Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
File:                     zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json)
Hash identifier:          0mYR8IaJyurlkdqctagChBo1zKRUpmkD9PW0vQmM6MQ=
Subject key identifier:   CF:87:01:79:87:5F:C5:B7:9B:31:E9:C3:08:11:F9:09:83:0F:F1:6D
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       01A0D6151CEB216D3B2E8F74B656DE629CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
Manifest number:          13E6
Signing time:             Fri 25 Sep 2026 01:01:42 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:42 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:42 +0000
Files and hashes:         1: C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (hash: cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=)
                          2: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=)
                          3: IPuHLZBymKRXYx-YnfPe_MhR0yA.roa (hash: yDZxC0qnt1slcECmxYfcCYbXQ2iv0xHTebHw2m4awwA=)
                          4: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=)
                          5: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=)
                          6: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=)
                          7: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=)
                          8: a_baIkGFreZCkQEDrTUpOc9RljI.roa (hash: oCF0GgcCbPHk3wbbPuSP852CME0/FbCGLSMKdZU6cDI=)
                          9: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=)
                          10: dOwr2B8WnphDIXpwhxX7hEeAXoc.roa (hash: avK0kgve7pfAgs0RWzv3wt9hc94t2lmnhaoGfrVsWwI=)
                          11: lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa (hash: L4mLka0+J2eAetfCFGY56nD40J5l29wgcwJKHDZ8NEY=)
                          12: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=)
                          13: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: gcOUaCS6t7fzHYgfyk69v6FAtc4vSkCmeZhNTXShEOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:15:1c:eb:21:6d:3b:2e:8f:74:b6:56:de:62:9c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Sep 25 01:01:42 2026 GMT
            Not After : Sep 26 01:01:42 2026 GMT
        Subject: CN=cf870179875fc5b79b31e9c30811f909830ff16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:87:f5:3d:31:ec:00:92:92:89:46:5c:43:
                    cd:a2:36:81:57:ab:74:1d:f6:77:b3:5e:0f:8a:47:
                    a7:2f:6a:f4:59:31:8c:7b:af:96:a8:50:94:8f:ba:
                    6a:bb:38:93:fe:90:74:02:b4:5d:70:75:8e:a4:39:
                    33:7c:8d:52:5f:2d:e5:91:31:1b:de:62:1d:e1:29:
                    51:20:06:10:a5:c2:37:ba:57:e6:f6:d8:c6:dc:41:
                    26:01:e5:36:d3:bf:0c:f5:09:39:bb:38:3f:bc:28:
                    ed:4d:e7:2c:aa:09:aa:77:f8:36:e8:89:6c:72:80:
                    99:1d:c6:4c:83:be:62:f4:14:f4:cf:35:40:36:37:
                    3e:2e:bd:fb:94:67:96:b0:23:23:57:bc:91:c0:af:
                    d5:da:db:cf:fa:ce:2a:c3:37:d5:66:4d:57:1d:ca:
                    e0:8b:df:29:2c:e0:45:cb:39:2e:be:1e:1c:04:75:
                    5e:42:9c:d4:26:bf:f8:5c:a0:ad:3c:3d:f8:83:0d:
                    72:b5:fc:69:70:c8:81:d7:b6:df:c3:9e:a8:7e:fa:
                    f1:d6:95:1c:ce:67:8c:2e:30:64:e5:3f:f0:c3:1b:
                    b4:5e:e5:89:8c:95:f6:5b:34:39:73:ed:74:77:18:
                    40:1a:55:90:f9:bb:55:60:58:76:0f:f4:86:ca:1d:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:01:79:87:5F:C5:B7:9B:31:E9:C3:08:11:F9:09:83:0F:F1:6D
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:08:ed:b9:97:ab:9e:26:dd:a7:17:b3:09:cc:36:f3:71:db:
         ac:0d:f8:30:ee:44:aa:d2:6e:1e:80:11:4c:3e:d7:fa:31:27:
         76:58:69:9a:4e:9c:c4:70:da:02:ed:fc:32:de:b3:b6:14:11:
         7f:7d:dd:ef:31:3a:09:bf:c9:53:ff:f0:0a:48:b0:14:cf:73:
         3d:f2:e3:0c:57:02:48:36:6c:c7:4c:f5:c4:87:07:ab:1b:ce:
         c5:1f:68:d4:2f:e5:30:70:53:db:7e:cd:7d:48:f7:7b:c0:9c:
         22:9f:16:38:24:7e:bc:db:45:db:be:54:24:fd:09:cd:fa:52:
         41:3b:4e:59:57:16:16:a7:b7:f3:f0:48:55:3f:e7:0d:66:f7:
         d7:d2:2f:5a:d4:03:ae:e3:45:85:01:9f:28:f9:3f:04:ca:65:
         1e:77:ee:79:1a:f2:25:ef:4a:6b:d3:d5:20:cb:e4:d2:d1:35:
         22:50:8e:15:17:b9:cf:33:70:21:77:bb:f1:58:23:3b:9f:75:
         58:73:05:65:f1:f5:e5:b6:e1:25:9b:88:e3:b5:40:84:e4:17:
         53:6e:96:ea:c1:bc:d3:f2:42:34:d0:6d:0b:09:60:84:7f:ba:
         9e:80:46:d5:16:58:15:fc:57:be:93:cc:e2:27:de:94:97:94:
         46:0c:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:48:02 2026 by rpki-client