Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
File:                     Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json)
Hash identifier:          p+ZlNVbisf0Kh0d1yMKFvXxpFSeYdfOkFlLnQqLzE8U=
Subject key identifier:   34:44:C6:A5:B6:2B:5E:8F:18:40:FF:70:23:C5:13:A7:8A:43:92:4F
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Certificate issuer:       /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial:       01A0D15BD01819761DAE8D985474445B1569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
Manifest number:          1ABE
Signing time:             Thu 24 Sep 2026 03:00:50 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:50 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:50 +0000
Files and hashes:         1: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (hash: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno=)
                          2: BgYgNXUiTeu31n67bX2V90cAvTI.roa (hash: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=)
                          3: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: tiA4P5xSgq6peLEXzdjcHKuMj2Bgfs722CwiQEMURf8=)
                          4: _KGGRE3h2YqKAa5plM_mCfMJBv8.roa (hash: 0ajoljFZeE+fI9LUdEUozfgpjrtBS3fcIVPaSye39JE=)
                          5: eqjRIQl2tcvdRn0WGpqecEf39BE.roa (hash: wo1ZcMLEQzOlMVuGPZQ1qvLlzhW3e3KGV8eqOLVncZU=)
                          6: r4LSjefpPXh2NBWzmzML-YHCiVQ.roa (hash: 4cwAGYLXFcCvXhQaffPoqSeBEp85Obiw6bTDloA68I0=)
                          7: v988XuaULyoop9LUwUQjOW9deNI.roa (hash: SDvqBvv6PpnYkWcvZyzQiEVAzNQK0geVDH/Q3TfcG6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:d0:18:19:76:1d:ae:8d:98:54:74:44:5b:15:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
        Validity
            Not Before: Sep 24 03:00:50 2026 GMT
            Not After : Sep 25 03:00:50 2026 GMT
        Subject: CN=3444c6a5b62b5e8f1840ff7023c513a78a43924f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:f6:cf:13:a2:ff:65:cd:c3:14:c9:9b:df:
                    8d:d0:92:0b:97:e0:da:97:d7:da:2a:82:8e:b8:e8:
                    de:91:29:c2:44:b6:a3:9b:a3:52:aa:24:c9:cf:c3:
                    bd:30:b7:7a:8b:e3:5e:76:47:13:1d:14:5c:26:ea:
                    ba:3b:2c:7c:e7:1a:4a:92:d9:21:68:b6:04:3e:79:
                    e0:a9:d9:78:51:46:9f:e8:6e:02:07:f3:70:d4:93:
                    ce:9b:7d:2c:04:11:dd:b2:21:b5:d8:4c:20:77:bd:
                    e8:e4:75:b8:1a:79:91:3c:a4:f4:7b:b5:01:e2:56:
                    25:90:1a:e6:9b:d2:fb:e7:da:a3:ce:5f:ee:d0:35:
                    f3:ba:ae:d1:19:b2:ca:9d:8d:91:6e:db:08:77:eb:
                    36:f5:33:c1:43:63:cb:a2:1e:24:d6:17:48:ea:5e:
                    19:11:f6:0b:9b:71:8e:8d:80:36:4d:f1:1a:e0:c5:
                    d4:a5:98:95:c5:81:8b:f6:86:6e:88:1d:bb:00:ea:
                    06:e9:65:0f:cc:93:f7:94:71:68:9b:89:de:23:72:
                    b5:fc:19:80:26:97:2e:5e:61:5c:8a:cc:4b:36:c7:
                    f6:04:6a:d0:77:5c:cb:f6:12:e3:9e:b8:16:0a:fa:
                    69:a0:fd:8d:bd:73:8a:93:84:4c:12:cb:f4:6f:95:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:C6:A5:B6:2B:5E:8F:18:40:FF:70:23:C5:13:A7:8A:43:92:4F
            X509v3 Authority Key Identifier:
                keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:56:41:6e:e4:d5:ec:eb:5f:3b:0e:ea:ba:9c:2d:5f:c4:e7:
         b3:a1:a2:9e:33:9b:b2:c7:c9:17:1a:75:b0:71:35:37:59:19:
         97:e6:85:19:21:07:7a:ad:16:00:05:0b:f9:a0:52:40:4b:17:
         45:4b:9e:2b:95:28:41:31:b8:4f:00:20:49:c6:cf:2d:10:c7:
         75:64:3d:af:fa:90:42:fb:e3:c8:4b:55:45:a4:11:e6:5f:63:
         7d:24:77:3f:78:a4:da:29:9a:d6:1f:4f:54:d8:d7:47:33:9f:
         cd:30:5d:52:41:34:b2:f0:b0:e6:9e:d8:17:13:8e:ab:70:46:
         79:0d:bc:ec:41:14:7b:0d:83:92:67:36:a0:d5:eb:c5:ac:10:
         10:30:1d:ef:08:4c:66:3d:3c:07:83:0a:4a:b1:78:13:05:09:
         43:a3:aa:94:02:b1:ca:ed:41:a0:84:e5:a4:77:60:64:58:05:
         77:24:ef:a0:50:5f:8c:0c:ee:bd:9f:9f:35:8e:31:5c:1c:99:
         aa:ac:e0:b4:3d:90:58:5b:eb:ef:2e:53:5b:0c:e5:d8:6f:73:
         d8:95:83:b3:58:1c:11:94:a2:dd:5d:d9:87:6a:13:c5:fd:0b:
         e4:c1:30:77:ea:cc:09:62:3c:e2:7e:b2:04:a6:f9:80:a5:22:
         2e:f9:ac:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW9AYGXYdro2YVHREWxVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjYwOTI0MDMwMDUwWhcNMjYwOTI1MDMwMDUwWjAzMTEwLwYDVQQD
EygzNDQ0YzZhNWI2MmI1ZThmMTg0MGZmNzAyM2M1MTNhNzhhNDM5MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WT2zxOi/2XNwxTJm9+N0JILl+Da
l9faKoKOuOjekSnCRLajm6NSqiTJz8O9MLd6i+NedkcTHRRcJuq6Oyx85xpKktkh
aLYEPnngqdl4UUaf6G4CB/Nw1JPOm30sBBHdsiG12Ewgd73o5HW4GnmRPKT0e7UB
4lYlkBrmm9L759qjzl/u0DXzuq7RGbLKnY2RbtsId+s29TPBQ2PLoh4k1hdI6l4Z
EfYLm3GOjYA2TfEa4MXUpZiVxYGL9oZuiB27AOoG6WUPzJP3lHFom4neI3K1/BmA
JpcuXmFcisxLNsf2BGrQd1zL9hLjnrgWCvppoP2NvXOKk4RMEsv0b5UHsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRExqW2K16PGED/cCPFE6eKQ5JPMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlZBbuTV
7OtfOw7qupwtX8Tns6GinjObssfJFxp1sHE1N1kZl+aFGSEHeq0WAAUL+aBSQEsX
RUueK5UoQTG4TwAgScbPLRDHdWQ9r/qQQvvjyEtVRaQR5l9jfSR3P3ik2ima1h9P
VNjXRzOfzTBdUkE0svCw5p7YFxOOq3BGeQ287EEUew2Dkmc2oNXrxawQEDAd7whM
Zj08B4MKSrF4EwUJQ6OqlAKxyu1BoITlpHdgZFgFdyTvoFBfjAzuvZ+fNY4xXByZ
qqzgtD2QWFvr7y5TWwzl2G9z2JWDs1gcEZSi3V3Zh2oTxf0L5MEwd+rMCWI84n6y
BKb5gKUiLvmsLg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:08:39 2026 by rpki-client