Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          2WoVCNVBqdeCbGvzHcX1hK4OLa/sZPhQR3mx4OHc8ho=
Subject key identifier:   A8:6B:85:E5:79:36:6A:AB:66:77:35:1A:0C:E5:36:2D:65:AC:61:87
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       01A1AC70F1F235C46A1E02340A1FB6CBC336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          0502
Signing time:             Thu 05 Nov 2026 16:00:45 +0000
Manifest this update:     Thu 05 Nov 2026 16:00:45 +0000
Manifest next update:     Fri 06 Nov 2026 16:00:45 +0000
Files and hashes:         1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=)
                          2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=)
                          3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=)
                          4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=)
                          5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=)
                          6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=)
                          7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: JJMiebovELeVojS56lNxWg42LM55P76WnCSxvLgoIgc=)
                          8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=)
                          9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=)
                          10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ac:70:f1:f2:35:c4:6a:1e:02:34:0a:1f:b6:cb:c3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Nov  5 16:00:45 2026 GMT
            Not After : Nov  6 16:00:45 2026 GMT
        Subject: CN=a86b85e579366aab6677351a0ce5362d65ac6187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:8b:a1:b2:38:9a:f4:24:84:f2:8b:06:9e:
                    ff:26:97:e1:f8:23:a7:c4:dc:cc:84:f1:69:df:56:
                    1d:ed:6c:29:2c:1e:45:18:43:0f:99:d3:36:37:75:
                    eb:dc:5a:5c:0f:6f:9b:c5:cf:ed:1f:b9:f1:9c:d1:
                    a6:1c:99:5d:80:90:ea:9a:f3:ac:45:6e:c2:a1:d5:
                    8b:80:92:c5:55:d1:ab:32:1e:fe:a9:b1:6d:7a:67:
                    6f:24:a5:bd:80:9d:9f:aa:3f:c3:3d:8b:11:6a:f4:
                    8b:0e:37:2e:c6:67:96:e0:76:c7:3a:60:04:ac:b2:
                    ed:97:3b:ba:c9:eb:b7:0f:13:20:c6:e3:e4:82:65:
                    5e:77:b0:db:30:1b:57:2d:3e:23:36:78:ac:a2:b8:
                    21:ce:b6:2d:8d:8b:71:de:7b:34:19:11:9b:8b:36:
                    b4:fd:66:34:bf:79:88:b7:0a:e6:ce:b4:52:bf:32:
                    1b:ca:f4:33:10:98:f5:78:5b:b8:1f:b1:d8:f9:5a:
                    08:7c:45:08:38:73:98:66:71:58:22:ab:b1:64:00:
                    c7:61:bb:80:d1:55:e9:cb:2f:61:41:e3:85:96:66:
                    4e:9e:8a:89:d0:6a:35:a9:3c:4e:e1:66:c3:e0:f2:
                    24:33:72:03:93:68:4e:f0:25:5b:f8:d1:dc:5b:ef:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6B:85:E5:79:36:6A:AB:66:77:35:1A:0C:E5:36:2D:65:AC:61:87
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:72:f9:66:eb:1a:03:e4:78:5b:cc:01:88:01:4e:d1:54:2f:
         52:4b:9e:55:b7:7f:2c:da:f7:b2:97:bf:44:78:bc:f9:52:8a:
         bf:17:46:e1:22:75:76:89:d8:16:1a:f1:66:f3:2f:56:c5:cc:
         4f:de:8f:50:43:dc:11:0a:49:5a:5c:a8:5f:6d:20:06:6d:e5:
         72:8f:ce:9a:8b:7e:7e:76:e0:6a:37:fa:45:e1:23:05:63:ed:
         db:06:45:44:5c:29:b4:87:ec:d2:59:1c:97:54:f4:c9:ec:cc:
         d4:8b:f1:34:89:50:6c:fd:0a:d1:2e:47:17:60:a6:2c:be:d9:
         ce:7b:37:13:c6:33:64:42:14:65:ab:b0:18:b0:d3:e5:37:0b:
         70:64:62:05:8e:d0:33:30:3e:46:a0:c2:fd:6b:f3:88:67:d6:
         47:70:ed:c6:21:78:d3:0e:fd:5c:a5:87:8e:6b:05:18:18:eb:
         54:30:19:78:c3:a4:72:4c:49:a9:36:34:a9:cf:55:9c:e8:6c:
         ed:bf:98:09:84:da:ba:81:71:57:8b:8f:87:cc:24:b5:fb:bf:
         6a:97:41:25:f9:5f:b8:d7:3d:6f:85:1f:4d:42:a5:63:1a:e9:
         c2:b6:4e:5b:ea:35:0e:27:1f:c3:34:cd:5c:9e:98:14:0d:b2:
         e3:fa:ba:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:47:50 2026 by rpki-client