Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File:                     zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier:          qDCFErOsNHN8GNAgBmXT5fV1LaOq28BuW55cX4n+dUM=
Subject key identifier:   26:42:F2:FE:D7:63:EE:A0:B1:7B:A5:8A:0E:58:83:79:3A:1C:23:24
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer:       /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial:       01A0EB535ECB5705F7627321AD872C5A172D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number:          0BEA
Signing time:             Tue 29 Sep 2026 04:01:44 +0000
Manifest this update:     Tue 29 Sep 2026 04:01:44 +0000
Manifest next update:     Wed 30 Sep 2026 04:01:44 +0000
Files and hashes:         1: VO_sy6lKNExx4MzaK89ZPuk6eio.roa (hash: ECDK2vLnh8ZsV57MTxVkPJ7GlNwC4JIO9uqNonE5Yrs=)
                          2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: zK22SUDkYxvwWbpfWWarbdQOA+846V3AelBOm9GoCqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:53:5e:cb:57:05:f7:62:73:21:ad:87:2c:5a:17:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
        Validity
            Not Before: Sep 29 04:01:44 2026 GMT
            Not After : Sep 30 04:01:44 2026 GMT
        Subject: CN=2642f2fed763eea0b17ba58a0e5883793a1c2324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:ed:9d:3b:5a:44:89:81:26:e3:1e:7a:b1:
                    ba:82:60:36:e4:57:e4:7c:be:ae:49:d5:c4:e5:6f:
                    02:b5:50:b5:a0:df:d3:76:b6:4e:a8:a6:ea:2b:39:
                    70:35:72:e3:d9:bd:30:e1:64:b0:f5:8f:d2:27:d9:
                    63:99:63:df:42:d9:9b:92:9d:d4:56:62:82:ec:d4:
                    09:c7:c2:30:23:48:f7:99:ff:c4:60:f6:da:81:1e:
                    ca:4a:be:6e:94:ab:fe:6c:db:66:6f:e2:12:43:90:
                    62:e3:fc:4c:a9:21:1b:43:28:ba:bf:71:8a:81:dd:
                    de:1e:7c:35:2f:78:41:a6:a2:30:ec:63:7a:72:aa:
                    e8:ad:e2:f1:64:5d:e4:1a:7b:a4:49:9e:f8:e6:4b:
                    9c:ae:67:2d:5c:26:a9:d8:70:75:aa:cb:a9:c5:66:
                    90:3b:8a:de:68:57:20:db:c3:60:f6:e0:eb:cc:dd:
                    eb:c4:92:c1:1d:8e:10:1b:3b:12:69:09:aa:a2:61:
                    83:97:26:da:37:3b:0b:34:53:a1:f0:2a:4f:8c:eb:
                    ab:d3:97:e6:a7:b1:dc:7e:d9:ff:fc:79:47:d5:3f:
                    f1:bb:87:b4:de:d7:e7:49:db:4c:fd:ab:73:75:27:
                    17:6e:ab:96:bb:18:33:7e:25:a3:02:f8:64:23:da:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:42:F2:FE:D7:63:EE:A0:B1:7B:A5:8A:0E:58:83:79:3A:1C:23:24
            X509v3 Authority Key Identifier:
                keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:68:14:e8:05:12:dc:e6:cd:17:fc:fc:c5:d6:6f:dc:53:ce:
         65:45:f9:70:94:49:eb:20:22:b5:83:69:67:11:dd:4e:fe:ee:
         5a:9e:b7:e5:2a:77:c3:65:06:02:a2:ee:ae:29:9c:e7:9e:87:
         a1:4d:0e:15:d4:37:9a:f7:9f:6e:b5:e4:5a:10:37:14:96:6c:
         d5:8f:bc:ce:ec:2b:12:fe:83:de:4b:79:79:46:a0:41:e5:13:
         b6:50:d8:bd:cd:4b:64:dc:83:26:07:87:a1:8e:94:22:67:1e:
         7f:37:32:39:8c:cd:33:69:8c:e8:b2:ed:4f:02:b0:a9:c1:02:
         41:c4:78:0c:a7:dc:af:5e:b4:1c:c0:82:78:ca:50:23:f8:10:
         db:40:6e:b7:d8:2d:e7:27:60:21:6c:6c:87:0a:ad:56:b9:7d:
         ce:f7:0e:7e:bd:88:4e:f5:4e:cf:9c:3f:5e:99:0c:8e:2d:9e:
         7a:55:e7:39:35:98:eb:d8:96:5e:80:44:34:36:9e:56:c5:10:
         36:73:f7:5d:59:b0:b0:9c:f6:f2:f7:2e:5d:a0:b3:f0:ac:08:
         14:86:bd:4e:ec:50:1f:76:c5:d2:99:8c:e1:da:2c:99:f5:fc:
         d8:05:4f:98:b2:7f:a8:7c:3a:94:38:41:b0:09:02:80:35:b3:
         40:d6:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:54:47 2026 by rpki-client