Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
File:                     ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft (raw, json)
Hash identifier:          51zJ3l4PbXGK/o8T/0VURX1dBT1zxCxkNCV4Kwdatg8=
Subject key identifier:   B8:61:3B:5D:A5:61:61:DC:47:97:7D:2F:39:53:26:ED:BA:7D:B1:E1
Authority key identifier: 66:6B:B2:2A:B6:4A:CE:A6:24:8E:3E:EC:D4:D6:00:79:70:46:E8:B9
Certificate issuer:       /CN=666bb22ab64acea6248e3eecd4d600797046e8b9
Certificate serial:       01A107A5A67719833FCDB8C6FE294FD3C071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
Manifest number:          01C8
Signing time:             Sun 04 Oct 2026 16:00:58 +0000
Manifest this update:     Sun 04 Oct 2026 16:00:58 +0000
Manifest next update:     Mon 05 Oct 2026 16:00:58 +0000
Files and hashes:         1: ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl (hash: YgzL+QG8Og6yKTd2hqFnPCYuMKIfZR5JE8gFe0Ed8tM=)
                          2: iXdCxqONjbFxErLs984fDtPPuP0.roa (hash: kOe2FaHNUJoqh8TvxUecRv4MaU6ezmauA8mPBQq+gXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:a5:a6:77:19:83:3f:cd:b8:c6:fe:29:4f:d3:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666bb22ab64acea6248e3eecd4d600797046e8b9
        Validity
            Not Before: Oct  4 16:00:58 2026 GMT
            Not After : Oct  5 16:00:58 2026 GMT
        Subject: CN=b8613b5da56161dc47977d2f395326edba7db1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:ab:2a:ce:db:76:ef:98:58:61:9d:52:2c:
                    36:b3:92:ba:07:66:03:77:47:2f:fc:1b:88:00:56:
                    29:69:e5:80:aa:db:23:c8:bd:f9:ff:25:66:43:16:
                    74:0b:7e:6a:6f:1a:e8:a6:da:cc:d2:86:19:a6:65:
                    f1:71:f6:e8:32:39:13:84:94:db:83:5b:ed:ec:65:
                    58:eb:17:f8:48:2e:bb:3a:6d:22:37:5e:e0:63:f8:
                    75:2a:7c:ba:d9:29:c3:d4:0d:51:d3:31:c8:5f:26:
                    4a:89:ed:d2:c4:d9:26:1d:84:0b:18:ce:f1:6d:64:
                    c0:e8:da:5c:80:21:09:7d:e7:4b:32:c6:5c:a3:8b:
                    fa:4c:c5:2d:d0:c4:84:a9:8a:1c:d3:8f:c8:36:ef:
                    7c:a9:5d:89:13:95:8a:af:e7:a5:e9:10:b2:ae:47:
                    99:4f:47:0a:27:21:98:13:b6:da:9e:55:d7:44:07:
                    7b:a7:fe:6f:0c:41:7d:b5:ae:2b:13:ee:46:a1:b3:
                    21:f5:31:04:64:b3:d2:b8:2b:d4:65:57:55:b7:f7:
                    f4:d3:36:d2:35:0a:b1:44:69:85:09:9a:09:41:93:
                    16:03:3b:bf:1a:72:42:a6:98:e0:69:91:bd:cd:e2:
                    c4:af:5f:6a:ee:73:fe:bb:5a:39:07:bb:ea:71:c1:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:3B:5D:A5:61:61:DC:47:97:7D:2F:39:53:26:ED:BA:7D:B1:E1
            X509v3 Authority Key Identifier:
                keyid:66:6B:B2:2A:B6:4A:CE:A6:24:8E:3E:EC:D4:D6:00:79:70:46:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ca:e1:6f:58:15:89:f1:e7:d9:12:4d:d6:ff:84:b9:6c:58:
         34:5e:88:4a:47:8f:90:46:05:c1:20:a8:6e:89:3b:c6:7c:47:
         31:27:0d:a3:3b:dd:d7:28:43:92:4c:4e:9c:e0:9b:35:07:89:
         4f:da:a0:60:fe:b6:15:13:6d:f5:4c:05:6c:17:1e:05:56:d0:
         56:29:ba:28:ba:2a:b7:22:db:d3:80:12:f3:0d:30:c9:92:4c:
         d9:b6:1d:46:f4:cd:e8:5f:3e:d1:53:70:06:96:33:15:60:fa:
         52:b9:66:3c:15:c9:8d:af:26:21:3b:d1:03:6e:6f:e2:99:bd:
         16:6e:5a:3f:71:13:d6:e3:cc:b7:57:f3:8f:20:3b:4f:c0:09:
         8b:a3:49:41:09:f0:67:49:5d:d4:82:f3:c6:d6:1d:09:84:b4:
         45:05:88:e7:c4:41:ab:57:12:39:c9:d3:77:94:e7:13:c8:4c:
         20:78:6e:18:55:93:14:71:35:de:80:90:b9:a5:fe:d5:6e:62:
         6a:33:42:2f:cc:df:0f:18:e4:43:83:6f:f0:10:3c:cb:a8:2a:
         c8:d2:49:39:f9:9b:22:32:44:4e:7a:d2:46:28:4d:d0:ea:fe:
         80:01:a1:c5:bb:49:9e:06:4a:af:c9:23:1b:72:63:0c:48:fd:
         eb:64:d2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:43 2026 by rpki-client