Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File:                     Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier:          biHY2JDcT2b/2dHvQE1V8KbIsHW8YgAcMreLlLq3ofE=
Subject key identifier:   7B:58:B3:EB:FC:B0:FD:A7:51:6C:51:2C:A7:55:C2:30:68:B3:30:7A
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer:       /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial:       01A0D38368B1B4E9022A8D95481CC25F66F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number:          1A72
Signing time:             Thu 24 Sep 2026 13:03:19 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:19 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:19 +0000
Files and hashes:         1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: 4io9FQeXgfIyZIGaE5phbc0mane7AlPXaJYpDNopjYk=)
                          2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:68:b1:b4:e9:02:2a:8d:95:48:1c:c2:5f:66:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
        Validity
            Not Before: Sep 24 13:03:19 2026 GMT
            Not After : Sep 25 13:03:19 2026 GMT
        Subject: CN=7b58b3ebfcb0fda7516c512ca755c23068b3307a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:a9:6c:2a:d3:53:e1:46:bb:7e:b1:25:70:
                    37:f0:23:bf:c1:47:59:6c:95:d0:f2:24:59:de:60:
                    2b:2c:66:e6:68:fd:b7:4b:42:8e:17:a4:47:f8:dc:
                    f2:85:05:87:3d:59:18:0c:3a:3f:e5:0a:e7:1a:e6:
                    14:89:35:cf:3e:18:f4:0c:c0:28:76:9b:d9:92:0f:
                    94:a1:c6:06:71:d4:52:89:b7:53:a0:42:db:7a:80:
                    8e:4a:05:c9:84:ba:82:0d:8c:cd:b6:28:01:29:38:
                    04:49:15:63:51:47:13:a7:48:09:c2:6d:ad:27:92:
                    ff:97:65:5d:b5:52:a5:1d:9e:f4:24:19:ce:92:de:
                    03:67:bc:6c:5e:35:bc:33:6a:73:4e:36:95:a3:a9:
                    c4:df:5d:d6:6b:33:bd:e9:c7:55:fd:93:ea:8d:a0:
                    95:c0:42:5d:56:72:9c:7c:79:9d:f6:08:a2:37:b0:
                    29:ee:ab:52:19:a0:a2:b8:e3:59:23:f9:9e:55:fe:
                    38:0d:a7:d0:18:b4:e6:a9:93:f2:b0:1a:ff:d2:df:
                    af:aa:20:8b:63:3a:01:0a:0e:0f:12:15:46:88:11:
                    72:59:8e:a4:02:10:80:ad:98:b5:22:70:9a:ed:c1:
                    e9:75:0e:c3:5c:1e:71:67:66:8f:00:9f:ce:65:bb:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:58:B3:EB:FC:B0:FD:A7:51:6C:51:2C:A7:55:C2:30:68:B3:30:7A
            X509v3 Authority Key Identifier:
                keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:6a:5f:01:51:e4:2d:0d:65:59:ac:d7:f2:04:6f:e0:e2:
         e3:4d:ff:1c:ec:02:a4:5c:b2:a5:fb:53:74:3a:82:6f:a3:02:
         f7:c4:40:a2:92:a8:a1:3e:35:e2:a8:96:8b:9a:20:52:90:12:
         58:46:e3:8d:7b:ee:7a:b2:78:3f:70:0c:36:c1:82:fd:2b:62:
         0f:5f:1f:f7:ae:f6:b2:ca:b0:9e:b8:b4:5e:7c:ac:18:e2:03:
         f1:71:90:68:d8:22:f1:52:2c:a8:2d:89:f1:06:70:87:97:24:
         a9:c0:3a:4c:bb:d9:ed:e7:53:62:91:98:a1:3a:21:17:d7:04:
         5e:0c:34:71:a7:b5:45:f4:f8:fd:b4:e3:96:23:37:64:9a:df:
         a9:6b:56:47:3b:41:35:82:24:8a:54:a0:5e:7e:30:e8:2d:cc:
         8b:de:f3:ea:28:80:a1:49:31:f1:30:ee:b1:98:40:9e:c5:1f:
         e0:2d:62:7c:84:0c:10:7d:16:55:1e:3d:10:8c:dd:85:e6:a0:
         48:af:23:bf:ee:c8:f0:d8:81:cb:d4:a5:3b:f3:4a:c2:30:df:
         2c:b3:f1:89:3d:1f:f3:d9:3c:85:90:1a:cc:33:09:f1:48:a1:
         1e:6b:57:a6:f0:20:3c:4b:99:5e:c9:9d:48:8a:9e:cf:4b:3f:
         11:40:89:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg2ixtOkCKo2VSBzCX2b0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl
NGRkNmMwHhcNMjYwOTI0MTMwMzE5WhcNMjYwOTI1MTMwMzE5WjAzMTEwLwYDVQQD
Eyg3YjU4YjNlYmZjYjBmZGE3NTE2YzUxMmNhNzU1YzIzMDY4YjMzMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw6pbCrTU+FGu36xJXA38CO/wUdZ
bJXQ8iRZ3mArLGbmaP23S0KOF6RH+NzyhQWHPVkYDDo/5QrnGuYUiTXPPhj0DMAo
dpvZkg+UocYGcdRSibdToELbeoCOSgXJhLqCDYzNtigBKTgESRVjUUcTp0gJwm2t
J5L/l2VdtVKlHZ70JBnOkt4DZ7xsXjW8M2pzTjaVo6nE313WazO96cdV/ZPqjaCV
wEJdVnKcfHmd9giiN7Ap7qtSGaCiuONZI/meVf44DafQGLTmqZPysBr/0t+vqiCL
YzoBCg4PEhVGiBFyWY6kAhCArZi1InCa7cHpdQ7DXB5xZ2aPAJ/OZbtmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtYs+v8sP2nUWxRLKdVwjBoszB6MB8GA1UdIwQY
MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt
MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm
LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUztqXwFR
5C0NZVms1/IEb+Di403/HOwCpFyypftTdDqCb6MC98RAopKooT414qiWi5ogUpAS
WEbjjXvuerJ4P3AMNsGC/StiD18f9672ssqwnri0XnysGOID8XGQaNgi8VIsqC2J
8QZwh5ckqcA6TLvZ7edTYpGYoTohF9cEXgw0cae1RfT4/bTjliM3ZJrfqWtWRztB
NYIkilSgXn4w6C3Mi97z6iiAoUkx8TDusZhAnsUf4C1ifIQMEH0WVR49EIzdheag
SK8jv+7I8NiBy9SlO/NKwjDfLLPxiT0f89k8hZAazDMJ8UihHmtXpvAgPEuZXsmd
SIqez0s/EUCJQA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:04 2026 by rpki-client