Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          SwGRuXgYeJKDrJoWHxWiYdZdWfPxxI6BA7qg8ez8Cvc=
Subject key identifier:   1C:4A:87:7D:1C:02:48:7A:D3:EB:A3:25:CA:80:AE:D6:A7:4D:9A:20
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       01A0C10C74B211657C52EFEA0AFDC28F8F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          15B6
Signing time:             Sun 20 Sep 2026 23:00:14 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:14 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:14 +0000
Files and hashes:         1: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (hash: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E=)
                          2: 143uR_Opu7Zeu7uxf8rhyVqs6pA.roa (hash: gnOcz10DzYsdv7a3eo6ReHVx6t0LmKA4aY2SFi+8K5g=)
                          3: 5GRL2xTwlhtB45CKu5VYBHVeCs8.roa (hash: xHs3aoTc2u94fp2p4GMEh09FXKLHJU4FJ23Xwrl2mb8=)
                          4: LImeWPjRU0bTYqqH-HKe4xkFuc0.roa (hash: zqLkD7GL5OBQzT/9VJg9wwwTHEy5OhmPX5ktJW+mT7A=)
                          5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: D6e70xS/xuO6pvgF/6hoEOPDJRFwkSEcIaNg2zGXoGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0c:74:b2:11:65:7c:52:ef:ea:0a:fd:c2:8f:8f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: Sep 20 23:00:14 2026 GMT
            Not After : Sep 21 23:00:14 2026 GMT
        Subject: CN=1c4a877d1c02487ad3eba325ca80aed6a74d9a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:90:db:46:45:72:19:4e:cb:6e:bc:10:aa:
                    24:b7:1a:12:12:f0:29:9c:d9:67:d3:69:2b:a8:92:
                    b0:bc:d9:96:c5:a8:14:77:39:a9:2a:7c:27:75:8e:
                    65:76:ee:b0:9c:73:8c:a0:90:a7:24:fc:df:e6:fe:
                    b5:50:b6:57:ea:2c:31:94:51:af:f0:f3:ae:29:1c:
                    b9:25:47:0b:a1:1f:3a:5f:1c:72:20:1d:ff:0a:b6:
                    b7:ff:79:77:57:cc:6a:0e:2a:af:26:f2:3d:4b:91:
                    c9:4d:8d:c4:8d:70:20:3a:7e:5b:0b:af:e5:fc:d7:
                    57:ac:20:dd:c3:8d:bf:02:7c:c3:a0:56:11:e4:4f:
                    3e:9d:df:87:e4:b7:f0:6d:59:a9:26:14:5d:e4:a5:
                    80:bd:15:56:30:ba:9e:b0:f6:89:39:2a:d5:17:02:
                    1b:01:39:90:26:39:19:86:2f:97:f2:8c:85:a6:c0:
                    2d:ff:b7:30:f1:b6:eb:ed:48:f5:45:c6:1d:6a:5d:
                    76:b1:97:97:74:37:6d:54:44:9d:ef:a9:ab:75:cc:
                    ca:86:d1:a3:52:6f:09:8c:4f:3c:07:55:96:f7:4d:
                    ea:49:c9:12:d9:56:2a:08:63:97:41:d2:6d:87:d4:
                    b5:c8:56:bd:54:50:db:a1:89:14:f7:75:57:94:96:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4A:87:7D:1C:02:48:7A:D3:EB:A3:25:CA:80:AE:D6:A7:4D:9A:20
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:93:95:c0:bf:3f:b0:6e:67:cf:47:e7:a3:ef:60:da:6a:6d:
         20:c5:ea:05:87:d8:e3:81:f9:e2:11:bf:22:67:5a:17:a3:57:
         5c:d5:d1:79:2a:88:6f:bf:60:61:9d:8a:b7:6a:2d:12:61:5a:
         e7:63:2f:a4:41:7e:8b:fa:46:88:bd:b3:09:6a:f8:53:55:f3:
         bd:79:38:a4:bc:a0:4b:82:d4:39:0c:c0:f9:a5:2b:97:ed:26:
         4e:20:fb:e8:c9:4d:12:21:f5:2f:3c:ff:2a:fb:14:11:ee:0f:
         d6:a3:b5:f3:60:90:0e:8a:f0:9f:80:33:a7:71:8a:eb:23:08:
         21:d4:80:35:80:76:37:6e:f6:ac:6b:9f:ad:dc:18:e6:ce:06:
         b0:45:f8:77:fc:4d:9f:65:db:7a:d5:12:b5:b6:84:9e:7b:b5:
         53:fe:08:9b:3f:64:6a:4c:e3:11:a4:40:f9:35:ad:6c:25:8c:
         5b:ed:7a:8d:e8:2b:f0:5a:99:6f:f2:ce:d4:08:ca:37:36:f4:
         b5:29:db:ac:d7:0f:c2:26:f1:9b:e8:fe:75:80:7f:7b:e7:22:
         7c:73:a8:f2:be:05:ab:5f:ea:f1:40:05:5c:7e:ba:b0:63:4e:
         e5:23:10:d7:bf:09:f4:9d:e8:48:a4:8d:de:8d:7b:d2:f6:c0:
         74:0b:6f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:47:27 2026 by rpki-client