Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File:                     Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier:          GUAqOGDPH4LNTHPDMX2Q1Mw/+wGWnpvPbkG00woh5ks=
Subject key identifier:   78:93:A4:47:9C:FA:13:E7:2E:55:6D:0B:2C:D8:50:4C:8E:65:B4:6A
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer:       /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial:       01A0FC7E170C0F130625C0BDE5AF63911433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number:          0F66
Signing time:             Fri 02 Oct 2026 12:01:56 +0000
Manifest this update:     Fri 02 Oct 2026 12:01:56 +0000
Manifest next update:     Sat 03 Oct 2026 12:01:56 +0000
Files and hashes:         1: LceaXnMeu276vgP2oQyUQj1pB_Q.roa (hash: HrwRyFbgAYEEHCkLHWw/X0HtmQIyrz8WJ529vkNQigM=)
                          2: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: QfgTS4rOx18xP4NV30h0ScqSf0KcaDfel3ks6aRT9Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:7e:17:0c:0f:13:06:25:c0:bd:e5:af:63:91:14:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
        Validity
            Not Before: Oct  2 12:01:56 2026 GMT
            Not After : Oct  3 12:01:56 2026 GMT
        Subject: CN=7893a4479cfa13e72e556d0b2cd8504c8e65b46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:fa:3f:43:43:a0:d5:69:c3:71:9f:d3:81:
                    df:37:2d:52:ae:d9:fa:0f:6e:73:a3:eb:5a:aa:fb:
                    8e:22:3d:1b:20:40:d2:3e:29:01:d9:7b:85:c5:c4:
                    3d:26:47:5d:29:fd:ba:31:77:08:ed:7f:0b:89:9b:
                    7e:e8:a3:2a:70:56:c8:cf:6d:80:98:22:bb:43:d8:
                    a9:1a:f8:64:c0:58:53:a9:3e:b5:f1:71:83:86:e7:
                    81:66:03:b0:0e:5d:05:49:3e:19:49:bb:73:92:bc:
                    e1:e2:38:8a:fb:38:e2:31:8b:6b:e8:10:2d:4d:3a:
                    bf:be:7a:28:67:0e:86:f0:bd:1c:7d:34:7c:80:f4:
                    7e:ee:f6:6b:cf:44:3b:99:ea:73:5e:c0:0c:0b:a4:
                    88:a7:f9:2e:41:1e:9d:46:fc:2e:ae:4f:7c:d5:24:
                    04:55:96:61:6a:dd:97:5f:d9:cc:c0:3b:7a:e4:06:
                    97:62:dc:27:04:0e:e2:cd:ae:68:77:56:16:6d:18:
                    c6:e3:b3:77:8c:ad:16:b5:34:99:0b:25:38:53:8d:
                    b8:4b:42:e2:5d:27:84:49:13:fd:a7:57:c1:19:b7:
                    5c:b7:52:bb:b4:b6:4c:48:01:8b:4f:90:eb:28:19:
                    da:59:58:90:97:54:55:a9:4f:a0:cd:80:58:4e:97:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:A4:47:9C:FA:13:E7:2E:55:6D:0B:2C:D8:50:4C:8E:65:B4:6A
            X509v3 Authority Key Identifier:
                keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:84:c3:c2:06:64:d3:9a:56:fe:e1:d6:50:cd:13:f9:74:
         39:17:19:57:d5:e1:36:6e:f1:24:49:86:fd:22:62:0a:23:19:
         8e:5e:eb:15:ee:12:2f:2c:70:9a:17:c7:3b:14:a2:fc:22:dd:
         9a:57:d7:8e:7f:17:24:af:f6:e3:5f:52:af:00:dc:51:52:eb:
         8e:24:8a:9c:42:32:fa:14:97:90:d7:cc:89:0d:c4:54:92:78:
         6a:51:ee:17:d3:cc:f1:a5:91:80:fe:d9:50:f4:97:ff:66:8b:
         f0:8f:5f:ba:22:69:d7:20:65:95:e4:f4:ff:a7:b2:d8:83:92:
         82:72:f6:8a:48:34:ca:32:67:de:0f:6f:92:68:51:b4:d9:58:
         6e:a9:af:f7:14:13:6a:92:10:2c:43:fc:67:32:d9:62:2e:19:
         df:dc:38:e2:91:ff:4f:3e:d7:42:7f:fa:10:48:af:fb:be:46:
         28:18:d6:c3:64:5b:cb:3c:af:d7:60:b3:87:5c:93:a7:00:b7:
         05:94:ba:ba:fe:9b:61:66:af:f9:60:55:70:81:2e:d5:5e:c2:
         6c:73:8e:d7:ff:fd:a4:34:c5:ca:5f:e3:13:6c:0c:9a:1d:a3:
         6d:9d:13:a9:ea:c3:5f:39:f3:bf:d5:11:f2:3e:92:3b:a2:20:
         95:f5:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:41:05 2026 by rpki-client