Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File:                     ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier:          M7zQEelAvyzN0E91Op88LMg2h9kuKgKKwRcvDb4Dg1c=
Subject key identifier:   30:05:80:B1:AD:19:DD:56:2E:A2:EA:71:79:48:4A:06:B0:ED:AE:65
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer:       /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial:       01A13559A9EB3613D1E2A99A69DF9B2CF5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number:          1A32
Signing time:             Tue 13 Oct 2026 13:00:30 +0000
Manifest this update:     Tue 13 Oct 2026 13:00:30 +0000
Manifest next update:     Wed 14 Oct 2026 13:00:30 +0000
Files and hashes:         1: So8muBWRfIb_bocA-uBwGx60z8Q.roa (hash: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc=)
                          2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: H5Y8RBu24u9TCszBuzVAN4ymvLXiDcXtaFwNsm/oGT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:59:a9:eb:36:13:d1:e2:a9:9a:69:df:9b:2c:f5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
        Validity
            Not Before: Oct 13 13:00:30 2026 GMT
            Not After : Oct 14 13:00:30 2026 GMT
        Subject: CN=300580b1ad19dd562ea2ea7179484a06b0edae65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:13:e0:b6:fa:a5:44:a3:68:30:27:38:54:
                    23:af:93:94:7f:23:14:bb:a8:98:d2:d3:a7:46:fd:
                    47:45:d1:a7:f3:89:2f:36:d1:99:7c:e3:6b:b5:ca:
                    2b:1b:86:fd:4b:1d:63:b8:41:6d:a8:46:3c:5b:64:
                    a6:a7:2f:a5:35:fd:a7:19:57:11:e6:89:93:f6:f7:
                    05:b4:04:55:66:36:f4:53:37:d1:82:66:9f:2f:ea:
                    e2:94:69:6d:70:66:49:40:fa:89:fd:e9:78:a4:24:
                    5f:a8:57:8a:90:31:f8:84:c6:26:e0:4b:d3:63:3b:
                    b8:90:55:95:c5:bd:50:5d:ba:71:6f:65:40:4d:b1:
                    c9:f1:33:c5:74:42:1a:69:dc:3d:55:05:89:84:00:
                    1f:25:1b:fd:24:a3:29:95:f0:59:73:4d:3b:28:25:
                    38:dc:f7:9d:4e:eb:2e:2e:6c:55:77:23:91:86:d3:
                    5a:3c:4e:80:45:81:38:38:a7:d7:5b:db:a6:af:28:
                    c8:93:c2:98:1e:2a:53:b2:5a:ce:fd:5c:31:52:2a:
                    1f:19:cb:a5:3d:22:8b:03:e2:2b:1b:ba:b9:cc:f7:
                    ef:bf:7c:18:94:ef:22:93:79:34:b5:d1:5a:51:68:
                    24:b8:b7:6b:91:cd:6d:9c:4d:2f:be:19:bc:fa:bc:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:80:B1:AD:19:DD:56:2E:A2:EA:71:79:48:4A:06:B0:ED:AE:65
            X509v3 Authority Key Identifier:
                keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:32:49:ae:dc:7f:4b:93:75:64:29:91:a9:15:46:64:a5:8e:
         18:79:e3:59:0c:d9:c9:fd:ce:15:7d:d7:df:aa:c7:43:ff:53:
         0b:f6:f4:49:00:0a:73:5c:3d:cd:0d:37:92:ea:9d:b1:c5:f9:
         bd:42:75:89:6c:3d:89:3d:38:5c:69:33:f6:e3:5f:ea:59:3e:
         e3:8f:cf:8a:c4:0f:35:3f:bd:28:80:03:4f:99:73:4e:0b:49:
         5c:d6:19:73:63:20:22:60:7b:83:d2:36:9f:a4:27:a0:69:90:
         43:4b:8a:e9:1c:81:9b:07:b1:5e:ac:1d:3a:80:87:70:c1:5a:
         c8:cd:a0:de:35:32:e8:9e:f5:99:c3:51:a2:f5:2b:36:88:72:
         11:7e:2a:c3:f7:12:51:7c:e1:6f:01:e9:6e:84:75:46:45:1b:
         f7:71:b0:94:2b:bf:4e:6b:1e:65:6f:38:35:1c:59:00:04:e4:
         1e:ad:cf:bc:9c:f2:34:43:63:a3:9a:0d:5c:2e:33:45:58:c2:
         63:17:f5:bf:f9:76:1d:f9:eb:c6:d9:24:d3:6b:12:5a:21:6e:
         e5:59:2a:a4:77:2e:82:d5:c1:6b:b0:bf:29:20:3d:92:65:55:
         0e:a2:30:ef:29:01:9c:18:db:76:ca:8c:23:e6:4d:51:e6:cf:
         9c:71:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:04:04 2026 by rpki-client