Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          JhZtwNgw5Bf1ci5XBjCeOHQ+Vwgj5zFGcviLfrwrKJ4=
Subject key identifier:   83:38:49:7B:8E:47:7F:C7:02:65:98:A2:8F:1A:64:BD:DA:C2:D6:8A
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       01A0D5DE1EFE65788DAFC377AA45E0598F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          1A73
Signing time:             Fri 25 Sep 2026 00:01:38 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:38 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:38 +0000
Files and hashes:         1: Jn62z3mXSy1gXL7OU0u8UHUvETk.roa (hash: kRvtxB45lBHtSWkwsN/FFj92E84r6pWGnn92gwu5MRk=)
                          2: Q0PF7iRFV7hzJhLHDcJ_uhfh7z8.roa (hash: jNqkyMhlcRIUSCAW+fYK+zrtm4rQVOjjxMdq67NIAq0=)
                          3: ZZTFmfbdMQ6snkjprGV8Heyn37E.roa (hash: lKKyBMRX1vPM6siDs8lqYfEIzSGcaMWz+LcZio2IfVk=)
                          4: ni888ovsC-BTLPerI4QeQ0fgZFE.roa (hash: 7VDMLDKY6Y0XMf/x1rrlPpTjJxlLSO2U8m99nvv5wFc=)
                          5: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: aJqn9q8dqlgERTjVNs3/cf+yod+c43JmzNBY4TZDOWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:1e:fe:65:78:8d:af:c3:77:aa:45:e0:59:8f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: Sep 25 00:01:38 2026 GMT
            Not After : Sep 26 00:01:38 2026 GMT
        Subject: CN=8338497b8e477fc7026598a28f1a64bddac2d68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:57:25:30:3c:12:1c:db:34:b4:2d:82:f9:
                    b8:d0:f0:2f:2f:4f:09:c1:79:7c:16:29:74:4c:9a:
                    82:6f:14:13:20:be:b7:3b:ce:35:0c:f0:bc:ef:36:
                    3d:64:17:de:2d:95:14:f9:8b:4e:f5:18:dd:4b:85:
                    c2:a5:4c:c1:83:6d:cb:03:c5:e2:f4:46:84:ac:1f:
                    4e:96:e5:99:68:8c:92:b7:58:33:56:bf:49:bb:6c:
                    d5:de:ac:2f:fa:b1:b8:ad:ac:58:b8:9f:36:19:7e:
                    cd:c6:4b:1d:92:b2:ad:ae:dd:bf:f8:ae:d9:f6:df:
                    89:f2:cb:8a:f4:b5:90:b4:3c:c0:0f:f3:74:e8:7c:
                    eb:b3:71:88:ff:27:29:2f:03:b1:b4:36:c1:a0:80:
                    6d:e8:3e:33:b3:a6:1b:76:3e:05:da:ca:75:21:cb:
                    95:d3:6a:19:18:65:90:66:e7:e3:74:53:bd:fa:4e:
                    72:25:61:80:a3:8a:7c:db:e3:5b:c0:0d:56:93:da:
                    f9:2e:37:da:40:2e:8a:7d:80:e6:a9:74:f9:42:a3:
                    51:c2:81:f0:55:92:ba:c5:b8:56:d9:e1:2f:3c:9f:
                    84:91:9f:a7:b2:c2:a4:24:80:c2:a0:57:ed:7c:4d:
                    bb:25:e7:49:56:20:8f:71:57:83:2c:13:a0:e1:ae:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:38:49:7B:8E:47:7F:C7:02:65:98:A2:8F:1A:64:BD:DA:C2:D6:8A
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b0:1a:2a:13:c9:a3:e8:c6:d6:e5:a3:63:93:19:7b:ba:cb:
         fe:db:e8:83:f3:67:8d:b2:9b:f4:34:a9:d2:47:2b:04:71:ac:
         e6:6e:82:1b:c5:b9:d6:c3:29:c4:34:d2:39:be:b7:31:fa:8f:
         f7:e6:5c:74:b2:da:64:88:68:75:c3:57:cf:01:15:c0:9c:22:
         fd:fc:16:72:94:09:85:b0:6d:46:c9:4a:e0:5d:cc:80:67:94:
         68:19:89:76:84:96:cd:fc:f0:16:a2:09:31:cb:bf:aa:72:aa:
         bf:a7:42:88:44:af:06:8f:64:34:1b:eb:2e:82:63:94:aa:07:
         69:db:96:87:24:ce:2d:54:9c:70:07:eb:e7:1f:bf:ef:1a:9b:
         67:33:fd:a4:90:64:1f:48:cf:05:33:4f:21:86:47:d8:84:22:
         74:43:2c:01:45:f0:32:60:09:4e:63:65:9a:f8:6a:24:3b:17:
         29:9a:86:27:0f:57:1b:12:98:da:1a:d4:84:03:7c:3d:bc:52:
         09:68:42:50:71:96:7f:82:b3:29:4a:5f:3a:76:bc:f8:78:a6:
         08:df:5d:d9:eb:fc:19:a2:b6:60:24:c8:02:95:45:fe:8e:60:
         8c:9c:4e:bc:49:1d:b6:2e:27:77:a8:da:dd:1b:b8:86:f6:22:
         09:f6:da:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:11 2026 by rpki-client