ab:a9:73:a1:4e:
                    17:64:df:94:33:c3:67:02:a5:f3:bd:08:9d:b1:00:
                    8a:1f:77:2a:d3:24:2d:49:3a:38:00:e4:28:42:db:
                    fd:b8:f6:1b:c5:ef:2e:9a:30:db:58:2f:19:28:4c:
                    06:62:9c:c9:cb:d1:81:98:91:a1:4f:5c:db:c2:16:
                    65:9b:b0:e8:71:70:a9:4b:dc:56:23:f5:bb:43:fb:
                    cc:58:85:c7:e7:c6:b9:29:b0:82:5e:24:34:0e:d3:
                    22:d3:15:cc:27:9c:16:4b:91:52:3f:28:3c:5c:b1:
                    a2:71:21:d9:0a:cb:c1:2d:6d:b0:66:fb:3c:bf:5c:
                    21:e1:11:76:32:71:1f:f0:ad:a1:1d:d8:8d:c5:38:
                    c0:28:72:5c:b0:b3:9c:17:8a:3f:3f:5a:fe:43:3f:
                    94:cd:7a:7e:d3:4e:48:92:1d:af:23:00:3e:18:a7:
                    f7:b5:95:32:80:32:5a:3f:3a:ef:12:d1:4c:c7:12:
                    c5:bf:ff:7d:0e:39:9d:3b:b8:fa:a1:6f:26:b8:b1:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3E:F2:FB:E6:09:67:F7:4D:2E:47:95:87:82:EB:01:57:12:A1:11
            X509v3 Authority Key Identifier:
                keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6d:91:11:fc:50:65:54:a5:8e:04:30:09:c9:fb:6d:0d:cc:
         a6:36:96:68:54:11:c1:0c:54:30:da:21:30:ee:b6:30:0e:48:
         6f:95:5e:48:2c:24:56:96:9a:51:c3:df:73:a0:98:0a:8b:d5:
         82:2a:ad:63:52:3d:04:42:78:db:06:2c:26:21:f6:aa:4b:7c:
         de:ee:99:64:bb:e6:59:4e:9e:91:56:f1:eb:57:56:2b:3d:e1:
         84:93:89:7b:26:c3:b3:f1:87:20:de:df:47:5d:a4:fc:ee:7b:
         2a:03:b2:ac:86:89:36:82:75:94:b6:98:60:78:06:19:6c:0a:
         5c:4e:47:c1:07:20:3d:60:ee:1a:84:88:77:f7:7b:5e:b4:c3:
         79:d0:de:4b:ab:72:f3:2e:67:27:40:f6:e1:a9:e3:cf:60:e8:
         6b:f6:b4:77:30:55:79:e9:3d:d0:d0:c8:bb:77:1d:59:2a:96:
         e0:c2:73:df:51:06:64:e9:43:f0:6b:c7:36:f8:50:c4:25:76:
         c4:79:76:e7:d9:6c:0d:c9:ce:14:22:e2:c3:17:1b:f3:0a:70:
         c1:fc:fd:9a:d9:98:d6:38:33:04:d6:06:94:1e:71:03:01:ce:
         48:79:ed:7b:81:aa:7f:20:05:2e:ac:49:5a:3e:2f:33:9b:d6:
         da:09:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:49:25 2026 by rpki-client