Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
File:                     Zrds5_7vaVb437n4vDoiiGG5ny4.mft (raw, json)
Hash identifier:          eNLGKhLRMyBIlu/oT5R7eGijf44g3ME28wnwPIE52Kc=
Subject key identifier:   F0:70:11:C5:03:0C:B0:22:37:42:26:78:7D:43:20:27:8D:8E:B3:7E
Authority key identifier: 66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E
Certificate issuer:       /CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
Certificate serial:       01A12AD6B022160EDC7E6A4813B4AA1ED64F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
Manifest number:          02B2
Signing time:             Sun 11 Oct 2026 12:01:15 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:15 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:15 +0000
Files and hashes:         1: DneugekopIxK304C8pLImv6Qcv0.roa (hash: +cGEhJmcpfO0fbmJYvL9sDH0f2ClBmDUFG+o22CeZUs=)
                          2: Zrds5_7vaVb437n4vDoiiGG5ny4.crl (hash: kUlVAE7pbHDk3aZhIZMZ85KGL7BNoBCieToVq9UICKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:b0:22:16:0e:dc:7e:6a:48:13:b4:aa:1e:d6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
        Validity
            Not Before: Oct 11 12:01:15 2026 GMT
            Not After : Oct 12 12:01:15 2026 GMT
        Subject: CN=f07011c5030cb022374226787d4320278d8eb37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:2c:66:11:25:7e:fd:33:31:1d:ac:59:43:
                    b4:92:e5:e1:1b:cd:8e:1d:66:7d:74:6e:4c:48:3b:
                    12:4d:1a:b9:78:4c:75:37:55:23:e6:41:74:93:2d:
                    cd:fa:e4:14:c0:18:c4:6b:73:2b:28:2b:31:b2:af:
                    ea:1b:08:f7:26:ee:6c:46:0f:06:3f:ce:7d:62:5e:
                    e4:06:88:6d:c4:62:9c:08:67:06:07:de:91:ef:a9:
                    ad:0d:38:38:d5:1e:e8:1c:66:ae:02:9d:3a:16:a2:
                    30:06:b4:88:4e:a2:49:9b:17:66:91:b1:3a:58:fc:
                    b5:94:21:c2:16:c7:3c:aa:a7:bd:c6:df:22:cc:54:
                    24:5e:8d:be:0a:18:c3:c6:26:fa:07:31:68:9f:4b:
                    0c:fd:25:45:c5:9a:5b:65:3e:38:e0:d5:8e:d8:46:
                    e6:88:96:d4:83:c3:e8:84:01:ae:3d:e8:41:49:bd:
                    00:10:36:a3:ed:d3:25:72:74:92:82:6b:48:6d:ed:
                    92:e5:a0:8b:a0:57:50:77:3b:ad:58:fb:bc:80:b8:
                    b0:67:30:a9:c7:b1:1e:64:eb:eb:3f:57:35:a6:75:
                    60:1e:08:a8:2c:25:ba:1f:aa:f8:df:e1:72:32:b6:
                    e3:16:01:14:40:9c:c3:06:53:13:9b:25:c1:46:48:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:70:11:C5:03:0C:B0:22:37:42:26:78:7D:43:20:27:8D:8E:B3:7E
            X509v3 Authority Key Identifier:
                keyid:66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:8e:aa:39:bf:74:36:ad:08:bc:f6:47:ca:6d:87:31:61:
         4c:cc:43:e0:cb:f4:c8:2e:44:24:0c:b7:d6:99:b0:32:31:e6:
         53:50:b8:9e:15:e2:2f:4e:7f:85:13:f0:99:65:48:c2:da:86:
         87:95:91:bb:a6:8f:79:e0:51:ea:17:5f:30:6f:4c:83:96:fe:
         2f:de:b0:3d:a6:fe:c3:80:4d:7a:ce:02:57:41:c2:69:4c:b7:
         f7:a8:f3:62:5e:60:4f:00:c9:26:b3:11:e9:f1:96:f0:cf:ad:
         61:59:c4:32:82:17:9e:84:9c:0b:df:0a:4c:f2:97:1d:0f:3e:
         fd:3e:60:b8:c4:ed:fe:ca:f5:09:7a:96:2d:0a:e1:78:ae:91:
         3e:5f:87:aa:93:ef:99:e8:ff:89:b3:c5:4e:c2:e3:d4:d7:d6:
         c0:43:3e:75:ce:31:fd:4b:90:5d:94:23:ee:87:67:29:d6:2a:
         b7:76:95:60:7c:c2:86:a6:ec:67:68:3a:d9:dc:ae:4e:8e:37:
         4d:b2:18:85:21:46:53:1b:5b:8d:35:fa:c9:a9:a6:85:e2:bf:
         b8:68:fd:93:42:51:85:76:1a:d0:fb:c9:e4:01:ed:3c:63:0f:
         8d:0a:14:5a:e4:2e:d0:ce:42:20:be:58:42:4b:bd:3d:c6:b0:
         d0:72:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:20:06 2026 by rpki-client