Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File:                     dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier:          vZuanh6heicdQ43yB6N4LzQPIsHAnIaDvuf9dSPFFM0=
Subject key identifier:   93:45:96:70:6C:38:B4:31:D2:A3:5E:DC:98:ED:14:0F:1E:BF:72:FD
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer:       /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial:       01A0DC1776FE0B2D67C479679AD4C42E08E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number:          0881
Signing time:             Sat 26 Sep 2026 05:02:00 +0000
Manifest this update:     Sat 26 Sep 2026 05:02:00 +0000
Manifest next update:     Sun 27 Sep 2026 05:02:00 +0000
Files and hashes:         1: bO5zh83JPBsDB9dYi7999N7x4VQ.roa (hash: 2nRlkOqwn2pz6pnUvZfg8RMKFwShSWGr7lN2y/FxSOU=)
                          2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: o5ssnWUiZtMVERbya8wR53P4eYyHpa9fT9bTo5c2qwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:76:fe:0b:2d:67:c4:79:67:9a:d4:c4:2e:08:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
        Validity
            Not Before: Sep 26 05:02:00 2026 GMT
            Not After : Sep 27 05:02:00 2026 GMT
        Subject: CN=934596706c38b431d2a35edc98ed140f1ebf72fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:1b:14:1e:1b:a8:74:c3:41:cf:46:0d:ff:
                    36:84:6f:63:9c:1e:4e:33:6b:08:e8:57:4f:5d:2d:
                    d8:ab:3b:a4:af:a2:80:c5:31:93:2d:8b:09:45:32:
                    92:89:0c:3b:97:46:1e:57:c7:a1:ae:39:86:2e:be:
                    cb:6e:11:da:f9:53:08:ea:68:41:81:a2:02:d6:d3:
                    e6:f5:ee:b4:d7:e5:7e:f8:42:dc:0f:35:69:cb:d5:
                    43:af:48:ec:4f:fa:ba:87:91:95:bc:2f:0c:16:81:
                    e2:7f:0b:a2:5d:41:5b:52:21:21:b1:f1:45:de:6e:
                    ee:b4:dc:e5:5b:7e:7d:41:06:44:fa:64:97:de:b9:
                    81:81:64:29:2f:6b:4f:8c:f2:6a:fe:9e:bb:fb:d5:
                    29:41:08:58:80:75:ca:f0:ce:3f:e8:43:a5:f5:b4:
                    a9:f7:71:48:d1:a5:b8:69:ef:85:25:f1:b6:2a:82:
                    9d:ba:20:82:80:56:42:d3:5e:9c:c7:9f:ce:4c:04:
                    84:ef:a0:6b:54:4b:65:96:37:f1:05:e5:bb:4e:bb:
                    fa:9d:b6:64:a9:e9:f3:ff:7c:02:a5:74:96:e2:95:
                    2c:0f:d1:59:80:83:2a:60:6b:84:a9:b7:f4:54:61:
                    09:a5:ca:29:a6:a7:a6:cd:65:94:e2:dc:58:e1:e7:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:45:96:70:6C:38:B4:31:D2:A3:5E:DC:98:ED:14:0F:1E:BF:72:FD
            X509v3 Authority Key Identifier:
                keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ed:32:0c:bd:f3:50:5e:0b:b6:51:bf:96:5c:62:f9:68:e9:
         13:69:5d:4d:c6:e8:f6:e5:9d:c0:9b:1d:98:f5:df:d6:df:62:
         a4:41:63:64:e4:4c:85:0c:26:98:f2:09:10:01:d0:b1:18:09:
         e9:6e:90:24:b7:ca:62:99:e3:3b:fd:02:f1:5b:41:91:bf:47:
         d8:af:97:c2:1b:93:b4:8a:73:59:8b:4d:87:9c:4d:8c:5a:da:
         03:a7:f9:c1:b4:f5:bb:9e:4a:f6:64:82:19:f6:b6:7e:ff:2e:
         ce:68:2f:d4:77:43:8e:03:62:9c:81:34:8a:46:62:cf:60:d8:
         b1:75:c9:60:87:06:38:3b:c9:16:3c:c1:69:71:db:91:5b:3c:
         1a:a7:26:72:93:d6:56:b0:4d:71:ee:1b:fe:96:aa:28:db:15:
         36:00:77:7e:95:23:09:ad:66:86:15:56:f9:94:f5:95:5c:6e:
         73:cb:64:b7:8f:7f:c2:c4:20:43:a0:64:2b:b0:8e:b8:9e:51:
         78:11:26:56:25:1e:5e:b1:06:aa:59:f9:56:67:7b:62:87:dd:
         f8:d9:c2:a3:25:ae:f5:b4:02:ec:2e:6a:cd:6c:eb:2e:be:fe:
         5f:ca:a5:0d:91:d3:66:09:c6:7d:d2:46:f2:46:26:e8:bf:f9:
         39:70:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:55:10 2026 by rpki-client