Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File:                     Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier:          Rh3CEMjXYQUiUYE4P4oNWcL1oaoYUnmmbVUIQslD178=
Subject key identifier:   CB:7C:F5:21:15:D8:87:60:A0:FD:4C:19:F3:22:31:40:B8:55:77:5C
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer:       /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial:       01A0D45DB57A04B1BE8D6CDD39840B0D6740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number:          197E
Signing time:             Thu 24 Sep 2026 17:01:46 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:46 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:46 +0000
Files and hashes:         1: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (hash: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k=)
                          2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: DdV9X7ODFpaTotpLaLUjJfoBUTmYO5YgF1DCXMg6bLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:b5:7a:04:b1:be:8d:6c:dd:39:84:0b:0d:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
        Validity
            Not Before: Sep 24 17:01:46 2026 GMT
            Not After : Sep 25 17:01:46 2026 GMT
        Subject: CN=cb7cf52115d88760a0fd4c19f3223140b855775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:77:70:d1:35:db:0a:c1:3d:32:d0:05:07:
                    36:e7:be:f2:e4:46:d4:2d:e7:7c:7d:a6:73:d2:fd:
                    21:ea:49:45:e1:09:f3:d3:6b:71:81:cd:dc:69:1b:
                    4d:79:41:5b:1d:0d:1e:81:d0:98:62:4e:2f:7f:46:
                    51:7d:e0:4f:15:3f:73:03:2b:bd:84:d0:85:cf:fa:
                    f5:86:4a:96:e7:c4:01:fc:8f:7f:c7:61:ed:11:39:
                    c1:a0:4d:b6:46:c8:27:29:5c:2d:72:b3:39:18:41:
                    03:86:7f:77:82:38:59:94:65:3e:d7:26:aa:e6:a3:
                    12:72:92:3f:d8:f3:1d:5c:f6:f7:a7:1d:80:67:31:
                    12:3a:32:3f:24:27:fe:9d:40:c0:0b:5a:64:1f:8f:
                    ef:f9:3d:54:01:99:73:62:71:ad:0f:be:8d:02:49:
                    ac:32:b3:89:92:24:20:21:5c:47:a6:f0:6b:a4:8b:
                    5b:5f:7c:77:df:c4:bd:34:c8:52:07:85:1f:4e:0c:
                    9e:2b:6d:bb:52:a2:e0:cc:d5:a4:2a:36:33:c3:4d:
                    63:89:23:61:ed:a6:bb:87:66:25:91:23:48:19:0d:
                    40:1f:94:a0:fa:f0:c6:68:28:12:a6:66:82:a5:58:
                    7f:12:2d:b5:5f:df:a8:e4:ef:a2:06:40:94:8e:01:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7C:F5:21:15:D8:87:60:A0:FD:4C:19:F3:22:31:40:B8:55:77:5C
            X509v3 Authority Key Identifier:
                keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:05:bf:86:1f:68:81:8d:00:7d:db:c9:dc:73:da:8d:3d:
         ae:6a:0d:39:6e:29:85:6b:18:d3:70:4f:20:d8:e2:2e:f7:62:
         30:41:09:95:82:18:d9:1e:20:f6:53:8e:ec:f7:fc:87:e0:16:
         6e:0d:0f:15:fb:8f:51:65:08:ce:68:c3:41:d5:4c:53:f6:b2:
         95:91:d2:7c:0f:5e:cb:cf:83:2b:6f:b4:1c:a2:d0:65:8a:6c:
         2f:ac:7c:21:c9:30:52:1a:b5:05:bc:46:37:88:78:32:5a:02:
         6c:66:c8:cf:26:8f:fd:e5:ad:f9:a9:aa:10:d5:3f:34:98:38:
         a1:cf:63:8d:38:7e:7c:2c:a2:83:c9:58:95:ed:b0:4b:33:38:
         92:46:27:2f:32:bc:34:74:85:5c:7c:31:c1:39:87:8a:ba:f6:
         cb:30:d9:ab:50:23:9a:61:78:ce:d2:ee:18:c1:6d:ac:14:e1:
         62:11:ae:a8:bc:99:18:fb:c7:10:62:ee:fb:90:9a:3d:ee:3a:
         55:33:71:1b:05:4f:b7:e5:76:78:62:f2:cd:ee:1c:55:58:ea:
         59:2a:5d:9e:8c:18:91:13:b4:06:4e:9d:bb:a6:0a:9f:e4:20:
         dd:ce:b7:27:31:35:17:45:fc:2b:fb:03:24:8c:a3:16:b1:ee:
         a8:08:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:25:51 2026 by rpki-client