Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          HuQ6/Qrmkl6U/wptFbcp/yQvwZtci25OVskx1d9AMEw=
Subject key identifier:   BE:73:E6:9B:34:B9:DB:4C:1A:06:7D:C7:02:67:F4:4C:59:1C:41:0E
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       01A12955E892503381F4C11121C64B6FDE1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          0B36
Signing time:             Sun 11 Oct 2026 05:00:58 +0000
Manifest this update:     Sun 11 Oct 2026 05:00:58 +0000
Manifest next update:     Mon 12 Oct 2026 05:00:58 +0000
Files and hashes:         1: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (hash: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU=)
                          2: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (hash: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA=)
                          3: NC1kNBCi5IA0F53iafyWv28tEdg.roa (hash: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo=)
                          4: _C1dxAYzgojRgjfg932a5o53DHI.roa (hash: MWoWdwypjbLGhZ5K85xQtJNC5yRCwOAiowUMTjpjyv8=)
                          5: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (hash: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: JoGol8XtVSHmIPY+c/hfs543G77GN8TDobcAn15BCoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:55:e8:92:50:33:81:f4:c1:11:21:c6:4b:6f:de:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Oct 11 05:00:58 2026 GMT
            Not After : Oct 12 05:00:58 2026 GMT
        Subject: CN=be73e69b34b9db4c1a067dc70267f44c591c410e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:e9:e0:20:0c:ba:25:c7:35:7b:d0:9d:05:
                    9c:d6:44:46:ab:77:53:11:da:8a:cb:8a:e6:5e:c9:
                    ab:24:ad:82:e2:03:c3:29:30:04:ca:6b:46:d2:c7:
                    27:dd:ce:0e:4d:0a:90:88:6c:44:aa:f8:fc:95:77:
                    6a:b7:b2:55:02:16:5c:d4:64:b6:ce:cf:75:6b:6d:
                    1e:f1:a3:71:61:33:78:2e:c2:29:5a:3b:5e:be:0a:
                    76:a5:1e:cb:2e:b4:e0:45:c7:07:11:94:fb:b4:57:
                    6c:53:8c:22:3d:83:a8:34:01:86:53:a2:56:49:ac:
                    af:60:6c:9b:ef:02:b1:a8:88:77:bb:bc:14:16:7b:
                    16:56:ea:01:a7:34:28:4b:93:14:2c:6e:a0:d3:b5:
                    f1:d6:18:bd:27:2f:2d:50:84:f0:1d:a1:9e:16:ac:
                    40:08:56:e3:6e:67:ab:33:b8:08:f3:02:7e:9c:28:
                    36:f6:2b:2f:83:ed:e1:73:30:bc:cf:0a:06:70:97:
                    bd:97:f9:42:f8:50:ae:54:4e:2d:b3:27:3d:5e:a0:
                    92:eb:9f:fc:0e:f9:37:8d:a0:c8:ad:60:94:63:1c:
                    26:99:ea:35:ff:3c:c2:b0:1c:78:a2:29:4b:f4:76:
                    22:40:5f:da:fa:1e:95:d3:cd:ed:9e:f1:94:59:bf:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:73:E6:9B:34:B9:DB:4C:1A:06:7D:C7:02:67:F4:4C:59:1C:41:0E
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f1:ef:81:7e:86:91:54:2d:0b:20:88:b0:aa:a5:0e:3d:ca:
         4b:6a:7c:40:77:0d:30:4c:c7:dc:a2:b4:09:64:35:ef:5d:12:
         8e:4b:2f:d9:4a:aa:f2:10:09:09:48:83:d9:71:9e:24:a0:b1:
         d2:64:38:73:a2:36:64:8c:31:3b:c4:9b:62:41:aa:59:01:ae:
         1f:e9:37:dc:f3:81:8e:09:7c:f7:b8:8a:fa:93:7e:00:4c:d8:
         b8:74:61:76:dc:54:3d:f4:e0:6f:ba:e9:d5:62:6a:61:d6:c9:
         06:79:2d:e7:86:f1:03:fa:f0:e3:b8:b4:c4:74:c8:1d:18:7e:
         fc:65:2f:b9:1f:ca:5d:d7:bc:9d:b0:5f:e0:7d:19:02:74:da:
         fc:61:97:c5:cd:36:52:d9:94:63:bd:b8:91:86:97:6a:3b:bc:
         93:26:ef:d8:87:cf:0e:b7:8f:65:d7:da:f5:00:82:c5:53:15:
         6c:2f:8e:d2:3e:26:6a:89:0f:e6:6f:b8:47:12:14:ab:8a:c1:
         cf:94:d8:df:d0:40:af:fe:49:c8:37:e9:a4:02:1e:73:07:94:
         63:d4:12:12:18:04:68:dd:d6:37:14:0b:a1:e3:65:47:0d:75:
         c3:de:75:64:bf:90:04:a1:6a:df:d8:ef:a4:c8:18:c3:db:6a:
         fb:90:42:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpVeiSUDOB9MERIcZLb94eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjYxMDExMDUwMDU4WhcNMjYxMDEyMDUwMDU4WjAzMTEwLwYDVQQD
EyhiZTczZTY5YjM0YjlkYjRjMWEwNjdkYzcwMjY3ZjQ0YzU5MWM0MTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfTp4CAMuiXHNXvQnQWc1kRGq3dT
EdqKy4rmXsmrJK2C4gPDKTAEymtG0scn3c4OTQqQiGxEqvj8lXdqt7JVAhZc1GS2
zs91a20e8aNxYTN4LsIpWjtevgp2pR7LLrTgRccHEZT7tFdsU4wiPYOoNAGGU6JW
SayvYGyb7wKxqIh3u7wUFnsWVuoBpzQoS5MULG6g07Xx1hi9Jy8tUITwHaGeFqxA
CFbjbmerM7gI8wJ+nCg29isvg+3hczC8zwoGcJe9l/lC+FCuVE4tsyc9XqCS65/8
Dvk3jaDIrWCUYxwmmeo1/zzCsBx4oilL9HYiQF/a+h6V083tnvGUWb+0lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5z5ps0udtMGgZ9xwJn9ExZHEEOMB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfHvgX6G
kVQtCyCIsKqlDj3KS2p8QHcNMEzH3KK0CWQ1710Sjksv2Uqq8hAJCUiD2XGeJKCx
0mQ4c6I2ZIwxO8SbYkGqWQGuH+k33POBjgl897iK+pN+AEzYuHRhdtxUPfTgb7rp
1WJqYdbJBnkt54bxA/rw47i0xHTIHRh+/GUvuR/KXde8nbBf4H0ZAnTa/GGXxc02
UtmUY724kYaXaju8kybv2IfPDrePZdfa9QCCxVMVbC+O0j4maokP5m+4RxIUq4rB
z5TY39BAr/5JyDfppAIecweUY9QSEhgEaN3WNxQLoeNlRw11w951ZL+QBKFq39jv
pMgYw9tq+5BC4w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:40:14 2026 by rpki-client