Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File:                     1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier:          p8bgU31y+igDatRkG1xCbGF4l5rWV+9A5JKt5pFo1m4=
Subject key identifier:   63:E0:84:86:AB:B7:4D:63:4D:AF:0A:11:11:51:5B:C4:05:2A:1B:64
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer:       /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial:       01A132901BCECDC330C9694E274757CD7070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number:          0118
Signing time:             Tue 13 Oct 2026 00:01:07 +0000
Manifest this update:     Tue 13 Oct 2026 00:01:07 +0000
Manifest next update:     Wed 14 Oct 2026 00:01:07 +0000
Files and hashes:         1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: M/Vg45imNHO6gX4OWCPFLmDINfHsfMdeusFdrc8rwGY=)
                          2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:90:1b:ce:cd:c3:30:c9:69:4e:27:47:57:cd:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
        Validity
            Not Before: Oct 13 00:01:07 2026 GMT
            Not After : Oct 14 00:01:07 2026 GMT
        Subject: CN=63e08486abb74d634daf0a1111515bc4052a1b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:ba:aa:c3:8f:60:8e:bd:cf:b5:19:4f:e7:
                    16:99:cf:1a:9b:76:41:13:ee:79:2e:59:d5:f6:b8:
                    8d:32:69:e3:d5:94:bf:6f:76:d3:ce:92:52:e2:4f:
                    eb:c4:50:67:c7:60:44:cc:49:c5:d4:01:a0:af:49:
                    91:cf:3a:1e:87:84:6d:6b:f4:cf:ca:f1:59:02:39:
                    c0:df:2b:ae:9a:0f:52:8d:96:77:48:7f:36:b4:10:
                    b4:fb:05:b6:8e:40:24:32:32:f6:ef:c0:96:57:20:
                    39:ff:8c:d7:a3:d0:4b:09:e5:a4:28:ea:ce:82:ce:
                    5f:8a:67:75:8b:80:aa:d3:a0:85:fc:2a:d6:9e:1e:
                    57:e9:18:9b:95:79:3a:5d:e1:be:54:27:cc:cc:de:
                    01:bc:af:20:e5:37:a6:9e:49:6d:85:fc:a1:a0:4b:
                    d0:8f:c1:36:14:7f:4f:c1:0c:db:b2:7b:a4:18:f5:
                    bb:62:d6:86:c5:d4:2b:b6:96:fa:6e:14:fd:5d:c8:
                    da:fd:56:1c:2c:ed:0a:1f:f7:78:ec:b1:98:4a:c0:
                    7c:a2:c5:17:03:1c:b5:92:08:fc:79:5a:f7:80:ea:
                    93:a3:99:b6:a8:fe:b2:39:61:a0:dc:89:39:8f:7a:
                    90:ac:9a:87:0f:73:48:0f:7b:e6:7d:1e:5b:fb:6e:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E0:84:86:AB:B7:4D:63:4D:AF:0A:11:11:51:5B:C4:05:2A:1B:64
            X509v3 Authority Key Identifier:
                keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:21:7d:5b:f4:47:e9:96:26:04:20:75:92:d0:36:1b:c5:02:
         3d:dc:aa:f6:e0:b7:04:06:dc:ee:8e:43:62:a3:21:92:a4:2c:
         ee:f1:52:fa:37:43:60:57:53:88:5b:11:d4:92:11:83:ce:40:
         5d:9f:86:ff:dd:d4:c1:0c:15:27:b4:22:3a:f9:8a:78:be:0d:
         9a:b7:77:b4:3e:2c:32:ce:76:19:03:b1:7e:5d:67:32:3c:1a:
         b8:4e:8d:49:1c:f2:e1:f8:9e:b5:76:01:fc:d9:4b:b0:18:5e:
         45:8d:48:7d:8f:a0:85:9f:e3:01:ca:6d:43:9f:eb:2f:05:3f:
         f5:70:11:24:e9:b4:4d:5d:17:12:82:2f:a7:64:9e:00:b3:a3:
         4f:9f:53:58:d1:b1:26:12:e1:9f:a8:54:9b:37:db:03:b4:cc:
         2c:f0:89:b8:b5:d1:ed:2f:89:80:81:0c:e6:28:31:d2:e2:7c:
         15:5d:c0:55:9e:52:73:fb:d6:39:e8:97:81:0f:bd:6c:41:9e:
         fd:55:ba:af:89:70:e3:60:d6:db:d7:fb:cc:19:6b:63:13:d2:
         8f:d5:e8:46:cf:e1:f7:06:a8:f2:53:14:c9:c8:b6:87:e0:1d:
         f5:0d:f9:d2:02:7a:0a:0d:0e:67:eb:3c:94:dc:d6:86:4c:ba:
         b4:42:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:52:39 2026 by rpki-client