Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File:                     1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier:          nh0r/5/tlg1ARuprKQbpNWHFGLfU+CCpYrI6KAEXbQw=
Subject key identifier:   97:77:B1:16:03:C5:35:8A:87:6B:6B:71:6B:72:BD:0C:63:D7:78:FC
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer:       /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial:       01A0C5FCF75C3489AA3C80B5955CD57904BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number:          135D
Signing time:             Mon 21 Sep 2026 22:01:24 +0000
Manifest this update:     Mon 21 Sep 2026 22:01:24 +0000
Manifest next update:     Tue 22 Sep 2026 22:01:24 +0000
Files and hashes:         1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: U59+jRpd7OttQcK6HVJj+holLYMpJ5Vznb1F1aEqExg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:f7:5c:34:89:aa:3c:80:b5:95:5c:d5:79:04:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
        Validity
            Not Before: Sep 21 22:01:24 2026 GMT
            Not After : Sep 22 22:01:24 2026 GMT
        Subject: CN=9777b11603c5358a876b6b716b72bd0c63d778fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:0a:dc:be:27:24:58:aa:9a:de:4c:18:d6:
                    dc:17:2c:7f:8d:98:09:e5:7e:11:dd:b7:de:03:8e:
                    22:3c:73:4f:47:3e:b5:ed:fb:4f:40:b5:74:cb:d9:
                    f2:75:5e:b2:a3:d9:e3:fc:60:54:4a:bc:86:63:3c:
                    63:4c:96:fc:3f:b0:67:df:39:76:a0:a2:df:f0:b7:
                    23:fb:bd:cb:58:cf:28:30:a0:02:ab:f1:84:37:5f:
                    cc:8f:05:b7:21:ea:1c:c9:fe:d2:42:ad:11:a2:4f:
                    7d:5f:35:a4:94:ea:1a:86:d1:4d:61:12:6f:ad:95:
                    1f:b6:f7:dc:74:6c:9d:bb:2a:5e:25:31:7a:b4:ef:
                    ab:5a:6e:68:78:6c:d1:58:3c:20:b5:22:85:16:59:
                    fb:27:28:e2:8d:3f:c7:68:c7:c8:ab:55:7a:97:a7:
                    21:66:cf:8f:0d:2d:f2:b3:c8:e2:75:c7:a3:51:61:
                    01:4f:8e:62:36:4b:74:e5:30:0c:d9:23:fe:18:c5:
                    67:cf:fc:4e:9b:37:6e:eb:03:bd:e0:24:f3:1f:ef:
                    5b:46:4b:10:af:eb:1e:f0:61:bf:43:9c:3b:da:c0:
                    65:a7:5c:a6:d4:73:cc:22:da:38:13:06:a2:ee:a7:
                    a2:9e:3a:ed:8d:6b:44:1d:08:a9:65:af:7a:92:1c:
                    d4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:B1:16:03:C5:35:8A:87:6B:6B:71:6B:72:BD:0C:63:D7:78:FC
            X509v3 Authority Key Identifier:
                keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:17:9e:c4:cb:11:58:49:32:1e:2a:d5:a8:18:f7:df:4d:
         5b:1a:98:e7:77:fb:c6:d1:1c:ce:e2:6d:bc:51:51:7e:07:3a:
         28:ba:b5:cc:19:07:c5:6b:da:a3:8c:20:5a:8d:93:56:35:68:
         dd:e1:45:80:b4:31:51:33:81:e1:71:86:fe:18:96:78:b4:59:
         20:66:a6:78:ee:29:a9:28:2c:55:98:33:e2:be:5b:87:96:3a:
         6d:70:00:3a:cf:fd:90:aa:f1:71:0e:94:82:32:1f:11:04:d3:
         6a:46:37:dd:da:25:89:80:c8:26:40:fb:88:45:9a:01:7d:2c:
         fe:22:3c:a0:5f:6b:61:5b:14:95:e9:21:42:ab:da:3c:1c:04:
         b2:f1:89:7b:22:26:a7:0e:49:bc:70:e9:4a:6e:5c:dd:3c:ff:
         73:c7:e5:de:d5:00:c6:e3:f9:a7:5f:e8:70:e2:50:a5:db:c9:
         32:95:66:2e:86:a1:b0:fe:dd:fd:43:16:81:6c:06:cd:b0:34:
         d0:f3:d4:41:56:c9:41:de:4f:f6:18:c6:21:8f:d4:ce:fa:77:
         51:07:68:26:58:c3:99:11:e2:c5:d5:17:cd:ab:fd:77:c3:b9:
         a1:35:9c:70:e7:3e:85:2e:d0:86:7d:31:53:01:20:8c:6e:75:
         be:ec:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:25:01 2026 by rpki-client