Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File:                     ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier:          PufP99vqoBIBUvJSmspkQcJ10hZgl9voSwyQBJ/unsw=
Subject key identifier:   A8:4B:B8:AC:60:A8:23:99:F9:CC:66:65:2D:FF:FE:44:4E:46:03:91
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer:       /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial:       01A0E6641912136085B8BBE1266FF2DBB244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number:          0AE1
Signing time:             Mon 28 Sep 2026 05:01:54 +0000
Manifest this update:     Mon 28 Sep 2026 05:01:54 +0000
Manifest next update:     Tue 29 Sep 2026 05:01:54 +0000
Files and hashes:         1: 0TK3c5i8HR_A-PsT2oVGhcZw6cM.roa (hash: h0uiRwWUdBUK99Ks+Y8sh+LxhfXczzzvDGj593a9g3k=)
                          2: DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa (hash: oHLHJsgbUguG193W+KSxMKgTzMMz/6UR3KrwC/LYnpQ=)
                          3: LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa (hash: GpWCJE/Uhd8pdU1hHuUyPW3gfCMnh5kn2jlAjryWbcU=)
                          4: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: PE4rB85yDukNg+6CxwTgltqfB20jWIjUNy/HkcfuU1s=)
                          5: ZPnR3HMA7sGvzycup7HofhXYTG8.roa (hash: A+4R2yyAAlbJkqTLskXX0nzQm93oNzg5z6lYvLAvYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 05:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:64:19:12:13:60:85:b8:bb:e1:26:6f:f2:db:b2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
        Validity
            Not Before: Sep 28 05:01:54 2026 GMT
            Not After : Sep 29 05:01:54 2026 GMT
        Subject: CN=a84bb8ac60a82399f9cc66652dfffe444e460391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:af:64:39:3e:54:eb:4a:7b:20:2e:38:68:dc:
                    4e:2e:a0:24:a9:a9:a6:6f:dd:67:91:98:cd:c9:62:
                    e2:f8:99:dd:ff:96:0b:56:93:bb:aa:ca:3d:1f:f9:
                    81:9a:c6:2d:b7:a9:05:e2:e8:b1:a9:72:02:7c:ad:
                    6c:32:11:80:dd:e2:22:c7:e2:fd:fd:b6:61:d3:aa:
                    d8:06:59:3a:58:39:90:a1:96:a2:a1:bc:1f:4a:56:
                    e8:6e:a1:70:8b:c7:f3:43:27:c0:4a:06:a8:52:1b:
                    eb:d3:89:e3:25:36:c6:10:03:60:57:2f:72:eb:45:
                    ff:c1:ae:f1:bd:0d:d2:12:98:a3:63:aa:16:e6:02:
                    f4:ad:f3:70:96:b6:84:e6:04:e0:aa:8f:cd:ad:80:
                    61:38:8d:c9:4a:52:d3:ea:ab:78:8f:5f:0f:0a:7c:
                    fe:e7:54:a3:9f:34:b2:6e:1e:a7:9b:3d:50:2c:39:
                    fb:87:1c:e1:a4:d0:d0:f1:7a:38:69:d2:c4:65:73:
                    46:96:c8:7f:2d:94:13:06:33:d4:5e:a6:9e:e9:a3:
                    c1:0f:64:49:d0:b7:6f:0e:e8:9f:27:4f:06:e2:5e:
                    2c:ec:bf:82:e7:65:c2:8f:ce:58:b5:cd:9a:bc:2f:
                    70:32:44:a6:87:72:fb:34:bc:28:dc:da:d3:ad:d4:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:B8:AC:60:A8:23:99:F9:CC:66:65:2D:FF:FE:44:4E:46:03:91
            X509v3 Authority Key Identifier:
                keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:32:79:fe:00:63:0b:5a:b1:22:5b:ed:2f:93:bc:8c:b2:2b:
         d1:26:c6:3c:3c:05:ed:18:d4:12:9b:01:55:38:25:c0:2c:5e:
         b0:1c:aa:1d:60:10:81:03:ec:88:03:c9:04:26:e9:0c:88:0b:
         bd:94:8d:e7:a0:73:39:72:34:65:1a:e6:d5:1e:d0:46:b4:b1:
         29:52:cc:31:8f:d8:94:82:8d:36:c1:b2:d7:12:a8:b5:da:e4:
         0a:e3:c2:e4:75:fc:0d:4c:81:c5:75:53:a7:e3:89:f1:71:72:
         7e:1f:80:da:0f:47:71:2d:0f:a1:e0:cb:db:62:0c:98:8f:d9:
         61:f1:99:51:09:df:1a:9b:5c:b6:fc:6c:2e:43:87:8a:c6:fe:
         d0:07:17:b7:a8:b2:08:a6:91:3f:50:35:78:60:21:7d:49:88:
         a7:12:d7:35:96:48:12:bd:fb:2e:18:78:63:42:89:36:1a:80:
         03:65:d4:06:cc:d6:77:e3:f1:db:e0:22:4b:7a:38:77:e7:04:
         6a:f8:26:49:73:3f:fe:05:59:dc:e3:d9:3d:ca:2d:2e:c5:c0:
         14:75:47:4f:db:31:62:af:44:14:44:b0:06:de:ac:72:10:76:
         33:5c:ee:c8:08:6e:c3:10:d5:64:38:d9:62:a9:0c:a4:da:36:
         c6:bc:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:12:59 2026 by rpki-client