Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File:                     zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier:          YU+JG3vj2ehg5MNj8KjPVUV6CxLfg72VaYNdlzE76b8=
Subject key identifier:   3C:01:CC:FC:11:95:58:F5:AB:F5:CE:7A:BE:A1:5E:BD:4F:D1:A8:9E
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer:       /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial:       01A1DE02B772CB56A0F1C30CD1CE0BBDBB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number:          0274
Signing time:             Sun 15 Nov 2026 07:01:22 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:22 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:22 +0000
Files and hashes:         1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
                          2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: 1L0TLqirYY5h/d+w/Ibk9ig9NghllPtXAiwi5hxUf2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:b7:72:cb:56:a0:f1:c3:0c:d1:ce:0b:bd:bb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
        Validity
            Not Before: Nov 15 07:01:22 2026 GMT
            Not After : Nov 16 07:01:22 2026 GMT
        Subject: CN=3c01ccfc119558f5abf5ce7abea15ebd4fd1a89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:43:41:f9:19:2c:fb:31:b0:13:b9:00:31:a0:
                    9f:42:3a:98:0f:e2:28:d8:54:88:3e:74:ea:b1:d2:
                    0a:29:74:62:ac:82:af:e0:9d:7f:d9:c4:0e:44:b1:
                    6a:91:45:19:4e:94:ba:da:86:f9:ab:9c:ae:1e:dd:
                    e9:ec:1c:26:ce:b4:b9:7e:38:10:a1:b6:f2:30:7a:
                    94:ba:6d:76:fb:0a:83:3e:b6:53:ea:3f:b5:49:73:
                    36:62:b3:2b:5a:4f:c6:52:a4:11:c1:aa:9f:7a:04:
                    6d:41:a7:31:7d:31:ff:63:02:c1:67:24:ef:4d:75:
                    28:b9:e4:09:6a:5f:50:52:91:fe:3c:a1:98:56:81:
                    16:1a:e9:22:03:4b:e8:a2:ec:ed:87:6e:a0:f7:87:
                    6d:06:35:3f:1a:17:f0:9b:ed:a6:94:00:6d:f9:71:
                    83:0e:92:68:b3:a9:ac:25:e9:9e:f7:8a:7b:07:a6:
                    a8:7d:dd:15:4c:ec:33:7a:38:d0:2c:b8:e3:a0:c9:
                    2d:a2:b7:60:5e:1a:da:1c:c8:e0:8f:c2:1f:35:42:
                    ef:7a:c0:2d:83:a5:e3:26:23:1f:b5:7f:51:8d:ce:
                    99:fc:d5:4c:1d:9d:f7:34:88:e9:0b:75:8a:a4:f4:
                    6f:b6:62:e9:b7:b8:e7:69:cf:e1:2e:fd:51:2f:f9:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:01:CC:FC:11:95:58:F5:AB:F5:CE:7A:BE:A1:5E:BD:4F:D1:A8:9E
            X509v3 Authority Key Identifier:
                keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:4a:eb:44:2d:6f:f4:00:35:59:96:a0:d8:4b:34:5a:75:
         72:d4:b1:db:c0:60:3a:16:70:bb:82:4c:77:16:09:d4:00:7c:
         03:0d:5a:76:93:4b:50:bb:82:84:1d:be:9f:d4:c2:d9:6b:38:
         78:2d:b7:d4:1d:14:f1:e6:58:9d:08:a1:e6:e0:39:50:e9:10:
         28:f0:c5:bf:e7:92:b8:3e:34:18:3b:df:d3:2a:0a:25:93:24:
         a7:e4:56:63:45:24:a2:8a:45:cb:26:aa:6b:ad:50:71:0e:d1:
         32:e0:d9:fe:5c:33:2a:32:9d:0a:6c:7f:a2:a8:24:06:2b:ac:
         4b:a9:d4:64:d8:f5:e1:06:b1:c2:19:c5:71:04:2d:81:30:03:
         aa:bf:ed:1a:68:4a:d9:7c:d1:5a:96:13:c2:f3:7b:db:e0:8c:
         8d:37:ba:8d:bf:a2:87:13:bb:51:64:1c:1e:55:23:1c:85:cb:
         4b:5b:f6:04:4f:f1:c0:bd:ef:29:ad:a1:df:a1:7d:60:2a:d6:
         8f:af:46:cf:2b:1e:4c:4a:92:f2:f6:bf:8c:86:59:45:3d:be:
         7e:8f:df:8f:4e:53:f0:4f:9c:4e:b5:df:78:e0:35:34:9e:95:
         db:ed:dc:3c:35:bd:f8:54:7b:e4:b4:00:2b:6a:1d:f1:38:50:
         91:bd:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:38:39 2026 by rpki-client