Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          Y5UyrDvyFS26Coymsd4mX2rrJvSQm+zhW/XNPtOHXBs=
Subject key identifier:   0C:41:03:90:77:40:91:18:D6:95:9B:F5:34:D0:D1:42:17:65:80:74
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       01A0EB8A153EF2E2F0433A408190DFF808B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          09B5
Signing time:             Tue 29 Sep 2026 05:01:30 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:30 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:30 +0000
Files and hashes:         1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
                          2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: JAeRHlO4l4WGgI7GG0339kFULvBfnIcBy5En0mPJGz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:8a:15:3e:f2:e2:f0:43:3a:40:81:90:df:f8:08:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Sep 29 05:01:30 2026 GMT
            Not After : Sep 30 05:01:30 2026 GMT
        Subject: CN=0c41039077409118d6959bf534d0d14217658074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:38:ce:d3:b9:62:d9:b9:c0:a8:09:09:c5:
                    ce:5e:c1:43:a8:97:40:f3:cb:97:56:c1:6a:3d:55:
                    b9:09:10:87:a1:59:bb:ad:94:7a:4a:cd:36:a8:88:
                    14:4e:92:16:ab:37:e1:0c:ed:d0:ed:17:a5:79:75:
                    44:9c:10:bb:5f:cb:7b:35:38:e4:2d:e0:16:9a:b4:
                    db:fd:82:66:dc:a4:28:e8:cd:dd:7d:8a:fa:06:68:
                    1a:38:f0:80:95:a8:55:18:b7:60:b6:96:a1:7e:62:
                    6f:bb:34:dc:3b:78:3a:e5:e9:14:1a:ee:b2:8c:c2:
                    10:77:3e:46:e4:70:30:09:17:d7:03:c6:29:46:b4:
                    c5:fc:9b:a0:b9:6a:20:63:28:af:6a:cd:81:2a:3c:
                    d3:41:a5:28:63:d8:25:f2:08:1a:9a:fd:27:d7:80:
                    69:d0:df:be:60:2b:59:5b:a4:b0:fc:98:5a:6d:f5:
                    04:a7:69:b1:68:2e:ad:3c:a0:4e:62:b9:0f:22:65:
                    13:c7:ba:65:16:ec:4d:17:1c:5f:4a:c2:50:2b:bd:
                    91:f5:e3:24:c3:eb:3f:ac:fd:01:dc:69:c4:c0:60:
                    0f:bb:f6:27:1c:06:a0:a2:9e:b7:a0:0c:1a:d1:84:
                    6f:2c:cd:b3:42:f4:df:30:d9:9d:43:03:0a:ba:b1:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:41:03:90:77:40:91:18:D6:95:9B:F5:34:D0:D1:42:17:65:80:74
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:b0:6c:e4:be:75:f6:e6:98:ef:64:88:1d:ec:f7:a0:28:
         62:05:a7:f3:25:4f:98:b3:03:37:b9:ef:53:8b:07:0d:ba:00:
         b0:71:de:f1:ea:e0:8f:11:03:57:05:ba:0c:61:b7:2d:a6:3e:
         36:e1:e3:45:ac:80:75:4b:6d:4e:77:49:3a:84:55:52:92:c7:
         7d:d5:cf:8a:76:69:7c:db:62:3b:c4:f7:d2:e6:48:84:fa:8f:
         01:dd:1a:f5:bb:fd:bb:c9:ac:e4:4e:47:ac:46:64:88:99:e1:
         62:a7:31:0c:87:76:61:c1:19:b1:0f:5d:95:5e:4d:dd:84:f2:
         5a:ac:5a:ff:41:a9:bb:22:21:ef:3e:87:6e:29:93:25:0b:98:
         6b:b0:a3:fe:76:8d:4f:6a:57:94:2b:f0:87:8c:74:a7:0a:bd:
         21:64:8f:40:63:7b:e1:40:2d:49:9a:4c:1e:18:3a:02:0a:21:
         1a:0b:f3:c3:91:02:b5:9e:5c:08:c8:cd:6e:95:29:17:83:6f:
         72:0b:77:0d:4c:5d:98:64:38:6b:d5:9e:ba:35:d6:95:06:c2:
         54:33:79:3f:eb:c8:f6:ec:2e:e9:84:bd:39:7e:c5:85:d6:cb:
         bb:33:bb:a2:ca:ac:bf:7d:1c:ac:04:29:b6:83:13:05:1a:0e:
         a4:49:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:20:56 2026 by rpki-client