Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File:                     lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier:          T0tKvJS/4zjGGkuJ2+K5tVDvEGdw57rp8kba94MgLrM=
Subject key identifier:   1B:F8:15:4F:05:81:E5:9F:5A:E0:92:A5:75:35:5F:F1:39:CD:BD:6F
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer:       /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial:       01A0FD594D4576DD6D96B7501150F4886E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number:          1130
Signing time:             Fri 02 Oct 2026 16:01:22 +0000
Manifest this update:     Fri 02 Oct 2026 16:01:22 +0000
Manifest next update:     Sat 03 Oct 2026 16:01:22 +0000
Files and hashes:         1: C463m9ZyZEk3eM2l-6N_RbriHU4.roa (hash: 7UxqANlJ4UF+XXfc6ygm/hisOtlOicfBVxWeVwS1Pqk=)
                          2: cfmv_tc0fZVJXvMbEzxp3huvJQA.roa (hash: 5exQ8N+3HVkALP9EFbCrgal+azdpyvlnwuRFMo6QR2M=)
                          3: itRgULwAbwVfFqgG9Kx01p2QKgY.roa (hash: GVdHMBdMKKywqVWD+wbqJLZMEEEZjb1V4iiL5vClFfE=)
                          4: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: OiPbT7Qkjhmk/rJMPPkl1dLWxIDtWg+5U3laFM67mmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:59:4d:45:76:dd:6d:96:b7:50:11:50:f4:88:6e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
        Validity
            Not Before: Oct  2 16:01:22 2026 GMT
            Not After : Oct  3 16:01:22 2026 GMT
        Subject: CN=1bf8154f0581e59f5ae092a575355ff139cdbd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:d5:85:ea:bc:27:9e:c2:3f:7d:aa:ca:88:
                    b4:d4:5f:cf:19:f2:e4:e8:9f:56:f4:28:2a:fe:a9:
                    18:94:b3:33:d7:a8:6e:fb:3d:33:52:c8:4a:13:23:
                    29:72:f4:61:98:70:9c:a6:c1:28:8f:bd:56:c1:11:
                    7d:ad:c7:70:ae:1f:ab:6d:f3:4d:7b:04:45:74:95:
                    d6:6e:74:07:4d:df:c0:12:0c:61:67:46:7b:14:12:
                    28:3b:11:86:16:52:c8:1e:55:fd:2e:9a:76:7e:0a:
                    29:63:f6:0b:b9:43:d6:84:9b:6b:67:cf:49:4d:35:
                    27:51:e9:32:3d:b3:00:68:dc:84:d8:ac:e7:8f:31:
                    9c:f3:f6:04:6e:c0:17:cb:a8:2b:73:94:c1:fd:3c:
                    fd:da:bd:da:ea:32:4e:75:36:8f:ea:89:e4:ab:64:
                    f6:a8:71:16:fd:29:53:c6:3a:b5:d5:7a:37:dd:f7:
                    de:67:a1:5e:d5:f0:ed:ce:2c:68:1c:c5:2b:80:0c:
                    96:c0:d5:1c:a4:9f:57:44:a4:ff:6e:12:21:7f:a6:
                    37:b6:88:4b:67:b4:42:15:db:21:65:2a:db:e3:dc:
                    0f:dc:bb:98:81:c9:83:d7:39:c6:03:34:a9:95:cd:
                    9c:09:8d:37:f5:77:b5:d0:01:20:33:45:d7:82:61:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F8:15:4F:05:81:E5:9F:5A:E0:92:A5:75:35:5F:F1:39:CD:BD:6F
            X509v3 Authority Key Identifier:
                keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:6a:f3:6d:99:a3:cc:b3:38:73:1a:38:4c:74:eb:87:bd:
         ff:b8:f4:0d:ab:3f:d9:65:f1:4e:aa:81:8d:fe:4e:3e:68:67:
         0b:39:01:4b:db:e8:2c:5b:92:b4:8b:f3:51:1b:10:ca:22:10:
         de:f8:42:2a:8d:ef:bd:f3:f7:43:cf:17:db:61:14:d0:9b:1d:
         5d:55:87:32:1b:0e:4a:b8:76:d5:65:a5:eb:15:c4:57:46:49:
         22:49:a8:e9:96:21:be:b3:89:77:09:78:db:87:b4:61:69:d3:
         65:99:68:a8:0f:f4:1a:22:52:0d:c0:6d:da:37:8e:fd:0d:0f:
         e3:ab:1f:cb:de:72:cf:ea:65:4d:01:1c:e1:6e:f6:c5:73:f4:
         95:1e:d5:9e:8a:3b:7a:bc:c4:0d:7b:91:b9:18:fc:89:e6:30:
         03:84:ff:7c:4c:4a:17:44:68:a6:94:00:77:c9:bf:f7:73:f7:
         5d:c2:c4:13:ca:e0:f4:cb:2c:28:56:a9:10:2c:9c:19:e6:97:
         da:c0:5a:73:bb:7e:20:a5:52:0e:70:60:fd:28:e1:b1:1d:70:
         4a:20:80:82:1e:7f:61:12:82:e6:80:f4:55:b6:19:3b:df:2b:
         35:d0:c2:c3:f3:6d:ef:cf:be:3f:75:28:2e:69:37:b9:b9:f5:
         5b:06:87:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 05:49:05 2026 by rpki-client