Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File:                     zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier:          4EudW98U+IWAovz7jgedIcUz0hTioRWUP9kh9CgtRnE=
Subject key identifier:   B6:8B:AC:5F:E8:94:3A:0C:3F:B1:B5:4F:88:4D:21:C1:27:B5:45:89
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer:       /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial:       01A0D87240C4D90337B88828602F8A9EDEEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number:          058C
Signing time:             Fri 25 Sep 2026 12:02:41 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:41 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:41 +0000
Files and hashes:         1: 3WBgzyeX1uLGrZJBfUCmtAri3yo.roa (hash: YH496ZA6V5oD8citQskcrgnfmvtB3C49x/dIJaTBFS8=)
                          2: 46AOUfQolDshFKPEXQ1TmfsCBaE.roa (hash: 9KDbaABD/AWMnTzxrxma8b60bW9b3hzOwcJWn4VEz7M=)
                          3: eLtqqzfmHaENjrYjDWaZNiVaiNM.asa (hash: 3qdH7YILG+mohvpaVfJujhp0nSwMuCtR0l4DOroE8fE=)
                          4: lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa (hash: xyC0OirskdCSUadmtCeoUwblgPmS4gYDwVr6k8DHX9w=)
                          5: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: 90e5++sF/XRyu2+mg4cjc6vb6Z3WT+710PkJTk1TMto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:40:c4:d9:03:37:b8:88:28:60:2f:8a:9e:de:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
        Validity
            Not Before: Sep 25 12:02:41 2026 GMT
            Not After : Sep 26 12:02:41 2026 GMT
        Subject: CN=b68bac5fe8943a0c3fb1b54f884d21c127b54589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:33:09:d1:57:c1:35:63:bd:bc:2f:c0:c8:
                    5f:a9:d2:00:5d:f7:5d:2e:92:8c:35:f2:fe:64:28:
                    fa:99:ff:ae:b9:73:e9:50:c8:6d:0d:f9:bd:2c:0b:
                    12:96:55:89:2d:8c:d2:e2:70:9a:b3:af:85:11:54:
                    21:01:81:4d:c1:9f:c3:a1:ee:af:ca:00:a7:29:a2:
                    d8:99:39:dd:92:86:9c:f0:9f:c4:9e:56:b6:2d:85:
                    fb:92:8c:f1:73:25:65:28:ab:f8:62:b5:bf:71:8f:
                    26:93:56:e3:19:6f:12:f8:08:1f:ac:8f:48:85:56:
                    5d:21:61:59:c5:49:d0:ad:fc:c7:ab:90:c2:da:9f:
                    48:bc:7f:02:20:80:96:de:e5:2f:25:11:bc:f2:a1:
                    94:9b:3a:5b:a8:68:95:27:75:73:d4:2d:17:42:fc:
                    d2:2a:a9:99:b1:a2:f4:bf:98:21:de:92:32:e4:52:
                    d2:09:b0:bd:d3:a5:e5:70:55:85:a7:cb:87:5c:5a:
                    16:53:0c:3b:f8:1f:26:65:19:54:6e:49:0f:e3:95:
                    94:08:d3:66:e1:6b:5d:67:72:55:2f:35:89:c7:ea:
                    15:e2:19:bd:4d:32:96:03:d5:3a:df:fe:7b:59:6c:
                    3c:1c:a3:c9:07:54:91:6c:e8:ae:92:0b:4d:e9:7a:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8B:AC:5F:E8:94:3A:0C:3F:B1:B5:4F:88:4D:21:C1:27:B5:45:89
            X509v3 Authority Key Identifier:
                keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:26:7c:f0:44:dc:76:b1:e5:4d:3e:3d:12:8c:69:cf:60:
         cc:ca:ba:02:ef:35:7d:ef:99:75:a2:9e:ff:90:e8:bd:a6:13:
         81:0b:cc:87:dd:f2:50:30:3e:1a:ab:43:0b:c0:22:b7:bc:1f:
         bb:1c:d7:0c:c3:96:91:d0:0f:9f:e2:4a:da:68:ef:e9:f8:ee:
         f8:fd:c0:9c:ce:8c:69:28:bd:0b:bd:3d:7e:9d:55:9c:d7:7a:
         a0:69:f8:8d:52:d7:f7:e2:e7:ea:11:92:19:b5:48:2f:d6:93:
         7e:dc:f4:e9:c9:19:82:8a:9f:80:66:81:42:56:61:7e:54:d1:
         7e:b6:93:b4:01:bb:1d:e0:e9:d8:21:f0:5a:d6:b2:87:f0:7d:
         09:23:9a:df:1a:d7:02:1a:cb:1e:02:8e:c3:50:33:43:e4:16:
         19:5e:6e:b7:4c:78:05:94:a9:c9:e5:86:d4:a9:cd:8d:09:06:
         37:58:f8:60:a3:04:05:39:6d:24:79:d6:75:91:b9:19:65:67:
         cc:36:14:95:b4:99:30:75:8f:a8:07:a7:d0:79:e5:c8:a6:59:
         ba:72:69:4c:5b:51:df:e9:f6:06:0c:69:8e:31:ba:93:18:65:
         ce:05:cc:dc:91:10:e6:7a:40:41:fb:78:5c:90:14:d8:b5:82:
         cd:52:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:43:20 2026 by rpki-client