Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
File:                     Zzs6cc93J1Wj34ztXXNRb4ccChE.mft (raw, json)
Hash identifier:          2HHAurTSBcdRfDvlMUtIQK+nLS1amCp3x1vXEuos4Fg=
Subject key identifier:   DC:99:A0:F5:9D:CF:1E:60:03:E7:61:49:54:A3:DC:44:DD:F8:9A:95
Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
Certificate issuer:       /CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Certificate serial:       01A0DF188CAA6C6ECB521332F4622458FB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
Manifest number:          1A71
Signing time:             Sat 26 Sep 2026 19:02:03 +0000
Manifest this update:     Sat 26 Sep 2026 19:02:03 +0000
Manifest next update:     Sun 27 Sep 2026 19:02:03 +0000
Files and hashes:         1: 8N34BaOhCoqWV6oqyyGnFC-M71k.roa (hash: iUxBbVztuFkPmYPKyF2deLjAauBd8PuICTkelG44e04=)
                          2: VUz0tSFCX_BRFTEGFOahzM8Zpf0.roa (hash: Cecy3QpWVDEErZPxgAgQ0Koma/ZxEa66HTh9jYt45cI=)
                          3: Zzs6cc93J1Wj34ztXXNRb4ccChE.crl (hash: tJSOw0wVXzA1XkWmQZz4F8XXQZ9tTrLQdEyErzhNoBo=)
                          4: qwSTgi7oKerWlObPanrG2B5_x68.roa (hash: GvOd9VfOiwpS8uCFOwxjkDN1qBagT24LpIgJ30wO6Pw=)
                          5: xIxV3QV0-KrN7rSzr-0HLG1i190.roa (hash: 8Bgn1Ips0oqsProytAnDAz5ffPqB6GHNefvHzifH3aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:18:8c:aa:6c:6e:cb:52:13:32:f4:62:24:58:fb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11
        Validity
            Not Before: Sep 26 19:02:03 2026 GMT
            Not After : Sep 27 19:02:03 2026 GMT
        Subject: CN=dc99a0f59dcf1e6003e7614954a3dc44ddf89a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:b6:75:bc:d8:77:63:d4:6b:a6:b8:92:51:
                    a9:b0:c9:60:90:6e:c6:b5:35:46:11:12:df:a5:12:
                    aa:81:3f:41:77:69:46:81:22:7c:4d:9f:5a:f3:66:
                    f5:cd:b2:9f:f4:f5:df:97:1c:10:46:65:54:60:36:
                    8f:4b:1d:42:ba:2e:e4:3c:36:7e:67:3d:02:af:5f:
                    b9:2f:84:b8:7b:60:e4:61:4f:45:a3:72:7c:40:8e:
                    43:72:81:82:64:d3:97:cc:16:6a:bd:c1:3d:0d:67:
                    6e:29:19:91:80:a0:7c:6c:8f:5f:8e:32:1c:67:67:
                    8e:00:b0:6b:a1:3a:64:e2:87:d4:fc:e1:cc:e7:09:
                    81:fb:fd:73:5e:a9:c3:f0:72:13:20:18:4f:ee:0a:
                    a4:12:3c:3e:a4:39:53:60:86:81:43:06:08:d8:f9:
                    5c:24:c2:ae:25:6c:b0:04:be:5f:45:08:a3:43:65:
                    7e:a1:c2:bd:72:80:f7:f6:15:9b:8c:f3:1a:79:db:
                    0e:cd:c7:cd:fc:12:ee:85:51:27:55:1c:93:8b:85:
                    bb:af:86:f2:ee:0b:03:02:80:4f:8c:a8:7d:94:bf:
                    b5:d7:5a:a2:40:24:a7:a5:1f:52:89:e1:3c:50:3a:
                    fd:4b:94:8c:11:49:0c:9f:8c:67:09:1e:d1:c3:1b:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:99:A0:F5:9D:CF:1E:60:03:E7:61:49:54:A3:DC:44:DD:F8:9A:95
            X509v3 Authority Key Identifier:
                keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:27:35:3c:f1:ba:01:59:fb:7d:67:3c:76:28:c5:96:2d:b7:
         73:5b:90:d2:56:c2:13:41:25:48:c9:9d:88:a7:a4:0b:44:11:
         67:ca:6d:4d:91:db:1c:8f:51:d0:9d:b6:26:48:c4:d6:5f:ec:
         37:2e:db:ca:10:b1:4a:ca:e0:b1:2d:d7:be:60:8c:80:18:49:
         49:a4:2f:dd:51:27:d9:78:03:8b:ab:69:9c:1a:b9:df:25:53:
         65:41:ac:b4:6c:f3:e7:65:c5:70:78:14:68:d2:ca:b1:8d:b2:
         0a:03:eb:a3:13:ee:2e:b5:d4:ee:0f:19:4b:bc:85:16:37:69:
         41:22:21:8d:c4:82:1c:82:e8:82:3b:7e:e8:f2:ee:6c:fd:8a:
         ae:b3:0c:0a:3c:13:d2:b5:27:bc:95:38:3c:04:a4:80:1f:17:
         8f:22:cb:31:bb:9a:62:51:11:48:9a:2a:1d:01:a5:47:64:da:
         db:34:7c:c5:7e:12:d6:59:fd:62:84:62:2c:cd:2e:ee:94:ec:
         aa:42:bc:c9:c1:f0:15:22:67:aa:98:c7:99:d0:2f:06:64:a1:
         8f:3f:d6:87:6b:95:46:20:40:45:07:5b:05:fb:0b:6d:2c:92:
         10:f7:82:65:4d:07:8d:e2:7f:2b:ed:1f:49:50:47:95:60:77:
         f0:09:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:10:14 2026 by rpki-client