Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File:                     ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier:          ddcfZ/B8aU/lmQhcj5G114Uj/eMm0v1IstJ50vXV8Es=
Subject key identifier:   C0:CD:52:1B:F8:5C:C3:80:A2:0D:6F:EB:B5:8E:04:6D:A9:DA:6D:43
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer:       /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial:       01A0E0CF3786BEC8D676481AD4A77050BCEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number:          0671
Signing time:             Sun 27 Sep 2026 03:01:11 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:11 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:11 +0000
Files and hashes:         1: 5qNkExOt0emDRhiow-KnQX8Ro24.roa (hash: SZnUDB4XM0tRqzieEnmgDupfTzoEv8bYkRPs9SoQrho=)
                          2: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
                          3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: eGVAB7KElF+kBSnUAITfV9F+qF2YjgwrsHkeaHaK0YA=)
                          4: xTS6Tfiu-9uA63wefJtwTOK2RJM.roa (hash: 4AnrhCLByieTG8zvOspxIp8KCN2IgRpCwnbkXSHOdgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:37:86:be:c8:d6:76:48:1a:d4:a7:70:50:bc:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
        Validity
            Not Before: Sep 27 03:01:11 2026 GMT
            Not After : Sep 28 03:01:11 2026 GMT
        Subject: CN=c0cd521bf85cc380a20d6febb58e046da9da6d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:5a:4b:f6:6b:ed:e8:da:c8:4e:6c:8e:cd:
                    17:a9:22:9c:b6:14:dc:62:ae:88:57:9f:6e:ed:a3:
                    24:29:c9:44:03:89:c7:10:ec:dc:5b:95:f2:c6:0b:
                    3f:4a:62:b9:db:b6:55:45:d1:53:c8:bb:82:00:7a:
                    e3:33:37:da:28:e9:ad:ff:c5:a2:8c:6e:b1:3e:53:
                    95:39:aa:46:ac:e7:fb:11:73:7f:b2:d7:78:68:74:
                    46:c6:3b:06:13:e4:89:32:21:b0:0d:a3:cd:2d:ce:
                    55:3b:a6:b2:c5:aa:0e:7f:a0:fd:09:1f:68:a2:02:
                    8f:86:b3:f0:19:06:b4:71:d7:9d:9f:22:ea:da:d4:
                    cc:e4:86:27:8c:81:63:ba:2b:d9:a5:73:e1:2d:cd:
                    49:62:c3:05:01:5c:bd:7c:d5:d4:a9:d8:6b:be:cc:
                    92:86:ee:bd:fa:d8:df:19:3a:d9:f5:eb:7b:85:9c:
                    5f:a8:4a:2b:99:c4:43:4d:85:47:e5:f8:c4:33:3e:
                    95:c7:90:c1:a0:ae:ac:47:38:51:7f:f9:0c:e1:d8:
                    e0:28:43:f6:55:4f:d1:29:86:90:06:da:4c:bd:17:
                    58:79:a0:89:2c:7d:a5:f5:ee:bd:0b:39:04:42:96:
                    66:15:2b:32:8f:99:57:7a:39:c0:db:68:63:df:ca:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CD:52:1B:F8:5C:C3:80:A2:0D:6F:EB:B5:8E:04:6D:A9:DA:6D:43
            X509v3 Authority Key Identifier:
                keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:00:11:7e:79:68:2f:b1:a6:4a:f9:bb:47:c2:22:02:a1:05:
         71:1d:da:94:8b:89:db:d6:cc:db:a8:7b:9e:b0:21:4f:e3:b2:
         cb:b7:3c:d3:39:76:c6:64:95:46:a3:e4:26:e4:b3:3f:82:f6:
         c7:0e:9a:18:81:65:a3:e6:7e:5a:79:05:c1:a8:61:29:e1:cb:
         7b:2d:32:68:2b:08:28:8f:42:8d:39:04:fc:68:a6:64:a2:06:
         ff:02:6e:af:eb:ac:83:ae:09:bb:7e:5a:47:5e:fc:33:62:41:
         e7:03:d6:ff:85:e0:64:85:0a:6c:51:de:4b:4d:08:da:77:8f:
         c7:36:b0:8b:08:ca:6e:74:c0:88:eb:eb:a5:de:28:f9:92:92:
         17:aa:38:c8:b2:e0:35:87:3e:c4:1f:53:de:e0:08:77:35:12:
         ca:2c:9f:09:82:f9:8d:fc:f6:84:35:54:e6:3a:98:c8:9b:47:
         e3:8e:05:c7:73:7e:65:58:da:43:26:3e:77:77:e9:2e:14:49:
         70:ea:74:7a:60:fb:6e:d3:0f:15:d4:6f:6a:87:7d:e5:5e:68:
         e7:dc:ce:6e:71:86:17:50:d8:b5:ca:7f:4e:81:61:57:1c:5e:
         be:d7:3b:4e:a0:b8:dc:c2:f7:74:d1:71:ca:c7:72:7a:ea:e2:
         7a:db:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:04:40 2026 by rpki-client