Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          KNx/3Y7i2RIOPKyjYDR0JjjhI7KVNGlB0ItDbuCvPB8=
Subject key identifier:   69:E8:87:38:A3:B0:34:71:69:02:E5:97:D6:14:93:06:53:0D:0F:FE
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       01A1DEDED330D06B6E45F659366F189A5152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          0B3F
Signing time:             Sun 15 Nov 2026 11:01:47 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:47 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:47 +0000
Files and hashes:         1: 4VSpfmlsrY-xnIiTTrPaodx2tV4.roa (hash: EdL3j+0Ly732QbelcRDG7cQjRw+dDjXO5L0RRW5d50k=)
                          2: YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa (hash: BS0hH0Mha3OYh1/nE9dhHNhWJCR5meHAHOyRx5kHC3Q=)
                          3: aFesnPDh7CxN2CqxODqrdmrSUuk.roa (hash: x5ilgl/10IUgJ6jnlwharE+K/9xapRQ9JBmeLGM6YOI=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: s6IucodqZlXuoWuH/kMf/aZcwXb2pl3NkVEGeY6abNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:d3:30:d0:6b:6e:45:f6:59:36:6f:18:9a:51:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Nov 15 11:01:47 2026 GMT
            Not After : Nov 16 11:01:47 2026 GMT
        Subject: CN=69e88738a3b034716902e597d6149306530d0ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:01:dc:19:ec:1a:94:0b:ee:a5:11:48:ea:
                    ec:5b:1e:02:95:37:31:04:a7:ae:64:5f:8c:28:ed:
                    d7:0e:06:c4:c3:bb:ce:b4:fb:fe:c7:0b:b1:2c:d7:
                    7b:f8:d2:b0:62:15:70:b9:58:cd:66:97:59:3a:df:
                    53:48:09:bf:34:40:f1:d5:89:7c:01:55:6d:6a:cd:
                    b3:0c:49:f1:86:64:e7:5e:cb:44:94:32:be:fb:2f:
                    d6:b1:a0:63:2e:9e:7b:05:05:5e:42:36:d8:4c:4c:
                    a4:df:b5:36:df:bd:4b:31:ab:87:c3:c2:28:17:34:
                    b7:65:a2:2c:e3:0d:60:d2:dd:a6:a5:94:f2:8b:dd:
                    42:82:41:d6:f7:ec:99:d0:a0:07:6c:44:fa:17:9c:
                    ad:1c:3b:4a:02:eb:9f:f9:1a:72:7c:be:a3:12:fb:
                    36:a8:2a:40:ad:20:34:8c:68:90:40:ed:1b:16:1a:
                    3b:26:e4:f2:4a:f6:bb:09:fb:69:a5:e8:74:a1:5a:
                    f8:a9:3c:ce:8f:c4:01:f3:92:5c:0f:26:ef:7f:23:
                    8e:4d:12:cc:a3:aa:ee:e3:61:df:7f:67:36:fb:d5:
                    4e:44:60:57:62:63:51:d7:a7:10:0a:c0:69:d0:dd:
                    ae:da:7d:25:1e:70:0f:ed:ac:74:bd:50:1d:91:0e:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E8:87:38:A3:B0:34:71:69:02:E5:97:D6:14:93:06:53:0D:0F:FE
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:53:71:46:4a:1a:39:43:36:d5:f8:5c:39:12:d8:41:b3:04:
         29:15:e5:47:c4:76:3d:d9:ab:e8:3b:46:26:ab:65:51:05:5a:
         60:ac:0e:ce:73:c8:6e:06:ae:74:6d:89:3f:b9:a4:9d:d3:20:
         67:7b:ae:75:21:87:85:a2:5f:e1:43:c1:e7:5c:8a:b4:10:b7:
         f5:0f:42:23:e9:6d:fc:0c:f8:fa:1b:bb:4d:8f:a9:31:d3:24:
         cd:5c:68:81:74:30:52:aa:7a:9c:cf:5b:24:8b:76:36:da:52:
         ac:e9:1a:a6:c7:4d:db:22:48:07:94:7b:85:b5:ba:5a:2d:29:
         65:76:c2:f8:ff:f1:86:df:98:30:d5:d1:f9:04:f8:c2:60:89:
         65:d3:bc:10:38:f0:88:80:ec:3b:9e:33:d6:2f:2d:68:14:ef:
         11:c3:b1:90:7f:57:43:19:20:e5:7b:98:b3:c7:9e:be:69:e0:
         ea:ad:a4:38:a8:94:88:d0:b3:46:24:c2:fd:4e:81:ba:4c:64:
         98:a3:56:d5:c0:6b:61:90:2c:20:52:16:87:02:33:59:c5:46:
         aa:90:47:b5:cb:d0:d2:d4:9c:db:4b:0a:cd:5d:13:56:ea:83:
         b5:b5:ba:cd:20:b7:60:b4:0c:dc:82:c1:67:3c:ef:e0:85:8c:
         04:ac:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:49:36 2026 by rpki-client