Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          Y5DaVKThitHVfQONETka9hfLIfZmSt5HuW60fGc6v04=
Subject key identifier:   B1:3D:2B:4D:E1:67:2A:DA:43:25:72:8E:48:4B:AB:27:E5:6C:BE:0C
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       01A0D2105EB8978C5D95F51FD3A1CF3DC85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0D2C
Signing time:             Thu 24 Sep 2026 06:18:03 +0000
Manifest this update:     Thu 24 Sep 2026 06:18:03 +0000
Manifest next update:     Fri 25 Sep 2026 06:18:03 +0000
Files and hashes:         1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
                          2: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
                          3: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          4: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          5: 98oECme-w_GgSaFmZh37RLhYD9g.roa (hash: iPDzJ3v3jfejnPGzBAdLpmHo920TlkgN96SVjOqNj5w=)
                          6: B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa (hash: wSwh8QpiS5FR1lWM/wQRbFfUYho9vYOx2FceddMQvps=)
                          7: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          8: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
                          9: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
                          10: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=)
                          11: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
                          12: SqdW3wEJdQI6pSiu6sKuLSekouM.roa (hash: rTImG/VwG887tYh4ok8g2ubTFK65bX66Ir6rONB+lXc=)
                          13: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          14: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
                          15: XRbYp6FDnp1AtNuZXLrfLub5nuc.roa (hash: SgUgHK8CB2wAUJD4MixZKl+/Cz+SEY/Xajfx5TX1zsA=)
                          16: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          17: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
                          18: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: QGUX4bMayKAqvmLpnbtosI+IYcrh1AL8KlZ7o5yQO/Y=)
                          19: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          20: eEYECPuTAMSxPzkjToe-AsGHG0o.roa (hash: qvifZPjdOwY78+6g7aEHucIxOME1hkTUXil2N+iv3W0=)
                          21: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
                          22: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
                          23: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          24: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          25: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
                          26: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
                          27: rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa (hash: jO75JoginvMuRlRlIbd+oIuJpNIVudUke0+lCckHlKk=)
                          28: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
                          29: urz4_AKUeHVYjJAJbjRXtg7l6R0.roa (hash: Lc5cV4YVr/KMErRPjabqXug9W3uT5uCRR+WjWueC5dU=)
                          30: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
                          31: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=)
                          32: zrPBo584QAwD8wD1UiOiivzG-lY.roa (hash: AG1/xkS8rTZ2sL8uSI3tuRloFXAbUoEivjF0J/Yra5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:10:5e:b8:97:8c:5d:95:f5:1f:d3:a1:cf:3d:c8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Sep 24 06:18:03 2026 GMT
            Not After : Sep 25 06:18:03 2026 GMT
        Subject: CN=b13d2b4de1672ada4325728e484bab27e56cbe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:cc:3f:92:e3:3e:34:b9:9b:5e:24:b2:40:
                    32:d5:e6:56:5e:01:86:19:fd:ce:93:9a:51:22:67:
                    04:9d:b0:35:0c:ef:4e:62:37:4c:51:1b:9b:f0:5b:
                    ba:91:f7:c6:cb:fc:cf:9f:57:e7:de:8d:30:73:4a:
                    dc:b3:e0:04:c3:13:e8:11:e9:ca:29:aa:9d:5c:95:
                    dd:51:89:ec:dd:a6:c1:8a:83:10:27:0a:07:38:c5:
                    1b:11:e5:50:b0:76:96:c2:d7:9c:78:e4:81:26:55:
                    ca:29:2a:47:9b:0a:50:c5:9e:da:ae:c4:ce:39:f0:
                    41:87:98:93:eb:99:b8:83:bf:aa:a8:8e:29:d7:49:
                    be:1d:ab:7e:9e:47:ba:8d:ac:4a:50:8b:d4:19:30:
                    b1:46:7e:64:3a:45:f6:12:12:13:69:0f:37:a5:fd:
                    5b:72:83:5b:df:d1:02:84:14:e0:c5:f2:2d:5d:d7:
                    49:0a:07:3a:72:83:8c:2b:55:b5:66:a6:97:bd:c5:
                    8d:29:b3:d7:c7:9a:b0:e9:f3:72:2c:67:9f:55:da:
                    9c:e4:81:b5:7c:ed:21:ee:98:0d:da:32:c5:11:8e:
                    09:b4:ee:33:81:bc:17:d9:7c:07:04:1d:58:c7:13:
                    ea:0a:9e:8b:1d:8f:64:36:f6:53:23:55:d1:a3:36:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:2B:4D:E1:67:2A:DA:43:25:72:8E:48:4B:AB:27:E5:6C:BE:0C
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1c:c0:11:2d:dc:99:5a:13:89:6c:49:91:e6:55:12:b1:bf:
         d1:49:10:1a:d9:e6:8b:9c:8e:c5:57:5c:91:42:51:60:36:4e:
         c8:0b:c2:8b:7a:0e:6a:2e:4e:70:d6:c9:b9:f5:42:1f:5e:1d:
         50:61:c0:2a:b1:dc:50:c5:20:af:45:25:79:7f:b4:a0:64:40:
         36:61:a5:5c:d4:63:52:41:df:0e:df:85:36:fc:2d:45:fa:ef:
         74:49:98:0d:97:fe:00:00:f0:5d:02:96:ca:5c:69:3f:f0:c5:
         b5:99:69:d6:e6:fc:b5:9b:1e:23:0a:59:98:5d:40:d4:96:64:
         4a:ba:9a:42:30:30:e2:87:cf:d2:8e:bd:6f:0f:a0:02:1b:2f:
         16:c2:40:15:f7:67:17:e9:0c:8c:15:7f:31:d7:a9:21:8e:94:
         51:2f:de:8c:2a:5b:db:5a:f1:85:5d:d7:b0:7b:9c:ec:df:0e:
         9c:72:7c:e3:e4:67:12:fd:57:9f:88:c6:85:de:c3:06:25:67:
         54:d0:20:9d:ca:17:2e:7d:67:0c:24:18:12:94:b4:fe:ae:4b:
         b6:3d:aa:2b:6f:28:08:6a:0e:cd:bb:f2:a2:5e:3c:66:da:fa:
         37:28:5d:a5:13:52:c5:81:9b:86:1e:5b:d7:e9:c6:6c:3e:e6:
         29:b3:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:00 2026 by rpki-client