Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File:                     Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier:          npRttJV02i8LaURsjP6FDsn/i68vvLPvSDrTQTkje48=
Subject key identifier:   11:77:EB:F4:27:F0:5E:36:E4:37:4D:4D:9E:0B:BB:DE:40:AB:43:34
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer:       /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial:       01A0EBF94D1906539846604C91D52A8A95D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number:          1A8D
Signing time:             Tue 29 Sep 2026 07:02:58 +0000
Manifest this update:     Tue 29 Sep 2026 07:02:58 +0000
Manifest next update:     Wed 30 Sep 2026 07:02:58 +0000
Files and hashes:         1: Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa (hash: m4lMqUG0bdl6WZJBNR/JE1WP+BWFScOk7QdsyR0VQzU=)
                          2: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: 8uZ3JW/gQ+4yi+Td+J9TjU+WvrPBgXIUx284Q53uYQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:f9:4d:19:06:53:98:46:60:4c:91:d5:2a:8a:95:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
        Validity
            Not Before: Sep 29 07:02:58 2026 GMT
            Not After : Sep 30 07:02:58 2026 GMT
        Subject: CN=1177ebf427f05e36e4374d4d9e0bbbde40ab4334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:66:3c:66:76:5b:61:41:75:0f:78:3d:53:08:
                    33:a4:c9:19:4f:2d:cc:99:53:85:e1:f2:ff:cd:e9:
                    51:48:57:dc:95:30:b6:e0:68:a3:ee:30:d4:df:b0:
                    a0:c4:ff:d0:f9:5b:78:82:85:27:99:b9:af:43:06:
                    56:f5:14:2b:44:a1:76:11:75:be:7b:55:5b:ce:f4:
                    4a:28:98:9e:b7:69:02:3f:57:b4:cd:19:68:be:45:
                    71:85:89:b5:3a:10:a4:22:c6:da:6c:c1:f4:96:3f:
                    76:a7:4a:fb:1a:8b:54:d9:73:db:72:c8:1b:1c:78:
                    7a:69:f7:3f:30:1e:a5:ce:25:37:26:46:34:9e:cc:
                    8c:70:cd:39:a5:47:6f:e5:95:23:ec:88:4e:fa:7a:
                    b1:96:4f:35:31:17:c5:b6:e1:35:a8:59:70:6c:1a:
                    7d:46:3a:b9:92:39:6d:22:46:33:42:d7:f3:ba:ef:
                    5c:f7:6d:28:28:bc:cb:77:6f:51:15:7e:ac:4e:d4:
                    2f:fe:ba:c0:5d:ff:4b:36:fc:5f:71:68:06:13:39:
                    cd:b4:85:50:f3:85:3e:1e:0c:28:90:e7:bf:52:6b:
                    5e:42:26:4a:a3:57:56:f5:07:ca:6a:88:66:3c:82:
                    bb:30:fc:e7:56:af:e9:8c:41:86:c3:56:b0:c4:8b:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:77:EB:F4:27:F0:5E:36:E4:37:4D:4D:9E:0B:BB:DE:40:AB:43:34
            X509v3 Authority Key Identifier:
                keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:aa:93:9c:d3:9c:b7:1b:23:f1:44:cd:78:0d:65:25:ed:
         db:87:ac:b9:78:9d:da:a1:9e:9e:00:29:97:13:07:bf:23:ff:
         1e:c7:28:5e:70:b6:06:8d:36:2d:f8:9c:75:81:30:e4:60:fe:
         ff:0a:31:1e:68:92:d2:dd:c8:05:a5:4a:4a:3b:de:12:0a:9a:
         c2:4f:b5:5a:16:02:15:02:5f:e7:ee:f9:f5:c6:ff:c2:df:84:
         8f:f1:f7:0f:6f:89:22:03:ac:96:c1:5f:0a:02:56:96:3d:63:
         e1:43:4e:16:54:fd:67:27:a1:63:29:00:16:7b:05:39:d9:91:
         1e:7a:f6:72:9b:2b:1b:db:fd:a8:dd:7b:8f:b8:e9:6d:64:d8:
         ac:f5:d9:e8:f2:04:f8:d6:61:40:03:0a:1a:6b:8c:36:37:d5:
         54:f2:21:c1:0e:c3:8b:e7:f9:2a:61:7c:1a:0f:96:7b:7b:33:
         ee:a9:85:de:64:74:34:e5:cd:52:38:9e:87:bb:9e:63:9e:af:
         d6:62:20:f7:85:40:f5:55:41:70:e2:c2:a5:d4:9f:28:1d:ef:
         81:c6:da:87:71:08:a1:4d:db:1d:ba:05:eb:a7:58:9f:58:90:
         2a:c6:78:a4:08:cd:00:89:ab:be:d5:67:93:86:62:2a:90:73:
         1b:92:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:19:47 2026 by rpki-client