Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          RpPhBWyC9SN567cGnkJTBaarb9kGS/H+oILi5lWeV0Q=
Subject key identifier:   12:B1:4F:E6:0A:85:BE:2F:49:93:E6:A7:1F:13:61:71:DB:50:90:73
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       01A0C8C68C5D47C0CA950407F1FF43AB0FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          0AAF
Signing time:             Tue 22 Sep 2026 11:00:50 +0000
Manifest this update:     Tue 22 Sep 2026 11:00:50 +0000
Manifest next update:     Wed 23 Sep 2026 11:00:50 +0000
Files and hashes:         1: 4VSpfmlsrY-xnIiTTrPaodx2tV4.roa (hash: EdL3j+0Ly732QbelcRDG7cQjRw+dDjXO5L0RRW5d50k=)
                          2: YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa (hash: BS0hH0Mha3OYh1/nE9dhHNhWJCR5meHAHOyRx5kHC3Q=)
                          3: aFesnPDh7CxN2CqxODqrdmrSUuk.roa (hash: x5ilgl/10IUgJ6jnlwharE+K/9xapRQ9JBmeLGM6YOI=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: jxPfGktyFj95J6mrszmy4yOOiZLYa6JvEMdOlHzqjFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:8c:5d:47:c0:ca:95:04:07:f1:ff:43:ab:0f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Sep 22 11:00:50 2026 GMT
            Not After : Sep 23 11:00:50 2026 GMT
        Subject: CN=12b14fe60a85be2f4993e6a71f136171db509073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:12:46:65:73:94:a4:2d:db:c0:10:60:f9:
                    10:e1:0d:27:c2:bb:f5:06:84:42:60:b6:42:14:ed:
                    85:d9:9a:96:d3:8f:aa:89:83:65:8d:69:c6:99:ca:
                    b2:ab:de:31:07:6e:3e:ab:57:62:b8:d5:38:8c:2d:
                    53:2c:6b:c4:a3:70:0e:e5:65:fd:b1:7f:88:11:3c:
                    39:fb:45:a3:ec:5c:c8:f0:ec:fd:32:86:ea:6d:95:
                    47:34:6f:d0:68:ef:b5:14:d9:a5:f5:b4:a0:11:1d:
                    dc:e8:e9:96:fa:4b:06:49:de:0c:27:62:4a:36:99:
                    21:5f:09:8d:09:44:55:81:eb:36:91:f1:70:2e:f4:
                    06:36:9a:45:8d:b5:81:6a:71:66:f0:ae:d8:33:61:
                    a8:25:22:c2:83:38:fc:d8:8b:3d:67:d9:d4:c6:04:
                    a0:f3:63:6c:76:d5:00:6a:e8:62:a3:93:76:95:8e:
                    9f:d5:a4:dd:54:03:af:e0:72:c9:40:97:27:b5:99:
                    47:d9:a3:83:bf:aa:7b:a1:1f:6c:8f:74:24:94:8f:
                    b0:76:52:28:3b:83:33:63:eb:50:74:07:06:d4:3c:
                    da:8d:1b:9a:2b:cc:c0:fe:6b:07:a2:1e:71:7b:47:
                    5d:ce:a4:31:83:e5:5d:16:22:71:79:f1:02:bd:ba:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B1:4F:E6:0A:85:BE:2F:49:93:E6:A7:1F:13:61:71:DB:50:90:73
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ac:95:2b:78:a1:f0:c9:e0:f1:0b:d1:d5:75:db:d8:03:e2:
         42:df:9c:32:7e:31:30:a2:d8:db:b5:a2:8b:ea:f4:1a:f2:f5:
         93:73:9f:e1:bb:99:94:63:4e:68:12:e5:1e:41:f2:d6:96:41:
         46:7c:66:fe:90:14:7c:c7:0c:df:73:eb:bc:93:89:23:34:6d:
         a5:1a:fa:cb:08:91:af:ce:ca:53:48:97:d6:2f:7e:8f:d4:b4:
         d4:d5:1b:96:47:29:1a:57:ef:6b:f4:63:24:2f:84:8c:8f:df:
         04:5c:a9:56:8d:63:51:c1:25:42:bf:06:dc:77:c3:1f:87:38:
         8c:c0:0b:0f:b6:3e:96:ae:c5:91:cb:2e:2e:6a:69:4f:dc:3b:
         11:71:4a:54:0b:7c:16:d5:fa:70:df:d1:26:64:76:9e:6e:e0:
         bb:39:f6:fe:8b:fd:12:6b:08:cf:e6:78:c4:30:22:6a:81:d6:
         ab:fa:ef:2a:a4:fa:f6:35:ce:cf:7d:e2:75:73:06:94:b2:a9:
         17:6c:8c:ad:d8:07:5a:db:03:7e:60:8b:af:c6:6c:a8:c3:44:
         7c:65:04:8a:41:be:30:b6:ed:8e:0a:5e:42:13:1f:72:1f:bf:
         d6:2e:ae:29:f3:11:19:92:ba:49:0d:89:10:bb:a8:bf:f0:0c:
         1b:80:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:30:31 2026 by rpki-client