Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File:                     zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier:          xNYLbHro8dFQjJLCsaX8a51BdtC7b5mSJ9HGs72XqDI=
Subject key identifier:   0B:66:40:82:BC:71:E8:B9:26:47:A2:84:87:17:90:35:9A:EC:EE:23
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer:       /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial:       01A0DB03DBBA02C768822BBC85136A413959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number:          10CF
Signing time:             Sat 26 Sep 2026 00:00:58 +0000
Manifest this update:     Sat 26 Sep 2026 00:00:58 +0000
Manifest next update:     Sun 27 Sep 2026 00:00:58 +0000
Files and hashes:         1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
                          2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: u3DC/hFOebo4/jomh0C4puY8PdkUKrout7/XTHX9BtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:03:db:ba:02:c7:68:82:2b:bc:85:13:6a:41:39:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
        Validity
            Not Before: Sep 26 00:00:58 2026 GMT
            Not After : Sep 27 00:00:58 2026 GMT
        Subject: CN=0b664082bc71e8b92647a284871790359aecee23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:d2:0b:4b:83:f7:a7:7d:53:16:49:e4:e5:
                    ac:b3:55:44:f4:bb:9c:6e:ed:0d:12:93:ce:c8:ad:
                    fa:a6:5f:07:05:7c:f9:93:dd:64:7e:68:47:0e:1b:
                    8a:1a:e5:43:a4:aa:3a:0c:54:c0:cf:8a:41:d8:bf:
                    86:9a:d0:ba:80:f5:bb:2f:8b:d1:81:b4:79:7d:d8:
                    98:c9:2f:61:78:aa:c5:0f:ba:07:20:54:17:2a:32:
                    74:8c:ee:56:ac:de:f3:dc:a2:9c:c1:fd:91:25:4a:
                    02:1a:4c:e3:5c:fd:78:37:49:b4:5f:e6:9e:66:3c:
                    b4:e2:eb:d5:a0:db:76:51:cf:89:eb:b1:e7:23:9e:
                    6c:92:03:5b:9b:9b:10:0a:f5:63:06:ec:91:ce:e6:
                    56:0e:7f:fa:3f:87:1b:d3:ce:b2:45:73:b1:24:3a:
                    29:08:34:34:00:b4:d3:9b:e9:9e:5b:22:ec:4e:4d:
                    14:34:25:54:10:48:d9:f5:56:d9:38:16:6b:ad:58:
                    f0:99:0b:cc:1d:ae:fb:c9:6b:f1:67:da:35:84:66:
                    85:f0:1c:a7:aa:3c:d3:b7:23:16:45:43:f1:4f:ba:
                    4a:86:fa:52:3c:37:f5:4a:dd:40:da:3b:dd:02:dc:
                    73:ac:7c:3f:65:cd:a0:8c:ab:54:0c:18:43:47:b3:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:66:40:82:BC:71:E8:B9:26:47:A2:84:87:17:90:35:9A:EC:EE:23
            X509v3 Authority Key Identifier:
                keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:ea:41:33:10:95:43:de:52:e3:6e:78:be:6e:66:5a:a2:
         e3:ee:c7:d2:79:6e:ac:6f:1c:c8:63:f2:58:ba:4b:2b:db:f9:
         bc:25:1d:c6:36:bc:1e:cb:5a:be:83:8c:38:5f:05:5a:6c:cc:
         fe:5c:a6:aa:c5:a8:b1:7d:04:6a:70:6c:09:94:00:0d:6c:12:
         47:40:cb:66:5f:06:8e:f1:46:c8:0b:8b:cb:e5:af:0a:07:c9:
         dc:ad:f2:b5:ff:71:11:73:cf:d9:0f:9d:ec:23:db:82:a8:32:
         98:79:67:f8:0a:80:f8:0b:a3:e8:09:ef:3f:ed:b7:5a:e0:b6:
         60:58:c0:a0:91:56:34:e1:c1:6a:04:21:49:0f:f1:14:dd:3f:
         dc:5e:eb:67:6d:2f:1f:8c:b3:bb:c8:75:58:4d:a8:9a:2a:5e:
         e1:d2:64:6f:5b:b9:a8:03:35:c2:49:8c:cf:80:78:98:d9:e5:
         cd:a7:d9:41:39:07:dd:43:76:8e:af:74:16:56:e1:fe:7d:cd:
         d9:a6:6e:c5:61:62:76:7a:22:13:3f:2d:9c:73:75:a1:6e:d2:
         89:de:8e:1b:4c:c3:80:c9:af:0c:4b:b1:23:88:9b:7b:7e:f7:
         c6:b9:51:12:5f:79:c4:db:99:00:78:9d:cb:b0:aa:10:b6:67:
         68:ed:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:51:38 2026 by rpki-client