Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File:                     zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier:          AANPcHAZv1tUqxCzkc7Ljmtf+oerdH3Uv0V3RvMh81A=
Subject key identifier:   03:E1:60:5B:FE:64:69:01:39:98:1D:E7:3F:18:7C:5E:2C:84:99:0D
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer:       /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial:       01A0D8041A914E4950ADF9586229E1E79054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number:          1A6D
Signing time:             Fri 25 Sep 2026 10:02:22 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:22 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:22 +0000
Files and hashes:         1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
                          2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: hiTMtKi09ukO7WQBJ9F+5N5Wethdo8TCLxC72zLtG0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:1a:91:4e:49:50:ad:f9:58:62:29:e1:e7:90:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
        Validity
            Not Before: Sep 25 10:02:22 2026 GMT
            Not After : Sep 26 10:02:22 2026 GMT
        Subject: CN=03e1605bfe64690139981de73f187c5e2c84990d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:26:c9:5b:90:1b:d0:fd:64:f8:48:b6:1e:
                    4f:d5:3e:94:dd:af:c5:3f:e3:1d:13:de:b7:59:c8:
                    5f:b2:ef:59:b0:fa:bb:ea:28:81:0d:01:40:3f:c4:
                    e2:02:5a:7c:cc:de:3f:21:da:13:99:f4:8f:49:2f:
                    64:10:70:50:28:bb:bd:f4:ce:15:65:7a:17:ed:72:
                    b9:36:0d:ca:42:c5:e7:e9:62:51:49:35:17:ae:c4:
                    d5:de:66:3c:c0:eb:b1:ad:4a:d3:33:1a:c8:07:1e:
                    18:dc:4c:95:62:1e:ac:2c:a7:d9:38:b6:00:dc:24:
                    c4:35:9f:3f:0f:58:73:0b:ba:26:db:39:96:82:b1:
                    32:80:0f:09:36:e9:65:29:18:eb:32:56:87:eb:27:
                    bf:4b:c2:0c:54:e5:8a:0e:17:c8:dd:13:93:52:3b:
                    59:51:21:ba:4a:9b:5f:1f:62:91:1a:ac:19:69:e7:
                    35:b2:75:f3:c3:6c:3c:b5:01:e8:6b:0f:5e:a7:0c:
                    df:f0:d5:af:03:a7:29:43:4e:b2:d0:13:8f:29:66:
                    3a:f3:20:61:4b:7e:9e:47:78:e6:f2:7f:11:78:d6:
                    95:e3:a7:c9:3c:79:40:09:17:2b:8a:25:84:e7:4c:
                    1f:19:0f:1c:86:1d:2d:e5:56:3d:6a:28:99:de:03:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E1:60:5B:FE:64:69:01:39:98:1D:E7:3F:18:7C:5E:2C:84:99:0D
            X509v3 Authority Key Identifier:
                keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:69:79:97:24:69:2a:f8:c9:c4:34:41:23:6e:8d:20:a1:
         3d:e8:04:a7:07:d7:9d:52:1d:d3:97:99:4c:fb:5e:92:6a:18:
         09:ca:16:9f:31:2b:40:4b:1f:41:e9:04:43:ec:7e:32:94:b4:
         98:73:07:10:79:36:c3:cb:8c:e2:f3:2d:14:fa:41:a5:20:c1:
         a5:c2:52:ee:d4:08:6f:4d:73:fb:e3:24:b1:5b:04:44:fe:a0:
         86:ff:55:07:b3:64:00:ff:fc:41:86:a5:d3:2e:f7:45:9c:1c:
         fc:fa:68:2a:b2:05:da:cd:0a:a0:9b:d9:12:26:76:3e:22:06:
         e2:c5:47:81:c7:07:04:da:20:73:6d:05:ec:92:2b:72:60:2f:
         50:ad:ec:03:55:af:84:8a:a1:64:b3:76:b3:f5:38:ed:34:f9:
         0c:3f:69:c2:55:f6:8c:d7:43:c1:34:02:85:da:06:53:4f:32:
         f4:14:4e:15:df:5a:8d:cb:42:39:47:42:67:6e:fe:c9:d9:91:
         f3:df:f3:2b:3d:30:60:60:bc:05:e7:a2:bf:f4:c8:4e:39:6d:
         d5:c4:fe:4f:2d:91:4d:b4:1f:ef:ad:7a:4f:26:ab:60:c0:7d:
         12:21:89:7f:ac:e3:03:d8:81:75:10:20:a3:21:58:33:a9:d3:
         31:36:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:16:05 2026 by rpki-client