Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File:                     ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier:          xCT4tp+SCqrV5TZUso3bOr5zLxRMkXs7iADyeahQIpA=
Subject key identifier:   33:1E:84:48:5E:A5:00:D1:30:F4:99:98:2B:45:09:01:CF:A8:58:CF
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       01A0D0B6CFB75FD07A22FD8202A7A147C316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number:          1B3D
Signing time:             Thu 24 Sep 2026 00:00:36 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:36 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:36 +0000
Files and hashes:         1: 1oQjSm-kGBrxkRotrqHYaPNAYog.roa (hash: IIc8bR6RSqfXsFfLY0BAhVIj/jEYp+IGcje1VI5aU+I=)
                          2: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=)
                          3: 8I44W1DgMr0nZPhdUlABXoaCQTo.roa (hash: iGplkgd68u15p9JflOukg3JqxoQvGifeOjxl+QKCbak=)
                          4: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=)
                          5: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=)
                          6: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=)
                          7: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=)
                          8: ICt1Rkbvy2PurXTbs0JUqBhl_E8.roa (hash: vC+h6HjFcV/FpKrWeC9krmj9LLxIWfjfzAQgLBkIKBQ=)
                          9: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=)
                          10: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=)
                          11: O7pk6VO55klOvKkz3zzX4xSdPAM.roa (hash: pbiMJJZNQXKaJSS/os0JkRqMwkpts4ezR6iIP1M95i4=)
                          12: ObrwvnuybuX-TCdIyJYF8yRpE7M.roa (hash: ctdZU3BusOf+SUNNRsV3E3G1Z+DU1MZt+5gYWTRs6a8=)
                          13: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (hash: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=)
                          14: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=)
                          15: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: sJznAVlJJ2Y1PgwrKU5SL8fFX7/7noR0t2DS1anZVn0=)
                          16: bd2_haPLBRYi9ES34EvG-zee_fI.roa (hash: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=)
                          17: c6GILi92RmWHgC81JVzcin9qgpQ.roa (hash: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=)
                          18: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=)
                          19: ecEwq8kzjmUz4wAl5y9NY23nHP4.roa (hash: C9B98Hr14zxeLb9pyxpcpUi6RBAGhUr5GBAo9feKiQo=)
                          20: eqX4HCtONznBtdkM0Yv1tIipxwA.roa (hash: MDuAY2fOHyll6nWj4kl7aul/nqNWMDpsUW4/eoDcPJk=)
                          21: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=)
                          22: ja0BpQXhcblpKEj-Zj_RAjzr35g.roa (hash: iy0Afou5BdlAsZDL/FBHdBDLDYuwKrfJY54mLykthTs=)
                          23: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=)
                          24: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=)
                          25: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=)
                          26: mWBLEPz3C0Lf-l08xyY58aa8zT8.roa (hash: q8JaOwfKTrGzhPjlC43ijuG2sH1GANOpbIeobrHD4rg=)
                          27: msFoJS2lgnt0k3mYiMMf7W7m4XI.roa (hash: dakN/AD/BmQJDFFo8rBDUJU0AXGNYQnGLQfcB5HJcJc=)
                          28: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=)
                          29: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:cf:b7:5f:d0:7a:22:fd:82:02:a7:a1:47:c3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: Sep 24 00:00:36 2026 GMT
            Not After : Sep 25 00:00:36 2026 GMT
        Subject: CN=331e84485ea500d130f499982b450901cfa858cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:6a:3e:b9:aa:0f:2f:b6:b6:dc:99:92:b2:
                    65:df:21:ac:c2:58:d7:42:c3:1a:7d:53:73:bb:2e:
                    6f:2f:4f:7e:da:23:a2:ed:01:45:d7:9a:ff:1f:e7:
                    19:ab:5d:06:13:93:a0:46:3f:97:af:d3:cc:ef:52:
                    c8:99:f4:92:cc:b7:4a:e9:5d:5e:6f:a2:e0:bf:1f:
                    bf:02:4d:83:b9:29:44:9f:53:df:a8:52:42:73:95:
                    4f:33:01:7c:ac:79:70:2f:20:7d:95:2b:95:27:4d:
                    40:17:79:90:db:06:14:6b:12:da:ca:3e:ba:70:8e:
                    4c:b1:74:ef:2a:d8:43:f3:25:fa:27:27:b0:3b:a6:
                    b9:f7:55:86:43:58:28:7e:51:a2:7c:eb:11:05:11:
                    48:2f:1d:ea:e9:2e:55:9f:da:71:9a:cb:07:4a:03:
                    67:98:17:49:75:b6:68:67:6a:3f:ff:d5:7d:ee:19:
                    0e:2f:0e:5a:47:44:52:fb:97:1f:40:b0:2c:38:a0:
                    d9:77:09:86:7d:20:f2:24:d9:f8:76:79:6e:52:3e:
                    ea:18:3d:4c:a1:40:06:9e:de:22:28:ff:e8:09:30:
                    41:4d:2a:ed:d3:93:e0:2a:19:36:61:c4:e8:69:32:
                    a8:3f:bf:32:c4:f5:ed:d9:e4:94:77:24:12:88:a6:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1E:84:48:5E:A5:00:D1:30:F4:99:98:2B:45:09:01:CF:A8:58:CF
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:96:ff:a8:7f:52:d3:f2:2c:f0:7f:e7:90:7f:f3:6e:c7:fa:
         88:47:aa:5b:a2:df:a3:a9:92:27:c8:6c:6e:dd:93:ba:c9:b2:
         a8:ea:c6:ef:85:dd:95:9b:e0:c0:77:45:3f:af:9e:aa:e5:d7:
         59:2d:c9:0c:15:ea:31:b8:58:7f:a8:21:88:b7:8b:b8:8f:b8:
         6f:c1:0e:09:2d:f7:74:81:5d:56:79:b6:00:c5:9f:17:51:f1:
         41:65:94:46:49:94:21:db:ac:e0:48:5f:a1:33:75:6b:89:ac:
         e5:8b:38:65:84:64:9b:6a:d8:11:5b:2d:a4:81:f2:17:30:e0:
         47:8b:f2:c3:60:4d:a2:8a:33:04:9f:68:7c:e7:23:97:79:e8:
         a3:5c:a1:7a:72:b2:99:bf:5a:0b:70:86:ee:63:b4:5c:ab:0b:
         23:29:89:fb:fb:47:f4:d7:15:63:d6:8b:7d:56:52:3e:d9:85:
         14:2d:cf:7a:57:22:53:5e:ca:f3:47:d6:27:74:c0:2e:f6:a2:
         1b:9d:53:8f:f3:b4:ea:db:27:3a:ed:e1:ac:bf:19:97:9d:b5:
         1f:07:d3:03:5e:21:ba:b5:32:39:1a:17:94:4a:29:c3:b8:80:
         22:c2:d1:7b:87:1a:ec:74:45:6f:1e:b1:6b:da:ea:0c:b0:2d:
         2a:cf:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:59 2026 by rpki-client