Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File:                     ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier:          nKjfyDxntE2G+XapObILtVLnmoGdhAh8/gTp+COHmxA=
Subject key identifier:   4E:26:4F:F5:75:EF:D2:C4:9C:A4:0D:C3:74:27:B9:14:46:05:0A:36
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer:       /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial:       01A109941D226204639649D93DB1C1D2D07B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number:          1615
Signing time:             Mon 05 Oct 2026 01:01:03 +0000
Manifest this update:     Mon 05 Oct 2026 01:01:03 +0000
Manifest next update:     Tue 06 Oct 2026 01:01:03 +0000
Files and hashes:         1: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: Er7yi16FBWbg2n3U2tCFgBfPHb396123ryH+/bd6csw=)
                          2: uD5eUDrQgXD4j74OWplFHBQd_hs.roa (hash: 1h/Ex6tXdCvENtcBMUtZd+XOEB+wQCjfinmzLg0hRdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:94:1d:22:62:04:63:96:49:d9:3d:b1:c1:d2:d0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
        Validity
            Not Before: Oct  5 01:01:03 2026 GMT
            Not After : Oct  6 01:01:03 2026 GMT
        Subject: CN=4e264ff575efd2c49ca40dc37427b91446050a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:6a:58:ab:86:33:e2:ff:96:b4:35:16:ed:
                    89:06:8b:82:cb:11:16:5b:4d:31:bd:2e:32:7e:7d:
                    c0:08:9b:12:d1:a7:47:45:1f:1e:37:2a:d5:f2:8d:
                    71:8e:ed:1a:4a:1d:2f:41:bb:53:59:b0:49:cd:29:
                    96:e6:c8:ac:f2:ed:7a:d1:8e:8f:d2:a1:99:b3:28:
                    ae:02:44:87:3e:2d:e1:6b:e4:81:7b:89:71:f5:33:
                    44:b7:87:54:df:ef:c5:6d:d7:87:0d:33:7a:bb:85:
                    d0:fe:6d:c5:21:46:39:ea:c3:cb:cb:a5:54:d9:b7:
                    ec:c0:b0:48:1f:3c:b4:81:62:9a:a7:ae:8f:ee:3a:
                    54:ff:ac:fc:81:50:55:37:00:46:a3:80:a8:e8:81:
                    8f:ee:9a:75:87:e0:b7:7c:e2:a9:2c:d4:e3:6f:b4:
                    f4:a8:7c:86:38:97:3e:76:74:86:ae:0b:99:14:84:
                    d6:fb:99:0d:06:36:f9:85:c9:d5:b2:cb:86:ac:f3:
                    cf:3d:5a:cd:ed:94:20:a0:be:86:cf:26:2c:ac:c0:
                    34:ca:3b:00:0e:76:8e:a6:4a:1e:92:94:26:41:a8:
                    b8:9f:86:7f:cb:31:e7:5e:34:e7:54:0d:a1:bf:c1:
                    8b:26:f3:28:a4:64:c7:f5:c2:c3:e4:6e:bb:33:c8:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:26:4F:F5:75:EF:D2:C4:9C:A4:0D:C3:74:27:B9:14:46:05:0A:36
            X509v3 Authority Key Identifier:
                keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:7b:bf:66:34:bd:29:27:87:72:60:17:2d:bc:a1:4d:ba:
         08:1d:0d:21:ca:ee:50:b6:40:bc:5f:9e:fe:9c:4e:19:cf:37:
         c3:4e:f1:0f:fb:b6:2e:b8:da:44:c3:f1:5a:81:67:40:3f:e1:
         8f:39:c4:d2:04:d6:e9:e1:32:1d:a5:40:d5:c7:47:9a:6b:f3:
         2e:11:44:63:4b:3f:22:8b:54:17:e3:17:f7:c7:c5:3e:97:19:
         41:82:f6:d4:9d:f5:8f:3f:23:36:71:b2:9b:f7:7a:79:68:99:
         95:f3:91:51:ac:ad:9a:bf:69:ba:5e:f7:b2:a0:b5:43:0b:4b:
         e3:4d:48:79:36:a1:8d:8a:fc:19:40:29:6a:ce:d5:bc:8f:3a:
         cf:01:ec:84:b0:90:90:56:dc:63:7c:6e:4a:d7:e7:9e:64:0f:
         18:5b:2c:4e:55:58:d2:3d:49:c8:91:59:85:1f:d1:5d:ce:01:
         0c:a7:0c:ae:1c:b1:66:b9:c7:9a:43:d1:47:e7:30:80:20:34:
         94:ea:30:22:fa:e2:67:4b:dd:30:f5:87:87:9c:c8:4c:45:9b:
         08:25:ea:ec:f9:83:e8:c6:77:f1:ae:82:00:37:89:ab:d9:22:
         6d:cb:7a:be:72:67:50:f8:3a:d8:0c:13:d2:b9:66:60:d7:9f:
         c5:32:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:39:11 2026 by rpki-client