Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
File:                     Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json)
Hash identifier:          srMyJO7LjIThWW12aDw9AiQUGlliTPO3QPwWQGVKXXQ=
Subject key identifier:   08:D2:12:A2:8D:E1:88:B7:54:9A:3A:90:DB:A1:29:E8:3F:C6:89:DD
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Certificate issuer:       /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial:       01A0BFF9CD2DF7B307D278BE824AEB2508BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
Manifest number:          1AB5
Signing time:             Sun 20 Sep 2026 18:00:14 +0000
Manifest this update:     Sun 20 Sep 2026 18:00:14 +0000
Manifest next update:     Mon 21 Sep 2026 18:00:14 +0000
Files and hashes:         1: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (hash: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno=)
                          2: BgYgNXUiTeu31n67bX2V90cAvTI.roa (hash: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=)
                          3: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: o+iTjrfDYpKpIO0zIM5mL79FmWxkgIQ7u+vaXjlTzzo=)
                          4: _KGGRE3h2YqKAa5plM_mCfMJBv8.roa (hash: 0ajoljFZeE+fI9LUdEUozfgpjrtBS3fcIVPaSye39JE=)
                          5: eqjRIQl2tcvdRn0WGpqecEf39BE.roa (hash: wo1ZcMLEQzOlMVuGPZQ1qvLlzhW3e3KGV8eqOLVncZU=)
                          6: r4LSjefpPXh2NBWzmzML-YHCiVQ.roa (hash: 4cwAGYLXFcCvXhQaffPoqSeBEp85Obiw6bTDloA68I0=)
                          7: v988XuaULyoop9LUwUQjOW9deNI.roa (hash: SDvqBvv6PpnYkWcvZyzQiEVAzNQK0geVDH/Q3TfcG6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:f9:cd:2d:f7:b3:07:d2:78:be:82:4a:eb:25:08:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
        Validity
            Not Before: Sep 20 18:00:14 2026 GMT
            Not After : Sep 21 18:00:14 2026 GMT
        Subject: CN=08d212a28de188b7549a3a90dba129e83fc689dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:68:4e:45:49:1f:85:96:85:8b:19:a0:e8:
                    6b:47:43:3e:30:92:3a:64:a7:a3:d2:2b:aa:dd:40:
                    0c:a5:38:e9:8a:97:e3:12:c3:fd:be:35:e4:42:90:
                    24:0e:b7:4e:51:13:62:9e:3c:1d:ef:90:43:31:87:
                    14:3a:a3:db:8d:e9:a2:75:e6:5d:cc:fb:a1:f5:ea:
                    d9:89:b1:6b:5c:79:d2:19:d1:b1:ab:72:97:b7:8c:
                    8c:92:90:f2:6d:09:b5:cc:92:18:cf:f2:cf:7e:7f:
                    fd:ee:5e:55:12:d1:03:ed:2a:7e:37:f8:d6:d8:5b:
                    cc:e5:ba:56:7e:d8:7a:8e:47:92:f5:83:f4:18:2e:
                    4a:64:40:bb:cb:18:8e:18:04:9b:68:52:e4:61:34:
                    e0:b0:0c:02:40:bf:59:d6:4e:d3:39:c2:d9:f2:c4:
                    a2:06:54:da:8c:52:70:61:42:c3:5f:01:8e:02:54:
                    8f:14:e8:d8:4f:4d:b8:f6:48:e3:cf:06:52:f8:18:
                    39:6e:e3:ba:67:d3:54:ad:2c:4e:0c:5d:3c:f8:23:
                    98:e9:a0:9f:e7:7b:57:a7:40:87:92:58:f5:0f:81:
                    34:42:38:21:7b:ca:44:88:90:09:cb:55:62:31:57:
                    8f:af:a2:19:06:5e:e7:0f:03:cd:41:87:02:82:5e:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:12:A2:8D:E1:88:B7:54:9A:3A:90:DB:A1:29:E8:3F:C6:89:DD
            X509v3 Authority Key Identifier:
                keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f9:e8:3c:1e:82:82:c1:c6:03:8e:de:8a:d5:ac:5f:db:65:
         eb:ad:55:04:5c:d6:11:f1:42:cc:c6:d8:e1:83:e6:63:3a:f6:
         4c:0a:c9:40:75:6a:fd:07:ec:71:e1:18:c0:a0:4c:4b:fc:53:
         d5:b6:e1:f6:b8:10:a8:3e:e3:9a:8e:0e:aa:20:a3:49:b3:21:
         f5:c5:ba:bb:56:d5:5c:5d:fa:c9:93:b6:8b:70:2b:a9:43:3f:
         6f:1b:f2:67:9b:9d:c8:91:a5:ba:41:8d:d7:fa:d5:6b:f5:3e:
         1b:35:58:a5:95:4d:ee:3f:30:2e:e3:55:4e:a0:b9:7d:71:62:
         73:68:70:99:86:31:d2:30:e5:1f:f9:43:20:ae:f6:0d:eb:0b:
         cf:77:f9:cd:f5:6a:46:75:35:01:96:76:20:9b:86:14:61:58:
         59:31:76:05:0d:97:b5:70:6d:ad:dc:f3:11:17:85:47:00:23:
         f8:04:22:60:6d:4a:8f:27:bf:dc:b4:97:8e:48:59:0a:f6:cf:
         92:c1:b9:c7:65:8e:a7:24:e0:35:74:f0:95:1e:15:e6:22:b6:
         44:65:67:97:9c:5b:0f:ca:a7:4a:1c:51:5b:1e:61:f6:9d:e4:
         cd:03:20:5b:c8:73:a3:ba:65:79:1c:d7:11:25:22:0e:c5:a6:
         19:17:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:32:59 2026 by rpki-client