Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File:                     ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier:          SOORnX47P045AQEiU/gc05/Bf88dakUC7sMmLhEatas=
Subject key identifier:   C2:4C:D3:0B:E1:F3:F8:64:39:99:E5:CC:92:BA:62:8E:D5:3F:F4:11
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer:       /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial:       01A0DC16B4C082D4D085C4484D395BC718C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number:          1A7C
Signing time:             Sat 26 Sep 2026 05:01:10 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:10 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:10 +0000
Files and hashes:         1: 6gLAIABcMM0BdKdW8K02igz9kr0.roa (hash: uk7i7GXwXWp1hyZWUWTNojb3ILfyYgcAcHJXlD/riPs=)
                          2: Ig_zAXCn9vbFw7KxbkjMl45qbh4.roa (hash: VV7LhTzcbYlq8rfyk66GOg6XaES1MuVkOsiFHAWaNpk=)
                          3: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (hash: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=)
                          4: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (hash: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=)
                          5: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: 161wXZTPqQp9ojpp9y3Kl/oiNDDsRzlE+5DEzKxYRhg=)
                          6: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:16:b4:c0:82:d4:d0:85:c4:48:4d:39:5b:c7:18:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
        Validity
            Not Before: Sep 26 05:01:10 2026 GMT
            Not After : Sep 27 05:01:10 2026 GMT
        Subject: CN=c24cd30be1f3f8643999e5cc92ba628ed53ff411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:be:0b:7f:97:59:55:42:05:dd:3f:f4:5c:
                    8c:18:26:24:60:57:6d:77:25:13:18:57:21:50:c6:
                    ab:df:81:66:05:f3:7f:15:0d:d2:fb:d4:52:8e:2c:
                    f5:99:83:90:6a:f3:aa:ef:44:e3:f8:30:98:6d:3a:
                    69:f9:8b:a1:e4:d2:37:4a:b4:94:a8:75:35:1b:d7:
                    4c:1a:d1:1b:ad:82:57:61:b8:71:22:c4:9c:c8:0a:
                    ea:16:bb:55:da:21:c8:9d:3d:7a:d4:a7:ea:1f:09:
                    3c:cc:d7:bd:10:27:26:b3:bf:c7:af:d6:55:02:c8:
                    7f:92:29:e0:ee:d3:2c:02:01:db:72:39:1f:61:84:
                    2a:6c:5f:66:96:7b:07:77:06:1e:0b:ad:e7:d9:be:
                    23:6d:f7:b7:56:1f:bf:bd:b8:62:57:38:f8:65:fd:
                    5a:ec:30:1f:2c:2a:b0:99:d7:ff:6e:fa:7c:32:c7:
                    d4:9b:16:a3:7a:16:67:a7:98:e7:47:09:74:42:2a:
                    c5:d3:f9:ce:64:80:da:4d:93:79:c1:65:1e:bb:ee:
                    b5:fc:0f:e6:ad:d5:ec:6b:cd:8d:5b:b3:a5:54:2d:
                    c2:54:c0:e9:c3:0f:9e:77:c9:5f:46:ab:30:74:9c:
                    5f:09:5b:a2:f0:80:fc:81:d3:75:82:61:66:0a:d8:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:D3:0B:E1:F3:F8:64:39:99:E5:CC:92:BA:62:8E:D5:3F:F4:11
            X509v3 Authority Key Identifier:
                keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4a:d2:46:bd:b3:ca:e3:ab:e0:a7:f7:b3:bb:c8:6d:bb:df:
         8c:fe:45:1e:f9:26:60:ea:68:16:0d:0d:5b:96:a2:75:4d:25:
         38:10:73:94:95:94:75:e4:59:25:52:8e:e6:8f:27:ad:9d:43:
         07:17:9f:7e:99:6e:f6:2f:ef:5a:d5:eb:19:04:09:e1:a2:81:
         f0:e8:24:a0:6f:c4:95:5a:6b:76:6a:af:2c:83:d5:8e:af:65:
         7f:d1:09:c2:88:cf:02:85:49:ca:d2:41:e7:d2:d5:12:aa:db:
         8f:3d:3d:ae:d9:36:0b:1a:02:c6:4f:1a:ab:d3:c4:51:0f:72:
         ba:1f:14:4c:c0:67:cb:68:b9:63:66:0b:b1:b1:62:ba:ae:62:
         be:cf:4e:14:d2:6a:51:a8:eb:43:87:e2:ee:dc:0b:9a:23:13:
         23:a6:97:19:92:73:00:34:c1:7d:3f:f0:c2:19:94:11:9a:fb:
         66:24:85:43:ef:24:62:6c:ea:ee:43:3a:da:7d:2f:93:c8:2d:
         a5:7e:2a:b7:a6:49:ea:ab:77:e1:b8:00:43:c8:63:59:1b:29:
         b5:56:13:02:46:75:7f:74:89:cc:0f:ab:3d:41:06:c1:38:bf:
         43:00:1d:d4:a2:92:31:5b:1c:45:ad:06:13:88:59:1e:2f:b4:
         94:0b:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:09:21 2026 by rpki-client