Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File:                     z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier:          L7TnueMjjs+C8QLb7g/V2FRq0iJ8ngS6uc5rmM7fd2A=
Subject key identifier:   78:07:B7:B2:CD:EA:47:38:06:22:78:92:C4:D5:83:3F:5B:9E:41:2C
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer:       /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial:       01A12654C3B0780201B5004CCFA423FAD4BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number:          1AAC
Signing time:             Sat 10 Oct 2026 15:00:51 +0000
Manifest this update:     Sat 10 Oct 2026 15:00:51 +0000
Manifest next update:     Sun 11 Oct 2026 15:00:51 +0000
Files and hashes:         1: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=)
                          2: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=)
                          3: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=)
                          4: LBK2m0x43uiy3CDrXewo6CElebE.roa (hash: Melk19K0g3bAymWD/+lvWlNHh7zUQK9z4QHwwE2U65g=)
                          5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=)
                          6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=)
                          7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=)
                          8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=)
                          9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=)
                          10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=)
                          11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=)
                          12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: W6sevPqfQLkKsaXcnLVFXMjlb+HX2xKV/CSPavv8wXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:54:c3:b0:78:02:01:b5:00:4c:cf:a4:23:fa:d4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
        Validity
            Not Before: Oct 10 15:00:51 2026 GMT
            Not After : Oct 11 15:00:51 2026 GMT
        Subject: CN=7807b7b2cdea473806227892c4d5833f5b9e412c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:58:56:e6:8f:7c:a0:4f:7b:cb:a9:ca:fd:
                    08:44:3d:de:70:03:04:8f:fc:c5:46:ca:7f:7d:d6:
                    31:15:dd:4d:17:93:ee:46:6c:ff:8f:96:5c:aa:f1:
                    91:22:cb:e4:63:c2:2d:e9:67:40:60:f1:29:57:f0:
                    c7:6f:9b:2d:78:b2:01:7b:16:18:d4:9f:96:de:3c:
                    b6:00:2d:f3:d9:c1:57:f0:f6:76:f0:6e:b8:5e:d6:
                    a9:33:bf:08:ca:9f:42:2f:ba:15:6f:4a:da:f0:07:
                    ee:d4:cc:85:fc:d3:06:5c:b7:67:1f:5b:68:a5:10:
                    4a:18:9f:fa:32:2c:53:7e:98:5f:f7:8a:d3:42:8f:
                    88:94:e0:09:2c:dd:92:04:a7:c7:50:26:8e:63:fc:
                    70:fd:06:52:5c:1f:f9:c6:09:26:9c:4e:2c:68:66:
                    d1:9c:01:71:c0:a9:6c:a9:3f:6c:a8:0d:67:18:0e:
                    07:0c:0a:7c:94:8e:be:fd:f0:37:74:14:8b:f6:83:
                    dc:0b:d7:01:bf:82:6a:02:fa:3e:82:a4:ac:2b:a5:
                    81:c4:d5:3b:50:8b:d7:21:fa:4d:26:69:ed:40:47:
                    79:ec:d0:35:3d:65:17:72:ac:81:3f:ea:ae:c8:b4:
                    18:c8:5b:a4:56:05:2c:d7:98:3c:59:a8:ee:e6:6f:
                    2c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:07:B7:B2:CD:EA:47:38:06:22:78:92:C4:D5:83:3F:5B:9E:41:2C
            X509v3 Authority Key Identifier:
                keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:10:cb:e4:a1:23:97:44:76:15:7a:50:11:e8:0c:54:93:
         e7:3f:0d:17:c4:fc:09:63:a4:71:e7:66:0e:f1:36:cf:34:12:
         ff:cd:f8:39:45:42:92:02:52:88:7f:a9:5c:f2:9b:55:07:c1:
         e7:ea:80:bb:18:63:2e:7c:b1:e0:bd:74:31:10:87:60:80:25:
         6c:1a:04:88:48:23:f8:76:e0:f4:ed:b7:97:19:b1:29:a9:70:
         46:0a:c0:26:61:43:fb:66:9d:3b:b6:c0:b1:07:de:15:ea:be:
         64:18:dd:e9:b8:67:08:df:2f:ab:cf:c6:27:32:be:bf:72:61:
         72:6f:75:5a:0c:d9:b6:ab:2f:ca:bc:d3:46:64:24:bc:ee:78:
         97:9a:02:0f:2e:9f:44:64:79:7f:fa:92:63:0c:38:fe:69:ba:
         f7:6c:c8:d1:9c:6d:19:9f:7f:33:9b:99:db:59:6a:d6:b4:5a:
         0e:f5:5a:85:ae:14:26:2b:d1:bc:18:f6:75:4b:1c:d9:4d:66:
         18:a1:50:31:54:01:cd:6f:d2:0f:90:69:fa:83:2a:60:ec:d9:
         24:8f:5f:ea:88:d0:4a:eb:9d:5e:60:15:21:4c:06:0f:da:5d:
         fe:a3:7e:60:6d:00:e0:6d:58:f2:15:51:c5:c8:da:89:ba:e0:
         79:86:8a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmVMOweAIBtQBMz6Qj+tS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1
NTI2ZmEwHhcNMjYxMDEwMTUwMDUxWhcNMjYxMDExMTUwMDUxWjAzMTEwLwYDVQQD
Eyg3ODA3YjdiMmNkZWE0NzM4MDYyMjc4OTJjNGQ1ODMzZjViOWU0MTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojRYVuaPfKBPe8upyv0IRD3ecAME
j/zFRsp/fdYxFd1NF5PuRmz/j5ZcqvGRIsvkY8It6WdAYPEpV/DHb5steLIBexYY
1J+W3jy2AC3z2cFX8PZ28G64XtapM78Iyp9CL7oVb0ra8Afu1MyF/NMGXLdnH1to
pRBKGJ/6MixTfphf94rTQo+IlOAJLN2SBKfHUCaOY/xw/QZSXB/5xgkmnE4saGbR
nAFxwKlsqT9sqA1nGA4HDAp8lI6+/fA3dBSL9oPcC9cBv4JqAvo+gqSsK6WBxNU7
UIvXIfpNJmntQEd57NA1PWUXcqyBP+quyLQYyFukVgUs15g8Waju5m8sywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgHt7LN6kc4BiJ4ksTVgz9bnkEsMB8GA1UdIwQY
MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct
NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1
LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqYQy+Sh
I5dEdhV6UBHoDFST5z8NF8T8CWOkcedmDvE2zzQS/834OUVCkgJSiH+pXPKbVQfB
5+qAuxhjLnyx4L10MRCHYIAlbBoEiEgj+Hbg9O23lxmxKalwRgrAJmFD+2adO7bA
sQfeFeq+ZBjd6bhnCN8vq8/GJzK+v3Jhcm91WgzZtqsvyrzTRmQkvO54l5oCDy6f
RGR5f/qSYww4/mm692zI0ZxtGZ9/M5uZ21lq1rRaDvVaha4UJivRvBj2dUsc2U1m
GKFQMVQBzW/SD5Bp+oMqYOzZJI9f6ojQSuudXmAVIUwGD9pd/qN+YG0A4G1Y8hVR
xcjaibrgeYaK5A==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:40:36 2026 by rpki-client