Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
File:                     ZiEKIeTkbpksh_aziCYLb8xi77c.mft (raw, json)
Hash identifier:          lpz5PkBo1yYbgQS3igfs+y79eeA5BHNo/b4qhO5wvis=
Subject key identifier:   F7:67:DD:FE:74:B7:B7:AF:2E:85:A3:E2:63:8E:89:A9:AD:29:35:F2
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Certificate issuer:       /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial:       01A0D20098C25D10F159E4EFA47EF474A490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 06:00:49 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:49 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:49 +0000
Files and hashes:         1: 7hxycR97F6II7DC0Vj37aerZ5oQ.roa (hash: KZSoHAwVwfiAoSXeYAVjqNq4+GGagnZ4C5DwWpPA1wQ=)
                          2: ZiEKIeTkbpksh_aziCYLb8xi77c.crl (hash: etFpMSN7a5bBEXGMoxlsaywkoLwDcCSWGvr2UB0ey54=)
                          3: qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa (hash: Ts2ye0fisSWfvRXQ8xO3p21sDayxpAX1ycZX2DBkKX8=)
                          4: uYVzId5kHuAZNJSNCwDKcMz7_xY.roa (hash: c9bVVqZsVrLii9K2d4d5uBshO4e4alJujzyjDVg0Pr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:98:c2:5d:10:f1:59:e4:ef:a4:7e:f4:74:a4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
        Validity
            Not Before: Sep 24 06:00:49 2026 GMT
            Not After : Sep 25 06:00:49 2026 GMT
        Subject: CN=f767ddfe74b7b7af2e85a3e2638e89a9ad2935f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:ce:76:33:ab:eb:52:f4:7e:de:50:8e:74:
                    6e:7c:a2:01:c7:65:59:82:02:42:f5:5d:e8:5d:c1:
                    c3:71:40:fa:63:b8:e6:89:ef:bd:f4:ac:38:03:ea:
                    27:a5:72:89:11:0b:93:97:ea:ad:7f:b4:73:27:15:
                    9e:89:4d:e4:dd:bb:99:47:27:4c:05:70:79:98:64:
                    70:9d:82:f6:93:e4:56:2f:2d:ad:b2:49:1d:74:40:
                    99:24:8e:99:50:2d:a9:20:21:ea:3a:ac:e5:7a:20:
                    50:84:ea:10:91:b9:e6:06:c0:48:89:42:d3:92:e3:
                    1f:e8:89:50:23:4f:39:66:3e:c5:61:ba:63:89:a0:
                    47:8d:85:72:ea:e8:13:d6:a8:d1:67:ac:2c:53:6e:
                    a1:92:46:d3:5c:bb:9e:db:66:50:ef:66:4e:07:d3:
                    d7:cf:f1:b8:5d:1c:be:00:f0:77:7d:d1:1e:c6:37:
                    77:b7:2c:6a:ad:24:ba:28:56:b6:54:70:17:2d:0d:
                    a5:6a:75:a7:cb:eb:e2:f2:65:d8:e1:e7:f0:4d:5d:
                    ab:8f:56:27:9a:df:d7:14:a1:68:87:c2:53:77:70:
                    d6:d3:9b:e8:96:ec:94:35:a6:e8:a0:e3:e0:9e:3f:
                    8e:ce:bb:b0:de:87:4c:c8:76:13:dc:fe:19:dc:8d:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:DD:FE:74:B7:B7:AF:2E:85:A3:E2:63:8E:89:A9:AD:29:35:F2
            X509v3 Authority Key Identifier:
                keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:50:f8:f2:c4:5d:f1:1f:cd:7b:1b:bb:f5:b6:7c:d5:d3:
         7e:e0:11:d7:9b:f4:6d:c8:cc:ca:74:33:aa:da:c2:15:1e:5c:
         2e:1b:c4:17:0b:e4:67:cf:be:82:0d:4f:92:95:d5:dd:35:72:
         05:b8:95:8b:25:c9:9f:43:e8:52:63:75:1c:bc:89:83:ea:33:
         03:a7:49:76:85:89:f7:57:49:4d:7e:d6:cf:94:47:a4:2c:e3:
         19:63:7a:41:93:46:57:37:47:3c:90:ff:1f:42:af:0e:94:8d:
         5a:30:b2:22:97:af:ef:2f:02:7f:66:da:af:7f:70:8e:b1:61:
         34:0e:3f:af:2d:35:39:fb:5f:78:32:e8:eb:af:c1:c2:1f:00:
         b3:dc:c6:2b:88:3a:d2:96:ea:ae:2f:6c:98:ca:a0:89:17:f5:
         39:b7:dd:99:ee:1d:f7:4a:3e:b3:12:0b:28:81:8a:ce:8a:36:
         f6:b5:b2:70:f3:28:4b:a2:ff:0a:5b:99:4c:ec:d4:30:98:e2:
         56:78:89:d1:88:d8:dd:79:1d:90:5e:30:aa:18:9b:33:56:ff:
         5d:48:eb:af:6e:be:3c:7d:f7:08:41:5f:74:32:97:fc:78:20:
         93:62:75:e5:a9:d0:d4:ac:db:06:2c:31:ae:3c:d5:fd:fc:27:
         a8:5b:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:32:27 2026 by rpki-client