Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
File:                     Z_TjgP46-q_fnIL8auXjPOAyirI.mft (raw, json)
Hash identifier:          MRbbrPsjANurxzGRhs5TfC05P78xGr1efxfB838hK2w=
Subject key identifier:   90:59:AA:50:F5:93:31:0D:CA:DC:03:08:72:96:7F:53:7B:4C:02:AD
Authority key identifier: 67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
Certificate issuer:       /CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Certificate serial:       01A0D0119B484212FF339F016C46CC9C2F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:00:09 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:09 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:09 +0000
Files and hashes:         1: 81dpJBDy9Dao5ZscfFbdcGEGKx8.roa (hash: xYZWmARqztzpL9bYvU/vnFuYMaN1rzIszkHOfUaA5hw=)
                          2: JDNYiM5cTQvYl86g2PlIXooszc4.roa (hash: k41osz+0Jqv0dxjQFYhX5kFK2fQdrK1p+ItLN6xOXqI=)
                          3: Z_TjgP46-q_fnIL8auXjPOAyirI.crl (hash: 7wlO8wNDHyfjkQrJOZ+Z9x71mB/etLIO3JcuWpt8HLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:9b:48:42:12:ff:33:9f:01:6c:46:cc:9c:2f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
        Validity
            Not Before: Sep 23 21:00:09 2026 GMT
            Not After : Sep 24 21:00:09 2026 GMT
        Subject: CN=9059aa50f593310dcadc030872967f537b4c02ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:f8:34:1b:75:90:16:3c:a0:45:fe:87:b9:
                    e2:2f:46:0e:dc:5e:b6:a4:4d:6f:6f:9b:bb:60:57:
                    b2:63:02:f6:c9:25:f4:3c:21:28:90:94:17:e6:ac:
                    fb:a3:9a:48:81:09:c9:db:24:28:45:c1:0a:71:1c:
                    a5:ad:de:a8:e4:27:f4:d5:40:c7:cc:f2:0c:f3:bd:
                    bf:28:46:9d:e6:b4:3b:cf:cf:cb:84:a8:cf:88:3d:
                    c3:5e:58:39:31:74:db:4b:76:0d:56:2a:4c:46:db:
                    35:60:b4:a1:eb:ad:e3:8e:c4:35:2f:99:de:46:25:
                    38:d1:b4:6b:96:45:2d:4f:09:47:0d:95:4f:88:44:
                    d9:31:53:ff:fa:f0:de:29:9c:84:f4:8b:44:84:9d:
                    92:f0:e0:92:88:bc:cb:d4:70:25:3b:5f:97:0f:8b:
                    fa:52:50:62:f2:c1:c6:e2:33:7d:87:01:c2:de:c3:
                    11:ba:6f:cc:b6:1f:6c:91:c0:4c:e6:0a:ea:9c:19:
                    b1:92:b3:35:07:6c:18:28:fc:d0:e2:9f:28:35:a6:
                    3b:72:cd:58:f0:b3:b8:97:6d:28:1d:d7:29:96:ba:
                    eb:49:d7:74:04:51:5e:a1:df:f3:16:f8:3e:2f:72:
                    45:d4:c5:ec:cb:c2:ba:79:72:30:5a:ce:f1:4c:bc:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:59:AA:50:F5:93:31:0D:CA:DC:03:08:72:96:7F:53:7B:4C:02:AD
            X509v3 Authority Key Identifier:
                keyid:67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:a8:79:c0:8b:b1:11:21:5f:70:cd:b6:a8:ec:9a:6a:78:
         1a:db:97:3c:c1:cf:d8:da:5b:d8:1f:73:ad:db:46:db:39:f1:
         a0:23:82:3a:0b:00:13:f7:53:5d:d0:8f:0e:e5:b7:fe:16:c1:
         15:a0:e4:0d:ad:45:1a:20:ae:d7:68:35:01:df:20:68:63:71:
         e9:7c:22:a2:b4:27:08:d0:0a:63:68:34:30:7f:17:15:e5:9a:
         3b:02:34:a3:a2:8c:f6:06:3c:1a:3a:e3:95:f5:81:fe:2c:f5:
         36:03:bd:92:b9:43:00:97:fa:1b:af:a6:d2:89:2f:83:b8:06:
         93:b6:60:66:a3:26:1d:32:4f:1d:95:6d:59:69:40:1e:1d:96:
         d5:81:24:65:2b:1d:5f:1e:a1:85:16:da:ce:7c:9b:63:66:e3:
         16:e4:b6:50:cb:5f:9d:fa:6e:ee:c1:83:41:26:1e:5c:8a:f3:
         b2:d6:dc:2e:46:d3:29:1c:7a:20:1a:96:0f:b9:0e:21:b5:24:
         d4:56:02:42:bd:00:dc:6d:40:89:80:5c:5c:c8:61:88:71:2a:
         0a:65:ea:46:78:d8:f0:51:22:1f:c0:e8:db:3a:96:a5:6f:5e:
         eb:3e:b8:4d:37:30:a1:03:2b:3f:4f:85:68:27:0a:04:c5:30:
         41:6e:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:36:12 2026 by rpki-client