Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File:                     ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier:          ZZlmar9t7buBvxSrl3eQYnP9jQZQwsBGow0qaG1Zmu8=
Subject key identifier:   86:2E:22:69:2E:A1:77:09:FB:7D:63:C0:57:E9:0A:14:9F:5A:C6:46
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer:       /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial:       01A0F7572044CB0E6BD59D065FBA821A2B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number:          167D
Signing time:             Thu 01 Oct 2026 12:01:17 +0000
Manifest this update:     Thu 01 Oct 2026 12:01:17 +0000
Manifest next update:     Fri 02 Oct 2026 12:01:17 +0000
Files and hashes:         1: G2vY-XyuXPEnGT50VL_DR2MGs8Q.roa (hash: FvP89IRchdhDOJHirpo71l3u2H6iIX16MtsmawYXGPM=)
                          2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: QNEFl61pckAYYCBLX7m3MhSVHc3QvF2LK6kDPHBsv4g=)
                          3: fuEaSuaZZwj27F0xF5X2wdAUpoQ.roa (hash: YJVv+UJ0lNsjvEC6w/06kpWtvXqjhidpu4HakQMisOA=)
                          4: wBsX-GYO-aEIdD-OnXmUqDDMdy8.roa (hash: rlyJ+Y0bf63UimFOrSGhNhA9pMMoo7xQfy3KPHlY1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:57:20:44:cb:0e:6b:d5:9d:06:5f:ba:82:1a:2b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
        Validity
            Not Before: Oct  1 12:01:17 2026 GMT
            Not After : Oct  2 12:01:17 2026 GMT
        Subject: CN=862e22692ea17709fb7d63c057e90a149f5ac646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:de:3c:56:05:af:19:a7:1e:6d:4c:5f:65:b4:
                    8e:21:dc:60:13:04:27:c4:1b:8b:18:e4:89:bd:b0:
                    96:37:81:3f:24:d9:b4:5f:65:ac:e4:61:c6:c6:dd:
                    d0:65:58:ea:2b:42:bd:57:f9:de:c7:94:d7:1b:af:
                    6e:7a:18:81:29:51:4b:dd:60:22:71:46:67:e2:53:
                    13:20:e3:aa:be:dc:69:7f:c2:b7:86:2d:9f:59:61:
                    b9:29:7f:01:d2:f2:4a:a5:ce:57:69:bd:db:17:fc:
                    ae:4f:f3:e8:50:00:25:dc:c0:71:ca:28:f4:a2:ac:
                    11:f8:29:b6:27:4c:a8:43:f6:bd:01:a3:d7:c1:45:
                    be:3b:65:a9:86:71:05:ee:7b:50:53:89:d4:78:26:
                    0c:d6:ac:e7:d5:99:6d:b7:0a:bb:b1:a8:52:bf:ce:
                    63:0d:a0:25:5e:ae:df:5b:e7:d4:82:7e:02:e9:24:
                    c1:2a:a6:34:fb:be:e4:fe:2e:59:9e:63:69:73:a4:
                    23:29:53:ce:71:10:3b:c9:69:b6:32:8d:ec:29:5e:
                    30:f3:19:64:3a:79:9e:af:ef:eb:e4:6b:aa:4b:fc:
                    53:bb:09:5d:d2:eb:12:89:3c:98:a2:f0:56:4c:31:
                    02:e6:bb:06:5b:2a:b6:c3:38:3d:49:42:36:3f:48:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2E:22:69:2E:A1:77:09:FB:7D:63:C0:57:E9:0A:14:9F:5A:C6:46
            X509v3 Authority Key Identifier:
                keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:e8:e7:10:fe:ef:4b:34:6e:43:c6:77:f8:24:6e:45:60:
         bc:05:16:df:64:2f:15:94:1d:b6:9d:b6:4a:6a:21:0e:df:75:
         d0:fb:f3:5f:c0:78:62:0e:fc:7e:65:de:87:53:04:9b:3b:fb:
         09:fc:1d:42:e0:36:bb:44:8e:92:84:dc:2d:6e:b1:a8:5b:56:
         51:66:fd:af:89:25:f4:2a:6f:de:0c:e1:1a:b9:bb:c2:bf:b6:
         f3:2e:c8:f1:cd:21:20:90:e0:30:16:84:64:6a:f2:be:6a:ce:
         00:3c:c6:90:2b:c9:e8:6a:f5:8c:59:9b:2e:5d:07:46:a8:7b:
         9a:5a:d6:63:02:40:45:b1:73:af:a4:9a:34:5c:d6:96:9f:05:
         26:99:7a:05:c4:96:fc:bb:83:90:90:fb:48:c8:21:40:03:3b:
         e5:d3:17:11:cc:8e:be:0c:44:cf:23:af:60:07:de:c2:66:38:
         fd:1c:5a:26:b3:43:0d:9c:d5:df:78:78:f8:19:e3:a1:2c:a5:
         5f:a8:38:93:d9:ef:67:48:da:cf:12:b6:f1:97:d5:3a:4e:7c:
         3f:49:9c:af:01:8b:3a:e7:2d:a3:2f:8e:7a:25:33:74:ba:a5:
         85:12:18:38:5f:b3:f6:0d:78:f1:fa:81:a8:77:d9:f1:4c:1a:
         43:52:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:57:54 2026 by rpki-client