Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File:                     mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier:          enCstcae0ryqjPfH+Gv+PeKkD1H/L7GtQFvcvt5lARg=
Subject key identifier:   3A:BA:C8:F4:BC:02:B4:E0:C8:FD:F0:21:C3:66:5B:00:34:DE:C2:6C
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer:       /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial:       01A0D6B9D6313AFEF86F60BC268064DF6BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 04:01:38 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:38 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:38 +0000
Files and hashes:         1: 1-hSBct9w7V_v2aJj7OfoONMoQtc.roa (hash: 8Rt7WyNoryQAHJMpDa6SeX8TdTMr+iEX/3ANZvJf5vE=)
                          2: 5MZBnWU5gNxUVds2GS_ctx40VqM.roa (hash: QG6wEupT4WWEY6cienEgpE1K7AnWp3lnUif0PehHGFE=)
                          3: eCDlzK7WYx2wyI-MhH3sYue8XDg.roa (hash: 98RRinAUWzlpQnMjZqJmjkePB1/6O3taw25GtrD0NQY=)
                          4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: BD42pCySjxaCW5Cz1LwsMpDazUguYv7b5n0eAdNxRMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:d6:31:3a:fe:f8:6f:60:bc:26:80:64:df:6b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
        Validity
            Not Before: Sep 25 04:01:38 2026 GMT
            Not After : Sep 26 04:01:38 2026 GMT
        Subject: CN=3abac8f4bc02b4e0c8fdf021c3665b0034dec26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:06:22:dc:e1:6e:86:14:4e:1c:48:40:ae:
                    4c:52:ca:b6:6b:ba:49:f7:fa:00:6e:88:b5:59:c3:
                    b3:d5:92:94:5e:92:f7:d7:cf:15:9f:db:31:df:82:
                    cf:ee:c0:20:fb:06:2e:f9:c5:c8:b9:0b:bf:b2:d1:
                    d6:a2:27:d6:d8:a4:7e:5a:b6:0f:62:5f:3d:2d:fc:
                    30:04:3a:6e:ba:cd:24:50:c7:10:6f:0b:58:26:38:
                    69:b4:9a:ac:11:4e:a5:17:b6:cd:32:52:06:d6:23:
                    d3:d5:eb:b9:7d:e8:88:1c:dc:6c:37:3e:db:3f:3a:
                    cd:3b:07:63:27:25:fd:2a:6d:d2:4c:fe:bb:38:bd:
                    ee:e3:f3:97:ce:c2:6c:4d:d4:59:f6:88:43:5f:9a:
                    af:cd:dc:da:bc:c6:37:92:f0:54:e3:14:e9:e3:00:
                    49:f2:07:11:cc:8b:60:7e:11:03:81:45:3e:b6:f5:
                    a9:a7:e0:b8:4e:54:72:f8:84:cb:16:8f:a7:12:a0:
                    9a:dc:e9:56:57:12:6d:d4:1d:fa:9b:2c:f4:09:18:
                    c5:3b:07:6f:c5:0b:7b:45:ca:22:ce:65:1d:ee:d6:
                    d6:63:77:ff:e6:6b:67:e7:b3:ee:9a:30:5f:50:99:
                    dd:bb:f1:fb:6b:7b:cc:5d:56:15:b0:57:9d:4a:6e:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BA:C8:F4:BC:02:B4:E0:C8:FD:F0:21:C3:66:5B:00:34:DE:C2:6C
            X509v3 Authority Key Identifier:
                keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:5e:6a:29:b1:9a:c2:3b:bd:08:d2:8c:7a:fc:08:dc:61:
         68:68:db:81:8a:97:5d:d6:73:70:1a:6a:9f:7c:8b:b5:ad:1b:
         d3:31:8a:26:72:db:c9:8a:46:cd:be:ee:03:c9:5a:6a:39:75:
         e6:c0:b8:cc:83:bb:2c:77:2e:c5:ee:aa:e1:d7:75:c0:c0:02:
         b0:57:70:f1:48:2e:01:62:17:87:01:84:41:13:b3:c5:6c:6e:
         fe:50:16:19:e6:36:ae:7c:4c:49:38:d6:e9:28:5d:65:c7:de:
         4c:d6:21:f5:c5:b8:7f:25:a3:07:e0:2d:86:e2:d9:08:6d:e6:
         99:89:b0:e1:5e:62:87:36:92:f0:46:fc:87:fc:83:a4:7c:b8:
         e2:d9:1c:09:87:38:d5:46:f0:2b:f9:08:bc:2e:ee:39:59:79:
         43:c3:f7:d1:c1:2c:f7:0e:80:c0:fd:86:75:05:5f:ee:82:99:
         48:fe:67:e3:90:91:0e:ff:c3:6b:22:1d:ed:a1:7a:51:3b:d5:
         cb:52:40:87:02:91:f6:56:3c:cb:38:e3:d3:7f:42:9a:9e:3b:
         d9:d0:77:a9:8f:50:78:76:89:d9:7a:04:87:0b:74:37:34:64:
         1d:76:e5:a3:fa:d0:fe:cd:06:d5:e9:89:d6:23:04:82:9f:cd:
         70:fe:62:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:45:48 2026 by rpki-client