Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File:                     z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier:          6Rokrmc74OTAKHic03t4ghWXVjT0djaFBvjFMTwnkBI=
Subject key identifier:   D2:A4:83:D9:98:96:3A:B2:56:5C:D8:94:29:86:57:81:F9:F7:04:7C
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer:       /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial:       01A0DC1692873AD24CCF1907B9B48276BE68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number:          1894
Signing time:             Sat 26 Sep 2026 05:01:01 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:01 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:01 +0000
Files and hashes:         1: AYmY6bS1DW5wNX1gemsinMtxn4A.roa (hash: zRK2sb27i2HJzTqfMswAMQmmf/Cx/9L2B5J6Nm4MQxc=)
                          2: LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa (hash: IeCaOVu0UoDFXz4huIJasKVw/iNCvSqG8pZqqp+jQ3I=)
                          3: cjZ33bD33v-eUIybd6UwPNRRpoQ.roa (hash: FLqtX2+FQiCXJcMBU06mRmURivJmg3QovEfaA3JnsmE=)
                          4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: pyyhNFbhLN9fzMT2FqC2A14j7VBJb6+S87KdR60h3K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:16:92:87:3a:d2:4c:cf:19:07:b9:b4:82:76:be:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
        Validity
            Not Before: Sep 26 05:01:01 2026 GMT
            Not After : Sep 27 05:01:01 2026 GMT
        Subject: CN=d2a483d998963ab2565cd89429865781f9f7047c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:34:58:b9:85:27:f8:67:a6:24:a2:09:69:
                    3d:67:6a:88:44:ec:04:b9:d2:01:23:28:99:69:77:
                    f0:be:6f:5f:5a:b0:4e:6b:ad:95:03:f6:4e:96:c6:
                    9f:52:62:82:e6:b4:48:5a:99:72:09:43:dc:42:74:
                    ee:0d:71:34:fe:26:8e:e9:91:0d:af:b4:e1:da:f9:
                    98:4c:c9:3f:b3:30:84:19:84:c6:18:d7:24:31:84:
                    3d:aa:fd:48:97:c1:16:0d:9f:d3:8b:4f:10:0f:ee:
                    16:ee:f9:02:26:2a:b8:c4:49:3a:22:0d:89:8f:5a:
                    b6:e7:c9:70:a2:56:4f:8a:e8:2d:db:08:d4:d2:c2:
                    6e:28:53:dc:e2:c1:44:f3:cd:72:db:a1:b3:e3:9a:
                    a6:00:87:14:03:40:b9:dc:04:9a:49:2f:bc:c5:55:
                    85:e5:18:d4:4d:63:a9:a0:9a:bb:ce:cf:51:8d:b7:
                    ad:86:f2:87:73:39:89:34:2c:59:2e:de:32:c2:38:
                    82:78:3c:d9:9a:31:9d:48:f1:f5:f1:46:40:ad:c3:
                    17:13:ae:28:29:75:e8:f1:cd:0e:94:06:b0:ac:4d:
                    ed:44:1b:f6:b8:bf:28:ae:ea:59:ad:79:10:d0:16:
                    99:4e:3d:d8:56:b1:c1:03:40:0b:8c:f8:89:6f:a1:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A4:83:D9:98:96:3A:B2:56:5C:D8:94:29:86:57:81:F9:F7:04:7C
            X509v3 Authority Key Identifier:
                keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e8:c6:4c:75:02:6f:fe:b6:a2:6b:af:31:d0:85:b4:f4:b1:
         65:14:d9:16:55:3d:a1:d7:70:25:32:dd:d1:72:dc:86:92:d9:
         28:05:66:e9:ff:2c:83:1b:4d:b2:e2:4c:bb:1c:2f:19:7a:f2:
         f9:11:04:70:31:14:fd:0b:15:75:8b:0b:36:52:24:ab:52:c4:
         58:2d:98:3a:bc:bb:aa:c2:e9:1d:f5:12:62:24:62:d1:99:99:
         7d:69:2e:19:0e:ec:df:1c:99:6f:1d:fc:ee:e4:a0:90:62:ec:
         6d:ba:e9:fd:2d:a3:da:66:c9:40:39:50:ee:2a:8c:a6:46:60:
         46:b5:ef:dd:9b:3c:cc:0e:03:62:5b:d1:62:fe:9e:28:1c:a6:
         f9:b1:d8:a5:1f:b5:31:fa:0d:ef:7e:ed:0c:84:29:9f:89:8a:
         ae:ec:59:af:6e:9f:c9:15:e1:50:c3:35:8e:30:74:d8:9b:fe:
         09:66:2b:8b:33:3a:ef:7c:a8:61:d4:20:32:d5:d8:0c:9b:7c:
         fb:40:c3:3c:71:91:15:27:65:39:03:1d:b0:4c:b6:f3:66:51:
         92:b2:29:08:77:5c:89:c5:5f:f4:41:1e:47:da:7e:fc:ea:22:
         c7:3d:cc:6f:0d:73:db:96:40:f9:de:d1:c2:b5:e5:cb:df:b5:
         8b:ac:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:59:05 2026 by rpki-client