Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          9U4nn6BVthm9YAsuQjmNy3Tj4IB6rYAnLMm6w4unRs0=
Subject key identifier:   D8:04:DA:69:FC:16:79:22:6A:8C:DC:AF:AF:52:49:19:27:86:16:8C
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       01A0C82136F7821F95F1A31CA2879D9CF043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          1A68
Signing time:             Tue 22 Sep 2026 08:00:14 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:14 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:14 +0000
Files and hashes:         1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
                          2: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
                          3: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
                          4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
                          5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: vZp7O04ovVSCB8G0A+B2pnUQsjwo/D4QC2zKlfxdPa4=)
                          6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
                          7: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (hash: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:36:f7:82:1f:95:f1:a3:1c:a2:87:9d:9c:f0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Sep 22 08:00:14 2026 GMT
            Not After : Sep 23 08:00:14 2026 GMT
        Subject: CN=d804da69fc1679226a8cdcafaf5249192786168c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:33:10:e9:31:83:bc:88:16:4a:c5:fb:96:
                    15:d8:32:b1:26:01:ec:27:16:f8:fb:f5:a1:83:00:
                    a4:ce:32:62:34:06:f7:2a:fa:c8:73:fe:51:ba:e7:
                    43:14:52:8e:43:b9:c1:88:46:2a:f8:bb:bc:a0:27:
                    d1:85:53:ac:81:37:a7:33:16:b3:97:b0:93:bc:70:
                    ad:08:cd:fa:8b:a2:fe:d1:ae:33:ed:d7:47:91:76:
                    39:08:90:66:c8:46:33:51:28:ee:b8:cf:b0:04:c5:
                    2b:e7:a6:da:78:fd:35:4d:15:63:da:2a:bd:8a:bd:
                    74:c7:64:81:03:97:af:fd:f3:98:e0:72:98:52:e9:
                    bb:96:78:10:85:c6:d8:85:52:cb:a3:3c:d6:46:09:
                    b9:ef:19:c0:61:74:0d:05:99:35:bd:37:c4:14:bf:
                    9e:ec:e0:2d:f6:12:e6:1a:20:b0:b8:64:17:36:32:
                    8a:ec:a8:3a:f7:77:76:18:bd:13:15:69:52:14:3e:
                    dc:d7:df:37:8f:24:bf:6b:24:b8:9a:df:40:cf:30:
                    15:f4:94:ac:13:47:a1:e2:91:66:35:b9:bb:7a:09:
                    7d:c2:d3:71:62:90:5c:83:84:76:cc:37:8d:06:7d:
                    d4:81:81:ca:45:9b:d9:8c:8a:b1:e8:86:b8:e5:3b:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:04:DA:69:FC:16:79:22:6A:8C:DC:AF:AF:52:49:19:27:86:16:8C
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d3:f7:05:a8:3f:a7:61:c5:bd:a1:32:5a:4d:fd:9d:06:30:
         b7:a3:b4:03:a0:16:dc:2b:71:24:3a:d3:a9:3d:4a:e7:75:55:
         3e:6f:f2:2d:fa:bc:bf:a8:07:9b:64:36:36:12:2a:21:18:5d:
         e1:da:e9:a0:b3:5c:13:3f:ec:45:9f:96:57:ce:28:d6:a1:4c:
         0d:a0:77:43:b6:eb:4a:20:9f:af:dd:fc:c1:ec:36:9f:49:bb:
         9a:0f:5c:1a:09:e3:53:f8:75:1f:85:51:a6:54:64:06:48:ba:
         28:32:e5:7a:01:39:72:ab:4a:84:c6:54:8c:6e:ad:11:7d:b1:
         84:46:cb:47:4c:4a:af:af:01:81:91:b1:b0:dd:80:d8:c5:fb:
         f9:da:5b:0c:62:a7:67:7f:a3:a5:34:7c:49:f6:46:ba:5f:19:
         2d:55:53:34:81:d5:ac:f7:48:0e:16:d1:46:b9:cc:13:c0:d7:
         50:0a:16:e7:61:70:b4:64:dd:46:3d:f7:59:c3:c6:70:0c:33:
         60:45:66:af:5b:ea:9f:b4:e3:1d:ca:2a:90:e9:06:cb:52:fe:
         1b:dd:13:35:20:7f:64:1b:c6:33:3c:4e:c8:8a:34:f2:c2:99:
         01:50:42:9e:61:b8:15:66:e6:c8:fc:82:72:75:ed:8a:64:f8:
         a2:3a:aa:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIITb3gh+V8aMcooednPBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5
NDkzNjAwHhcNMjYwOTIyMDgwMDE0WhcNMjYwOTIzMDgwMDE0WjAzMTEwLwYDVQQD
EyhkODA0ZGE2OWZjMTY3OTIyNmE4Y2RjYWZhZjUyNDkxOTI3ODYxNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8szEOkxg7yIFkrF+5YV2DKxJgHs
Jxb4+/WhgwCkzjJiNAb3KvrIc/5RuudDFFKOQ7nBiEYq+Lu8oCfRhVOsgTenMxaz
l7CTvHCtCM36i6L+0a4z7ddHkXY5CJBmyEYzUSjuuM+wBMUr56baeP01TRVj2iq9
ir10x2SBA5ev/fOY4HKYUum7lngQhcbYhVLLozzWRgm57xnAYXQNBZk1vTfEFL+e
7OAt9hLmGiCwuGQXNjKK7Kg693d2GL0TFWlSFD7c1983jyS/ayS4mt9AzzAV9JSs
E0eh4pFmNbm7egl9wtNxYpBcg4R2zDeNBn3UgYHKRZvZjIqx6Ia45TvOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgE2mn8Fnkiaozcr69SSRknhhaMMB8GA1UdIwQY
MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt
NjQxZGQ0Mjg4YzQwLzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw
LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9P3Bag/
p2HFvaEyWk39nQYwt6O0A6AW3CtxJDrTqT1K53VVPm/yLfq8v6gHm2Q2NhIqIRhd
4drpoLNcEz/sRZ+WV84o1qFMDaB3Q7brSiCfr938wew2n0m7mg9cGgnjU/h1H4VR
plRkBki6KDLlegE5cqtKhMZUjG6tEX2xhEbLR0xKr68BgZGxsN2A2MX7+dpbDGKn
Z3+jpTR8SfZGul8ZLVVTNIHVrPdIDhbRRrnME8DXUAoW52FwtGTdRj33WcPGcAwz
YEVmr1vqn7TjHcoqkOkGy1L+G90TNSB/ZBvGMzxOyIo08sKZAVBCnmG4FWbmyPyC
cnXtimT4ojqq2w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:13:00 2026 by rpki-client