Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
File:                     z03hI7ypCDRpQQ16g98niahsaZk.mft (raw, json)
Hash identifier:          6tXeOnXtqEppS8y6QD/+nCtGQu3VBJ646AIcvChkRk8=
Subject key identifier:   B4:03:3E:BB:6F:0A:70:4A:50:98:EF:29:BF:96:FA:9E:CB:C7:6B:19
Authority key identifier: CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
Certificate issuer:       /CN=cf4de123bca9083469410d7a83df2789a86c6999
Certificate serial:       01A0D796F72A6D06D1821F2B4285AF9BF0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
Manifest number:          69
Signing time:             Fri 25 Sep 2026 08:03:10 +0000
Manifest this update:     Fri 25 Sep 2026 08:03:10 +0000
Manifest next update:     Sat 26 Sep 2026 08:03:10 +0000
Files and hashes:         1: 3eLWx94YuvwwSRAoKOfCLRLl0zY.asa (hash: 79uscgj28wgq78Iu3Rnp/+KrsVCoQRVb4tTu7d98mgM=)
                          2: z03hI7ypCDRpQQ16g98niahsaZk.crl (hash: 5I9Chl0VPp8FNIyPrrT+hL/oe5eXmV35cI1B0F89uBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:f7:2a:6d:06:d1:82:1f:2b:42:85:af:9b:f0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4de123bca9083469410d7a83df2789a86c6999
        Validity
            Not Before: Sep 25 08:03:10 2026 GMT
            Not After : Sep 26 08:03:10 2026 GMT
        Subject: CN=b4033ebb6f0a704a5098ef29bf96fa9ecbc76b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:2d:2f:9d:10:b0:81:77:76:ab:00:53:9e:
                    e7:d5:26:eb:e4:ec:37:ca:c3:59:69:7e:92:31:68:
                    d8:a0:44:5d:2e:98:19:5f:71:5b:c5:d9:a8:ac:c9:
                    07:af:e1:f2:f6:c6:ce:d7:67:f8:46:bc:45:3a:19:
                    c3:62:1a:e7:6a:1f:c3:b4:c2:de:55:38:e8:14:b9:
                    0f:7f:c5:b3:75:34:0f:ac:09:85:94:03:d1:19:86:
                    fb:36:ae:ee:25:ac:13:c4:81:a3:64:82:ae:28:e3:
                    84:10:d5:88:25:de:a8:d2:9d:f5:d2:02:b5:7a:d6:
                    30:4c:a2:63:3c:cc:38:32:1d:34:8e:04:bc:f4:9c:
                    9d:1b:99:47:72:5e:8d:f1:d8:e4:21:7a:57:4e:06:
                    c2:0f:03:b1:a3:eb:ae:43:05:2c:d7:b2:7e:4b:c4:
                    3b:f6:cd:39:a2:6b:19:a1:29:0f:b4:05:92:a4:90:
                    86:b8:43:d9:26:a3:4a:37:4f:1d:e8:01:f7:70:5c:
                    05:96:46:2b:f1:fa:d5:08:c6:94:ad:ec:e6:da:fc:
                    1c:23:80:7c:e9:a4:3e:8f:54:d4:1e:82:06:03:df:
                    a4:73:d0:87:bf:9b:73:33:af:3e:6a:a4:01:84:2c:
                    e5:d3:8e:95:1c:5e:a1:6c:42:4d:08:9a:b2:35:ba:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:03:3E:BB:6F:0A:70:4A:50:98:EF:29:BF:96:FA:9E:CB:C7:6B:19
            X509v3 Authority Key Identifier:
                keyid:CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:07:e8:1a:8e:9f:a2:32:d8:05:02:28:df:b0:36:38:5f:77:
         72:d2:bb:46:01:ea:03:d0:3b:56:da:02:d7:d5:68:90:c2:52:
         4f:7d:8e:1c:bb:ed:99:46:b5:22:67:6c:50:ee:78:23:5e:db:
         03:e5:fc:3d:4e:78:3c:1e:73:f2:f4:c8:d2:ef:e7:cb:90:06:
         36:7a:31:bd:c0:b6:98:91:e5:05:38:76:4f:fd:e0:4c:4b:55:
         b9:1a:43:6a:6f:7b:5d:69:f5:97:68:ed:86:61:6c:b7:b7:ed:
         63:b3:67:85:a6:31:db:93:da:39:41:23:be:d4:f4:17:d8:f1:
         d6:bd:59:91:03:51:55:95:64:60:d8:d1:7f:af:bb:b0:18:8b:
         40:77:3f:ec:39:b6:a0:3e:b1:27:e0:1a:7d:fe:24:06:6c:1a:
         fb:e6:51:9c:7d:02:ce:78:46:07:27:8f:45:07:b2:62:27:2a:
         2e:89:8d:7a:df:e3:f4:b8:b4:25:f4:f1:1f:73:cf:09:63:9a:
         c5:2e:1b:18:49:e7:f1:94:a3:e1:f7:72:b3:bf:d7:3c:c2:dd:
         85:a5:95:97:a1:b1:9c:4c:71:c8:90:59:92:5d:7e:1d:ff:93:
         60:12:a8:8f:65:87:a5:9d:f6:f2:7c:7a:84:d8:9e:47:97:b2:
         be:2b:08:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:01:50 2026 by rpki-client