Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          QeQL8/9kBcfO1KgmMoGQGlmynNy8vIVDPt707p9zqCs=
Subject key identifier:   67:AB:17:5B:66:6E:9C:DB:F7:4C:1B:36:CD:DB:C1:AD:FF:31:0C:F4
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       01A0EDE6069C2F8EE99E8E1911F0A1369E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          1A7C
Signing time:             Tue 29 Sep 2026 16:01:10 +0000
Manifest this update:     Tue 29 Sep 2026 16:01:10 +0000
Manifest next update:     Wed 30 Sep 2026 16:01:10 +0000
Files and hashes:         1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
                          2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
                          3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: 9d6kDaaR4ypdGzxOG2wvXjefT3H/zfpmjxKCt+Py5gs=)
                          4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:e6:06:9c:2f:8e:e9:9e:8e:19:11:f0:a1:36:9e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Sep 29 16:01:10 2026 GMT
            Not After : Sep 30 16:01:10 2026 GMT
        Subject: CN=67ab175b666e9cdbf74c1b36cddbc1adff310cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:77:16:02:45:07:9f:b9:da:a1:21:e5:4c:
                    aa:2d:be:be:32:5d:7d:dc:df:66:50:7a:7c:be:50:
                    1e:39:71:fe:8d:7b:c8:01:a3:2b:5e:3c:aa:79:bc:
                    c3:6d:81:b4:33:a9:39:4a:05:69:93:32:9f:b2:69:
                    11:cd:df:83:89:0f:4c:70:ac:a4:e7:62:a9:9c:60:
                    b0:e7:1b:df:d4:85:39:52:25:af:9b:11:b4:b1:9b:
                    c2:ba:79:50:09:3a:6a:dd:d8:73:84:4b:dd:b7:52:
                    ca:3e:18:05:8e:ef:a1:10:86:6c:11:56:c3:a7:0b:
                    0a:14:4d:76:44:b8:5f:95:ce:84:f6:03:64:9a:b1:
                    81:85:14:ba:ce:d0:87:b4:72:94:ff:2a:71:6a:dd:
                    1b:b2:69:72:16:8a:86:15:f4:d8:d6:87:44:bd:ef:
                    2f:d6:8f:8b:b9:dd:c7:22:46:7e:0d:9f:e2:4d:79:
                    54:16:45:8b:b9:62:a5:3c:e8:64:77:b3:de:36:75:
                    c1:a8:cf:96:ed:b1:8d:00:aa:ee:c4:1d:ec:bf:0e:
                    c4:a2:6d:4a:e7:68:06:4d:75:da:a4:7e:cc:83:e5:
                    13:71:58:2a:b8:43:48:e2:4f:48:0a:0a:18:c4:6f:
                    de:a8:76:38:29:b5:83:5f:82:49:19:d2:63:61:bd:
                    2e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AB:17:5B:66:6E:9C:DB:F7:4C:1B:36:CD:DB:C1:AD:FF:31:0C:F4
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:70:5f:ff:b8:56:55:1f:ee:89:47:7f:3b:01:0b:5a:06:
         6c:a3:d5:82:46:31:9e:56:71:49:3b:c0:ce:2d:a8:5d:a8:99:
         8f:7a:5d:6f:6a:79:c6:48:11:bb:80:b5:7e:0c:ec:1c:9e:18:
         eb:64:5d:db:ef:6d:b4:f6:e5:da:83:df:bd:74:a6:cf:27:2a:
         a2:3f:7b:35:57:81:c8:03:52:2f:36:06:31:83:a0:a0:17:f8:
         02:63:4a:e4:eb:f1:9b:dd:db:da:89:3b:b4:b3:a9:b4:ba:92:
         84:1c:ee:e4:d1:43:4f:1d:23:09:c0:5b:45:56:75:70:e8:64:
         b2:61:d5:9f:00:60:70:25:9b:fb:2c:9b:80:bb:6e:90:4e:42:
         f7:90:61:03:09:45:cb:fe:04:3f:11:0c:60:60:25:0d:ce:62:
         8f:b9:06:68:e3:73:e7:24:09:5d:5a:39:8c:cf:22:83:f8:b7:
         44:4a:b7:62:0a:33:ad:98:02:95:5d:24:ee:03:b4:65:50:ad:
         9a:34:cf:91:a9:96:f7:5a:ae:28:bb:51:a8:0a:85:43:bb:20:
         a6:8a:f4:85:e7:91:29:f2:3f:80:51:44:a9:e9:45:8d:92:62:
         94:d0:e2:d4:2d:84:53:e8:60:e8:a8:af:a8:d6:97:8c:8e:5f:
         17:49:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:18:05 2026 by rpki-client