Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File:                     zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier:          dx4QADpN9ydryF6JFE0vVHbBV7wbl8/HTX/DNOTb1rg=
Subject key identifier:   5E:66:7B:72:96:9D:47:06:EA:EB:27:1A:87:75:DB:40:B1:85:A1:EB
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer:       /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial:       01A0DFBC5EB58C88133A1B6AA8CA54C14D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number:          1A74
Signing time:             Sat 26 Sep 2026 22:00:59 +0000
Manifest this update:     Sat 26 Sep 2026 22:00:59 +0000
Manifest next update:     Sun 27 Sep 2026 22:00:59 +0000
Files and hashes:         1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=)
                          2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: WSEMmoJQ6A4quJUZJU+Se3aLpWf9x0bzF/06nMpR4f0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:5e:b5:8c:88:13:3a:1b:6a:a8:ca:54:c1:4d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
        Validity
            Not Before: Sep 26 22:00:59 2026 GMT
            Not After : Sep 27 22:00:59 2026 GMT
        Subject: CN=5e667b72969d4706eaeb271a8775db40b185a1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:e8:f6:89:a8:ae:8a:1e:1e:8a:ac:8c:74:
                    7d:63:f8:3f:dc:92:7b:18:4b:d4:02:b1:2c:a9:ba:
                    e8:b3:b0:bc:31:c5:92:4d:60:c1:14:c0:85:b4:73:
                    40:ef:6b:23:aa:0f:63:65:b8:a7:3c:79:a6:c7:51:
                    0c:55:9c:e8:7d:4b:7b:b2:36:78:b4:70:01:d1:4a:
                    62:1f:9e:30:b9:d4:aa:e7:8e:8f:87:32:54:f1:33:
                    84:e9:c0:eb:94:08:3b:5f:a2:56:3a:d3:3b:45:3c:
                    55:b6:4d:f5:5f:fb:16:d0:95:18:bb:84:66:7c:46:
                    9a:fb:3f:89:63:86:53:41:fe:7f:97:af:75:a4:95:
                    df:fa:10:84:57:c6:70:86:65:3f:99:66:89:8f:f0:
                    0c:4e:cc:d9:68:bf:fb:42:6e:e0:f8:0b:13:b7:29:
                    90:f6:d3:19:4e:38:52:02:58:59:f0:59:55:11:1c:
                    44:15:b6:7e:7b:73:34:4c:59:f2:36:e2:2d:13:4b:
                    eb:1e:c0:49:e2:c3:7d:c2:84:2d:7f:14:58:f2:ee:
                    42:77:2e:bd:3e:f9:c4:85:d0:e2:24:96:c7:61:63:
                    c2:3f:51:d8:ec:ed:a9:fe:29:92:f2:e5:69:74:4e:
                    8c:15:e4:9b:41:d2:16:0d:db:8f:45:24:4a:49:c0:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:66:7B:72:96:9D:47:06:EA:EB:27:1A:87:75:DB:40:B1:85:A1:EB
            X509v3 Authority Key Identifier:
                keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:04:27:38:68:94:2c:fc:c1:5a:4e:64:a0:49:79:68:05:8e:
         7e:6b:af:25:0f:4c:72:96:2f:6f:cb:e3:70:f0:54:25:95:ec:
         c7:d8:55:a1:80:ef:f7:7c:b3:f7:85:e5:5c:af:30:85:87:d6:
         4f:b8:d6:56:ad:85:39:2e:16:0b:d4:15:17:2d:70:5b:e7:b5:
         45:44:da:18:f0:c6:1e:1b:42:f7:a8:dd:3d:80:c4:a0:f7:42:
         96:89:82:70:47:f4:5b:b3:80:4e:54:ef:06:4c:79:74:7e:48:
         d6:b0:07:b2:3b:ce:88:d2:4c:3e:1f:fc:9b:7e:89:7b:25:a6:
         0e:51:3b:c1:77:be:65:a1:65:54:bf:2f:e3:ed:73:71:7c:45:
         26:df:12:de:17:46:e7:85:de:c1:d0:52:9a:13:e6:f7:bd:a4:
         81:10:69:5f:f6:b8:3a:1c:dd:5a:6a:42:c4:9b:8d:de:4d:aa:
         a3:f8:62:ec:79:31:59:b4:6a:c4:84:bc:c2:a8:c8:32:f1:39:
         8f:c3:42:8f:91:a3:5f:38:67:bd:fb:25:f1:c2:f0:bb:2a:34:
         0e:5c:9a:19:8d:b5:be:bc:00:5c:56:93:83:2d:a8:10:04:ff:
         c7:e0:95:c2:a0:9e:1e:be:8a:66:ae:f3:20:bc:04:90:9d:4c:
         58:43:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:52:06 2026 by rpki-client