Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
File:                     zo8eLNbLKBUKXInl-bCIeBE0zq8.mft (raw, json)
Hash identifier:          ZiSv2qFEVQ5pUsK44FbNu7RkJmZ+dO5nSkxnSEzlWyA=
Subject key identifier:   B3:74:0D:D5:79:B5:BE:6B:27:5E:81:FB:D7:F6:D2:8B:4A:1A:00:2E
Authority key identifier: CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF
Certificate issuer:       /CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
Certificate serial:       01A0DC85693914F8A1172BE68D10812F05C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
Manifest number:          69
Signing time:             Sat 26 Sep 2026 07:02:05 +0000
Manifest this update:     Sat 26 Sep 2026 07:02:05 +0000
Manifest next update:     Sun 27 Sep 2026 07:02:05 +0000
Files and hashes:         1: Y3VzoJn-G6AotjVH8MvzLWEsGmc.roa (hash: NAemI75QGyX3xuubQFlHIzoJ5u9jYBV1F2kxkjMJ1Pk=)
                          2: zo8eLNbLKBUKXInl-bCIeBE0zq8.crl (hash: o0VhMWQuZ8AR1x/gH+AL8Btz34qw36vY/jwuNtWjAhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:69:39:14:f8:a1:17:2b:e6:8d:10:81:2f:05:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
        Validity
            Not Before: Sep 26 07:02:05 2026 GMT
            Not After : Sep 27 07:02:05 2026 GMT
        Subject: CN=b3740dd579b5be6b275e81fbd7f6d28b4a1a002e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:f0:e1:92:23:de:69:53:00:60:92:ff:1f:
                    f9:3a:cb:88:c3:17:6b:9d:b4:8c:da:76:4a:18:ee:
                    63:0f:58:3a:cb:5a:3f:2e:cc:0a:3c:9e:e8:fc:91:
                    f3:94:01:1d:8c:10:11:2c:6b:41:c1:90:71:89:d8:
                    98:cf:5e:88:f5:a3:43:69:28:51:23:cf:d7:08:31:
                    ee:69:49:d8:96:96:cb:cb:ea:9e:b1:2e:b5:5c:8f:
                    ed:e1:4c:ac:18:65:97:d5:9c:40:ca:0f:7e:9d:1b:
                    70:e7:bc:16:54:f1:24:aa:e1:de:30:b8:fe:7f:a1:
                    38:99:47:c9:94:b5:d4:6b:c1:77:7b:34:03:7b:1d:
                    56:27:c7:2f:ed:ee:8d:19:e3:28:ba:ff:86:39:a7:
                    98:b5:59:a0:3b:4b:6c:cc:81:e3:7a:a9:89:fe:15:
                    64:7c:ae:6a:95:dd:e4:07:67:df:db:8a:ee:fc:c0:
                    d6:ab:90:0a:1a:55:1a:df:74:e0:b4:da:52:bf:30:
                    e5:35:94:d8:8f:ac:99:2d:78:39:37:6b:ec:a4:5c:
                    e6:23:31:79:60:17:56:ad:b0:de:e1:ae:5a:59:44:
                    0e:4f:a2:d1:2f:14:ee:27:81:bb:08:59:c4:e6:af:
                    c9:22:9c:b5:85:fa:62:74:48:de:da:57:da:88:f4:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:74:0D:D5:79:B5:BE:6B:27:5E:81:FB:D7:F6:D2:8B:4A:1A:00:2E
            X509v3 Authority Key Identifier:
                keyid:CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:68:59:84:de:76:eb:0c:cf:69:90:e1:1e:b6:49:35:21:26:
         bb:54:9d:ed:13:03:65:ac:af:a2:00:ef:f9:cd:c4:1a:3b:ea:
         19:87:ee:19:ad:cf:be:86:df:4b:a8:ff:31:24:c7:1d:df:06:
         3a:8f:e1:a5:13:8e:7c:66:32:9f:b2:56:22:48:b2:eb:3f:ff:
         3a:ad:95:7e:3e:9f:f6:f5:08:7a:6a:fc:41:dd:48:bc:bd:0d:
         a7:81:4b:2f:78:73:d2:fd:cf:2b:a3:b7:34:8a:e2:36:14:b4:
         75:51:de:bd:1a:60:b1:6e:e1:31:72:2f:4a:5f:90:c0:91:57:
         0d:5e:a6:cc:cc:fc:92:6d:65:50:0e:27:f7:e9:34:02:33:ba:
         1e:d8:b1:da:8a:12:43:51:f0:ac:10:d8:2a:ee:47:30:53:27:
         a3:0f:a9:ec:85:d9:69:2b:9e:5b:64:f2:38:18:30:bc:15:31:
         9b:9a:4e:13:ad:a7:fd:98:fb:26:23:ab:dd:d6:a7:c5:b7:10:
         3b:07:58:ec:f4:c9:de:91:7e:fc:39:29:9d:85:da:cb:b0:c5:
         67:30:95:37:9c:e6:bd:bb:76:c1:61:4c:28:c1:80:25:a4:eb:
         f9:9b:80:aa:03:68:e3:88:6e:2d:0e:9a:c7:9a:cd:7e:c6:ef:
         61:de:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:35:04 2026 by rpki-client