Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File:                     n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier:          lArhuwbc0BzWrigDqPkuv8pnhDNWF/Jh12nfweRwDNY=
Subject key identifier:   F7:32:75:F4:84:39:4C:77:EA:96:6B:B5:7A:80:F0:BA:AD:16:F6:E7
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer:       /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial:       01A1355A1B28633EB78B1A8A8AF781F46836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number:          1AA4
Signing time:             Tue 13 Oct 2026 13:00:59 +0000
Manifest this update:     Tue 13 Oct 2026 13:00:59 +0000
Manifest next update:     Wed 14 Oct 2026 13:00:59 +0000
Files and hashes:         1: 1-DvdtgWb776R-vxeFJmte5oKNog.roa (hash: U79trVylTaw41dHsIv/e6/kjFAklh1ItFsx5acuYE6Y=)
                          2: LMLTnNGG_mpCcb8xX_bRIdktAnI.roa (hash: mg+RjP9njwHkTHKFXLCklOqta6CcqWTUZ1IVf8HvCmM=)
                          3: bsAUJqT82uygfIT_yoGEMk4m0EY.roa (hash: MzJzFvCooXSnxfioMsBjoFnTRbQIMTZe4aChVxje5Qo=)
                          4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: KlFfacSd09Ikz7ZV+HzgHTYV1DuHGflk8LFzHQTMpqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:5a:1b:28:63:3e:b7:8b:1a:8a:8a:f7:81:f4:68:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
        Validity
            Not Before: Oct 13 13:00:59 2026 GMT
            Not After : Oct 14 13:00:59 2026 GMT
        Subject: CN=f73275f484394c77ea966bb57a80f0baad16f6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:09:a2:22:e5:6b:4a:81:cc:29:93:91:af:
                    36:9f:f0:99:0f:df:54:57:02:18:25:56:19:b3:a6:
                    08:a3:52:56:20:ed:38:b8:69:a1:98:c3:50:dc:5b:
                    26:5b:38:24:01:5e:79:d8:42:00:af:69:5c:89:f3:
                    b9:e3:04:ae:5f:c2:fb:9d:86:86:e3:fe:79:92:62:
                    48:9f:36:8b:60:6f:1c:d7:29:4a:de:1c:0b:0f:2a:
                    a6:da:ca:f7:43:42:2b:89:a5:1c:c1:12:02:a7:57:
                    ef:cb:12:df:c3:ef:97:8e:08:8f:7a:19:87:40:ad:
                    76:fb:fc:36:a9:0a:ff:21:fd:ac:51:98:d7:98:72:
                    d4:5f:e1:b0:c7:a1:f3:7d:12:89:be:71:d0:e9:bd:
                    f0:15:f7:ea:96:ad:93:7e:0d:99:e5:b6:1b:1c:30:
                    98:63:2c:22:5a:26:bf:aa:f7:cd:59:26:9d:9e:1f:
                    c3:58:00:45:8a:ef:50:65:33:51:46:7e:09:3a:fa:
                    bb:06:10:d6:15:8e:9a:a9:ba:01:86:6f:e3:d9:dd:
                    0a:6e:91:5d:c8:3e:54:f9:06:1e:13:92:26:3f:0c:
                    d7:62:c2:b4:65:cf:b4:7f:2a:d3:d7:93:59:77:c3:
                    77:b5:64:29:f1:e7:fe:34:bb:bc:ec:d0:27:3d:23:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:32:75:F4:84:39:4C:77:EA:96:6B:B5:7A:80:F0:BA:AD:16:F6:E7
            X509v3 Authority Key Identifier:
                keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:57:30:74:dc:1c:95:31:b7:1e:2c:1c:08:e8:6d:e7:9f:39:
         54:1e:24:0e:2a:84:bd:81:d9:36:8a:b8:29:a1:1b:7c:3c:1e:
         5f:7e:33:79:07:97:ed:c5:47:4c:29:35:22:60:0f:24:b4:b8:
         73:c7:6c:22:dd:cf:4c:ff:92:4e:8e:4e:13:8f:fb:6c:8c:97:
         4a:8c:00:21:94:4d:74:fe:d2:28:89:64:f3:f2:f4:83:13:37:
         7a:33:45:5d:cd:e7:ac:72:42:ef:71:0d:d2:ee:b9:f0:97:a9:
         51:82:d5:cf:7b:f9:e7:3b:c3:ee:0e:51:24:89:20:32:59:bc:
         5b:73:cd:8b:55:7a:bb:7c:5f:36:47:45:f7:a1:65:a1:3b:03:
         b2:b7:a8:a6:81:3e:58:48:c1:54:66:5a:0d:59:26:6c:0d:3a:
         15:57:22:23:43:c5:e8:d8:4a:d0:ea:87:13:15:13:80:2f:7d:
         43:6c:78:fc:e8:66:05:ce:ef:b2:88:a3:ea:ab:36:d2:ab:1f:
         d6:86:e8:0c:19:61:5a:4a:65:c4:eb:f8:63:83:b8:83:45:ee:
         25:94:4b:15:bb:f3:08:f4:78:2d:3a:71:63:ea:ac:8d:7b:fb:
         fa:da:ad:cd:68:f1:a4:17:cf:1c:a4:d9:cf:b7:2c:38:cc:5c:
         19:26:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:22:10 2026 by rpki-client