Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File:                     z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier:          Ob/LWNQtZYrDolHl2EtQcV3CRSxL2Q2p6Aw/3ZU3bho=
Subject key identifier:   EE:F7:FD:B6:4A:7B:49:D2:70:70:9F:88:CC:0B:E6:F3:19:46:5F:82
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer:       /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial:       01A0CB59A957AA88AB1210450741017C5833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number:          15CA
Signing time:             Tue 22 Sep 2026 23:00:45 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:45 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:45 +0000
Files and hashes:         1: G0xz0bLV9EAQly4_g7VObUShRtE.roa (hash: ABgZUft6yhbazt8klEM2ZtMjod9FBs3oPUw6gWfrGKk=)
                          2: Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa (hash: Td8M1b5eYn7YJIEViFQBLyeZjyCEUobMfRK7pwtir7Y=)
                          3: UhXahydsOo_qiwzRtVGqPmi_pwk.roa (hash: DFHZo+ZnvqIq4efxazwJLIWQqpNgr1YvbSZZDY8hdCA=)
                          4: dMRJpZJ1JNYLWgq3FuqchxjnETE.roa (hash: fce7GbHsuDUNjDLPVqwrMpy3SolSS3TeDUI3vt7NKIY=)
                          5: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (hash: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA=)
                          6: oomUoRc8kAeXbJ8Vact092RPz5A.roa (hash: +kRKbGJLzWAadibg+zB0y/8pWSdZTuvX7OD3gBOEtzw=)
                          7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: PlkzZJ8WNh/K9rRRs26r9XFZwopjUBLC5lYF9Rda9D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:a9:57:aa:88:ab:12:10:45:07:41:01:7c:58:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
        Validity
            Not Before: Sep 22 23:00:45 2026 GMT
            Not After : Sep 23 23:00:45 2026 GMT
        Subject: CN=eef7fdb64a7b49d270709f88cc0be6f319465f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ba:ba:87:c2:bd:34:35:09:b1:49:0c:d8:11:
                    fe:4f:38:d4:cd:d6:26:ac:a4:e7:6c:e0:5a:2e:18:
                    43:13:9f:3b:05:3e:bb:88:71:2c:ac:8c:b5:3d:46:
                    74:8c:ce:ec:b7:c8:78:f4:db:27:3e:4f:7d:2c:09:
                    0a:e4:81:8b:a7:be:21:84:31:32:a4:a5:8d:3f:b8:
                    28:19:37:c1:f8:3b:fa:51:41:5f:ff:79:b2:88:65:
                    8d:bd:e2:65:b5:c1:de:a5:aa:b9:eb:44:b0:96:a1:
                    27:14:51:e2:49:b5:55:f3:27:9b:01:b1:12:5f:e7:
                    f6:70:7b:43:50:6e:7c:2a:84:1e:57:9a:8c:f4:26:
                    c3:a8:cf:3a:9d:6d:ef:f4:ee:fb:b0:36:29:23:99:
                    c8:28:a4:d1:57:6e:e0:c6:5d:06:d8:77:bc:32:0e:
                    99:b5:8e:34:aa:07:3c:43:26:03:bb:75:12:2e:5b:
                    dd:27:68:30:d2:dc:f8:47:2d:bb:e7:9b:c4:35:33:
                    03:d0:79:b3:b9:53:6f:ec:0f:ac:63:e7:f9:0e:a4:
                    29:87:6c:51:64:1a:74:0e:ae:57:a7:f8:80:8d:df:
                    a8:be:aa:ca:b0:f7:0f:86:66:ff:89:52:e1:19:27:
                    10:00:7a:7f:b3:ed:56:0e:84:21:bb:36:cf:54:ed:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F7:FD:B6:4A:7B:49:D2:70:70:9F:88:CC:0B:E6:F3:19:46:5F:82
            X509v3 Authority Key Identifier:
                keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:96:d3:a0:15:4c:92:d8:6f:5c:2b:7c:59:f2:95:f7:3e:
         da:77:a3:7f:73:4c:14:36:e6:9e:9a:79:77:9b:96:90:c3:b6:
         d6:48:80:be:69:a8:d1:88:5c:b4:a7:52:a7:da:90:0e:37:a7:
         be:24:58:dc:d7:b3:91:83:9a:3d:93:d8:15:a3:98:93:70:10:
         cf:5b:3d:54:07:f3:67:fb:09:3a:02:6b:5c:bd:96:f6:75:2e:
         2f:fd:77:05:2a:fe:43:c9:37:75:13:67:cd:60:1b:e4:8a:55:
         b3:d9:2c:fd:cf:c3:95:57:81:7c:d8:76:c5:3e:b5:0b:39:54:
         fa:ef:a4:09:b8:6c:86:30:19:aa:09:81:c3:10:ad:af:4f:8f:
         1b:a0:b1:0c:36:a3:f3:04:05:43:96:7c:05:80:c1:7b:4a:28:
         6e:1a:c1:58:fd:b1:8a:28:54:58:27:ad:4a:f1:d2:94:98:7b:
         40:8a:77:a2:8b:ff:0a:1f:7b:9f:7f:6c:10:96:4c:c7:92:f1:
         f3:2f:77:e2:b4:3a:82:a0:30:cd:bd:4f:cf:26:fc:32:0c:18:
         d0:6e:bd:98:e1:a1:58:07:3b:99:94:bd:de:77:db:26:fd:a9:
         61:e9:28:02:f8:18:02:33:b3:7a:e9:80:37:14:6e:4b:3c:42:
         61:98:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:33:10 2026 by rpki-client