Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File:                     ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier:          0rlEPbHtLZ8WB5NuchcM0/Eu6Ehnl0SBHIiI6eR6mPs=
Subject key identifier:   96:65:DD:1C:BD:28:50:D5:05:B5:16:D6:D0:66:14:42:1F:42:D5:52
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer:       /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial:       01A0C70F1D93BD6D604A7A64E0CB6B525ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number:          035B
Signing time:             Tue 22 Sep 2026 03:00:51 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:51 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:51 +0000
Files and hashes:         1: 8ndDa5rRng5A6n53ieZF5n0zI7s.roa (hash: KtGt0NdlDvyNnvEnoJfeg2xWBfVSAuPvOu/PVmj7YGM=)
                          2: VPi2ebLJADEknE0vjMS8E-YQvPQ.roa (hash: oO735iZZLpkD9NxJ8YTop9o4debqleHv7iMJ/1qzafM=)
                          3: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: Q5Gs4KjgV4z8JjWu/1BOKzH2SSzoLjnAc0B9l43+eQM=)
                          4: uR2ylumTmfT3BQFedfgIoqmEIcM.roa (hash: OT+mNpsQIWtCh4SyPSeorwW+75Abd8tYhpy5oP3ZE18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0f:1d:93:bd:6d:60:4a:7a:64:e0:cb:6b:52:5a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
        Validity
            Not Before: Sep 22 03:00:51 2026 GMT
            Not After : Sep 23 03:00:51 2026 GMT
        Subject: CN=9665dd1cbd2850d505b516d6d06614421f42d552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:e5:7f:09:54:78:9d:bc:3e:04:63:40:1d:
                    75:52:cf:cf:73:28:11:81:e2:7b:9d:3f:3c:bc:11:
                    24:ab:88:fb:66:9f:1f:89:ff:d1:79:1a:92:97:2e:
                    68:a0:08:3a:86:43:81:ab:f6:24:ca:f8:bd:81:4b:
                    bf:75:51:da:cf:af:52:4e:e2:cf:a8:2a:86:5e:75:
                    bc:9c:11:64:00:63:b9:6e:73:43:3e:f8:15:2e:e4:
                    4a:24:41:ea:49:44:57:25:b2:ea:16:cb:fd:30:13:
                    a7:3d:2c:53:25:7e:e9:64:7f:fd:85:dd:9c:4a:1c:
                    87:1d:4d:0f:27:e7:a1:cb:57:1e:1e:54:2a:d3:4e:
                    62:15:5b:8d:75:26:70:09:c5:6c:fd:9d:66:f0:ff:
                    6b:87:f5:9d:da:db:f4:66:96:10:44:cf:e2:ed:7b:
                    9a:76:c8:c3:cc:b0:91:61:bb:ec:53:dc:a9:c6:fa:
                    23:bc:51:5b:fc:ca:f8:ae:68:eb:fa:d3:4f:ee:1e:
                    9a:b3:81:1e:ae:b6:cb:e5:11:8c:6d:f4:c8:63:39:
                    24:6f:59:8b:31:a0:ff:de:69:45:00:bf:99:e6:aa:
                    b9:52:c2:98:ec:8e:ad:e2:f1:57:de:ac:c7:6d:18:
                    bf:ef:61:e3:e2:be:81:1b:ff:e3:60:99:b4:81:48:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:DD:1C:BD:28:50:D5:05:B5:16:D6:D0:66:14:42:1F:42:D5:52
            X509v3 Authority Key Identifier:
                keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c5:ce:c1:01:7b:70:88:54:52:70:03:27:14:01:68:90:41:
         82:61:83:a1:06:26:ca:c6:0e:90:a8:06:88:56:f8:19:65:b4:
         47:25:a2:f1:de:8f:7c:b4:99:53:d2:65:7d:f7:4f:96:0a:67:
         49:60:2b:97:b9:d9:a4:b1:20:d2:2e:6c:3e:7c:f3:9b:cb:de:
         44:2d:6e:62:36:ae:54:d1:44:f4:93:72:9e:04:a2:2b:31:2a:
         c8:2c:50:fa:ef:5f:08:4f:75:b0:5d:8a:a8:67:7c:ee:8f:86:
         1b:b8:b1:4f:ae:41:c0:aa:ed:c6:dd:7c:58:0e:39:cc:21:f6:
         b0:a2:0c:34:75:07:58:26:e9:02:4b:03:e0:50:c2:b1:9b:64:
         fc:c6:7e:cf:c4:d2:6a:91:9a:09:3b:c9:c7:7f:35:8d:eb:af:
         72:99:37:d8:5b:4a:bf:df:c6:93:6e:76:36:b4:2e:6c:08:0d:
         e7:87:17:08:e3:d8:48:ac:24:db:32:a7:ba:f6:86:8a:40:08:
         a6:9e:33:03:4b:74:9d:8d:89:0c:99:fc:19:5c:7f:da:34:3b:
         e0:fa:2b:fe:f0:81:0c:13:99:24:6d:b0:56:2c:2f:b0:e7:1f:
         25:b4:11:74:03:57:78:91:71:2e:82:62:f6:c1:d5:f8:d9:c7:
         ea:47:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:39 2026 by rpki-client