Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
File:                     rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json)
Hash identifier:          ykCUgtOm7D01CSJRCZj5f3yXPBQLqlYxi1MJrweXiLI=
Subject key identifier:   66:F3:7C:88:10:C3:A6:9E:C6:DC:5C:94:A5:2D:05:97:B0:EB:AE:4A
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Certificate issuer:       /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial:       01A128E7EE8BC1456AF2D46DCFFA8B143251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
Manifest number:          1A9D
Signing time:             Sun 11 Oct 2026 03:00:50 +0000
Manifest this update:     Sun 11 Oct 2026 03:00:50 +0000
Manifest next update:     Mon 12 Oct 2026 03:00:50 +0000
Files and hashes:         1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=)
                          2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=)
                          3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=)
                          4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=)
                          5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=)
                          6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=)
                          7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=)
                          8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=)
                          9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=)
                          10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=)
                          11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=)
                          12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: /pwOb/t2DbTTlTVNgUeD33xJOTGDZ46Skk6v73quqPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e7:ee:8b:c1:45:6a:f2:d4:6d:cf:fa:8b:14:32:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
        Validity
            Not Before: Oct 11 03:00:50 2026 GMT
            Not After : Oct 12 03:00:50 2026 GMT
        Subject: CN=66f37c8810c3a69ec6dc5c94a52d0597b0ebae4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:c9:aa:31:ea:95:da:57:9f:d7:a9:05:9a:
                    06:6f:10:00:ee:dc:e6:65:09:d8:81:32:19:cb:5d:
                    3a:cb:71:f8:73:af:4b:f7:71:2f:08:73:54:cd:e6:
                    09:6a:a7:28:2a:6f:58:a6:ed:b8:fe:c1:18:b8:40:
                    fe:70:b6:ee:3c:af:0d:89:da:7b:44:73:cc:bb:e2:
                    ef:ed:20:43:59:2f:59:bb:ef:ad:b2:90:02:81:e4:
                    75:97:f8:fa:b3:ad:50:bc:a6:bc:9c:89:95:9a:67:
                    12:2b:b1:17:9c:9e:e7:0e:a4:9e:48:75:30:0a:17:
                    3c:c7:42:f6:bf:55:4b:e7:2b:0a:ac:45:d5:07:c4:
                    3f:7a:41:4b:0c:4d:ec:9e:63:cd:10:fa:1e:39:ca:
                    50:ff:1a:89:90:96:30:a3:bf:a4:79:82:4a:da:27:
                    07:a2:bc:74:1e:4b:3a:9d:ce:2a:29:9d:4a:9a:e7:
                    cf:83:2e:f8:a5:7f:26:8a:f0:54:cf:3d:ac:b1:72:
                    31:2c:b3:8a:b0:d8:46:33:28:ce:2a:53:c6:0d:9c:
                    82:2d:3c:4e:c2:88:7d:d8:5a:55:e2:bb:0c:f9:3b:
                    a4:ff:1c:15:b8:5c:04:d2:cc:d1:66:2d:a6:74:8a:
                    19:97:bf:8f:cb:ee:b5:ae:7c:f4:67:d7:93:13:11:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F3:7C:88:10:C3:A6:9E:C6:DC:5C:94:A5:2D:05:97:B0:EB:AE:4A
            X509v3 Authority Key Identifier:
                keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:40:27:30:15:15:c3:4c:46:f0:26:e9:e6:64:8c:62:0a:26:
         20:ab:3c:06:6f:bb:b5:47:7e:aa:a2:ac:74:08:bb:9b:2f:c8:
         2d:a6:3a:6b:3a:dc:87:63:a8:64:c9:62:79:8e:ff:de:23:0e:
         cf:f9:89:a4:f2:9c:4a:49:75:bd:3f:66:42:ba:77:94:56:53:
         8b:6a:48:d8:b0:81:9e:5b:0a:46:00:56:62:a4:0b:88:ec:fb:
         ee:33:8b:16:ca:b5:6a:91:f7:a7:98:94:2b:43:7f:e9:f4:b3:
         f8:69:c5:67:e2:ac:34:63:45:45:23:54:2a:1e:c9:b9:14:87:
         39:7f:5d:f0:6e:2c:33:41:8b:13:34:59:ce:e0:49:08:c8:f3:
         7c:3f:0a:48:1b:ad:93:1d:e6:24:92:70:c3:15:28:b5:89:22:
         75:b4:a0:fc:8f:9a:9d:31:16:b4:07:bf:36:8f:50:25:81:ca:
         56:92:be:c4:39:ce:fe:2b:cb:e6:ce:a0:6d:a4:28:f2:97:01:
         89:2a:30:fb:18:01:12:35:21:8e:97:7c:d1:c4:65:d7:31:af:
         66:be:bc:e7:66:48:37:53:70:72:ad:93:69:23:bc:ac:90:d6:
         2f:3a:06:58:0a:3b:01:bb:51:64:2e:24:50:65:8e:54:55:bb:
         1a:2f:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:01:52 2026 by rpki-client