Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft
File:                     z8vCpnmN-fkdW-nz18oKI5p_xVg.mft (raw, json)
Hash identifier:          rOEODDKaqCgZRfWN8XK0hj6i/kVT7uKlx9NEtK0momE=
Subject key identifier:   C9:28:99:9E:7A:A0:CD:A4:4A:2C:32:9A:7E:BA:64:F7:F4:0B:21:A3
Authority key identifier: CF:CB:C2:A6:79:8D:F9:F9:1D:5B:E9:F3:D7:CA:0A:23:9A:7F:C5:58
Certificate issuer:       /CN=cfcbc2a6798df9f91d5be9f3d7ca0a239a7fc558
Certificate serial:       01A12E4570814516D8EC2616E77E2D135A64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft
Manifest number:          58
Signing time:             Mon 12 Oct 2026 04:01:05 +0000
Manifest this update:     Mon 12 Oct 2026 04:01:05 +0000
Manifest next update:     Tue 13 Oct 2026 04:01:05 +0000
Files and hashes:         1: UDH_1tnf99LPgPhIT1ItGY9SsOs.roa (hash: 0E5qq9ZTPli2QQSs3YDaqQLmpnDd0gKNyl9jc1IWEm0=)
                          2: z8vCpnmN-fkdW-nz18oKI5p_xVg.crl (hash: guFPMrZkkVaNTT5Pcf0gUR4+lJwKb1fjkPUnFAy0d/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:45:70:81:45:16:d8:ec:26:16:e7:7e:2d:13:5a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcbc2a6798df9f91d5be9f3d7ca0a239a7fc558
        Validity
            Not Before: Oct 12 04:01:05 2026 GMT
            Not After : Oct 13 04:01:05 2026 GMT
        Subject: CN=c928999e7aa0cda44a2c329a7eba64f7f40b21a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:e2:05:af:ef:2f:91:70:d8:4c:ac:ab:29:
                    97:1f:a7:08:9c:a9:85:59:58:96:a8:f6:45:f4:fd:
                    50:27:43:51:d2:fa:06:97:a7:dc:a6:aa:2f:a6:50:
                    4a:96:53:3a:da:35:05:d4:f0:dd:37:be:54:44:0d:
                    33:ce:43:ff:87:1e:5d:66:fe:ed:2a:41:36:2b:ce:
                    f9:e2:21:cb:0a:d7:38:65:74:cf:d3:da:31:ab:1f:
                    44:96:c4:fb:c6:0a:ac:88:ad:2a:a1:89:97:41:e7:
                    53:13:d7:2b:4d:4b:13:87:d4:00:05:3c:e0:2c:5c:
                    a1:49:fa:69:00:e5:b8:59:e5:97:ed:e0:27:92:18:
                    5b:e4:d2:3c:1f:d4:a5:d1:e3:ae:96:3c:49:9c:11:
                    46:7a:54:b4:ca:94:0f:5e:32:f5:f1:46:06:f7:59:
                    14:ed:61:cd:8f:df:ac:cc:58:23:6f:e4:20:2d:fa:
                    b4:2e:8f:9d:70:68:71:af:c7:f4:1e:e2:44:33:8b:
                    ed:6e:46:8f:33:88:73:e5:c4:6f:39:f8:a1:e7:0c:
                    e1:53:c5:c1:ea:03:c3:cb:8f:4a:ff:ba:0b:40:f7:
                    22:a4:a5:6d:f2:d6:22:e4:83:b1:b9:80:5d:08:a5:
                    40:86:87:e0:c0:a5:5c:c0:34:37:32:50:47:2a:65:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:28:99:9E:7A:A0:CD:A4:4A:2C:32:9A:7E:BA:64:F7:F4:0B:21:A3
            X509v3 Authority Key Identifier:
                keyid:CF:CB:C2:A6:79:8D:F9:F9:1D:5B:E9:F3:D7:CA:0A:23:9A:7F:C5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:20:bd:e5:31:d0:e9:04:8e:ed:f1:19:b6:78:f6:c0:50:89:
         85:f9:2d:ca:7d:23:ad:e3:f1:fa:47:fb:8e:23:d2:f6:63:26:
         c9:28:7a:0f:ef:f1:fb:7a:bb:dd:59:b3:d6:4d:38:1c:f8:61:
         00:ed:21:41:cd:19:88:5c:a5:73:37:b9:84:a8:07:dd:36:24:
         b2:6c:bc:da:26:97:ef:e4:73:90:70:85:24:f8:b4:d1:62:01:
         f3:23:7a:51:c6:a3:fa:9f:7d:e0:41:9f:6e:c0:aa:7d:8f:fd:
         17:82:5f:13:87:fc:73:3c:f6:a6:5d:9a:61:11:90:39:fb:7d:
         83:21:af:54:6d:ec:73:69:6b:36:34:19:0a:64:9f:b4:a3:ee:
         98:4d:97:86:87:d7:2a:09:2d:cc:74:63:3b:67:b2:df:9f:2c:
         7b:45:0c:9c:05:a6:c1:a7:1b:af:68:42:ac:0b:1d:4d:9a:cf:
         bd:ac:07:ca:31:ab:9f:6b:da:3c:25:61:b0:6f:04:6c:1b:a3:
         be:29:94:db:a9:92:27:be:a4:61:e5:93:4f:dd:17:5c:35:46:
         df:33:19:6c:b3:2a:b1:db:2a:04:48:21:3a:e3:ae:b9:a6:2d:
         c1:f8:7e:20:f7:64:41:8d:11:47:26:68:21:5c:84:dc:f8:17:
         04:b2:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:59:17 2026 by rpki-client