Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
File:                     u_ZiVRjeFxdQ353R3d5c5PATUUs.mft (raw, json)
Hash identifier:          L9WvFFV3i1CEn/W1I1oVpJSgVgfA1+45owppem9g7k8=
Subject key identifier:   C0:B9:FC:9D:A2:6B:6F:81:3B:68:62:89:3B:D2:A2:EB:88:8A:B2:C4
Authority key identifier: BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
Certificate issuer:       /CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Certificate serial:       01A0D048E090C77EF047AD6E82E7B40F7EBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
Manifest number:          77
Signing time:             Wed 23 Sep 2026 22:00:31 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:31 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:31 +0000
Files and hashes:         1: A26-lasbV2k5M75rwTYmuN9_3do.asa (hash: Sun6EI7e8A+FFJyQElrNlyyAYtlzT8QGKplzHnPtD4g=)
                          2: r9sOkUJSTIYwYByOsBG7rQ5fUU4.roa (hash: 6XJeDwvqeUvD80Gd8Az6ZX6d/AoW+pC7ZiXXSru7U5o=)
                          3: u_ZiVRjeFxdQ353R3d5c5PATUUs.crl (hash: 7LCoreD44RJLyCH1qv0zz9w+BfI0fg1KgzD4V6LKq98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:e0:90:c7:7e:f0:47:ad:6e:82:e7:b4:0f:7e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf6625518de171750df9dd1ddde5ce4f013514b
        Validity
            Not Before: Sep 23 22:00:31 2026 GMT
            Not After : Sep 24 22:00:31 2026 GMT
        Subject: CN=c0b9fc9da26b6f813b6862893bd2a2eb888ab2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:92:99:3c:42:1a:4a:ad:6c:13:47:78:f5:
                    91:59:27:ee:f9:8d:0b:b4:91:20:f6:98:ff:ae:26:
                    93:17:41:2d:21:9d:09:75:84:ff:b0:57:4b:72:94:
                    5b:37:d1:3d:e5:12:e3:56:e1:7a:d5:7f:b8:9f:f6:
                    68:2d:3a:b7:16:f2:56:35:5d:55:08:0c:71:fe:e4:
                    de:1b:22:f6:44:26:bd:0d:74:cd:4b:dc:e1:e6:ca:
                    b6:16:91:4e:04:2d:e5:4d:55:07:42:2a:b6:88:ce:
                    ea:5b:49:ca:30:b9:f7:18:ff:02:b1:be:54:a0:fa:
                    79:45:9a:50:3d:9a:a9:88:ee:17:10:05:4e:a6:40:
                    a8:eb:33:c3:99:0f:90:85:1f:41:b0:e4:d2:1b:16:
                    03:80:78:14:61:de:80:c9:71:80:e8:08:17:f6:ea:
                    59:97:20:e8:a5:41:26:97:ef:49:a4:bb:61:3c:c8:
                    12:60:e9:32:7c:79:82:9e:c4:40:67:69:3b:df:0d:
                    b0:ff:5c:69:50:6b:37:a7:8d:a9:5a:c7:11:44:c5:
                    d5:80:c6:22:c0:81:e8:90:b1:ec:e7:32:e3:6f:66:
                    8a:d7:a1:9d:ae:56:09:a4:67:bf:08:39:2a:de:47:
                    e7:01:43:9b:33:c3:1e:09:99:c4:9d:c9:28:da:9d:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:FC:9D:A2:6B:6F:81:3B:68:62:89:3B:D2:A2:EB:88:8A:B2:C4
            X509v3 Authority Key Identifier:
                keyid:BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7a:55:71:7e:09:db:be:c5:7d:fc:42:2a:8e:82:c6:6b:cd:
         ea:15:a6:79:79:60:f2:e5:1f:ff:bc:09:1f:f7:34:53:e9:85:
         25:2d:b8:d8:2f:a6:45:c9:d1:59:05:e9:e4:82:62:bb:50:9a:
         ab:81:db:e5:b3:ee:5b:76:0c:c9:07:91:51:b8:d8:62:1b:01:
         82:33:88:22:15:2b:61:96:ee:96:9d:83:7c:b2:d8:70:31:f4:
         ca:31:fa:72:28:8c:1a:32:ca:ee:82:3e:1d:77:18:d0:02:2c:
         b9:5a:d3:81:4f:aa:e6:05:8a:fe:f7:62:de:2d:16:17:90:2e:
         19:ee:bc:68:47:14:f3:59:15:05:54:e4:ad:f9:54:2e:b9:88:
         ec:1e:58:99:86:ac:86:14:c1:37:78:55:58:60:b4:4a:93:55:
         78:80:09:98:47:e2:f8:bf:1b:38:b4:53:0a:04:ea:c9:f8:bb:
         18:5f:00:9b:34:c1:0a:40:d4:3e:f8:7f:f3:d1:6a:9a:48:61:
         6a:4e:ee:6e:e5:ad:d7:f3:92:22:fa:e6:7f:f0:a9:5c:1e:5d:
         ac:16:33:f1:2e:96:ce:7d:59:e8:06:c4:d7:62:27:ca:b0:be:
         7d:42:ab:f9:49:b8:5f:49:00:31:03:30:58:11:06:8d:62:98:
         68:1e:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:17:05 2026 by rpki-client