Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
File:                     zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json)
Hash identifier:          SYVuDHecdlDoDuzMpW1UrLjdhEXPcq6Id7lsNwJBch4=
Subject key identifier:   9D:58:46:9D:B7:A3:6E:8C:74:E0:98:14:81:39:E5:CE:47:DF:BC:E6
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Certificate issuer:       /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial:       01A0D5DD94D421A21708F0AE4765630D374C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
Manifest number:          1A01
Signing time:             Fri 25 Sep 2026 00:01:03 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:03 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:03 +0000
Files and hashes:         1: WH9MtYAjhnZexRfLWNZUYcRJcYU.roa (hash: KLzTItCMkuqh0f0qD5QoElv/ivKn4xdXzfd7Tf8Ak2s=)
                          2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: fO+aKBBNq1NtPI6pg4cPDl6VtTUVpEjmyhtfuTji+i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:dd:94:d4:21:a2:17:08:f0:ae:47:65:63:0d:37:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
        Validity
            Not Before: Sep 25 00:01:03 2026 GMT
            Not After : Sep 26 00:01:03 2026 GMT
        Subject: CN=9d58469db7a36e8c74e098148139e5ce47dfbce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:b8:b8:ce:99:19:3a:41:d2:f2:7f:d8:14:
                    df:b7:1a:3b:61:21:29:4d:b1:a3:e9:90:3f:bd:bf:
                    d9:ce:aa:45:fd:88:dd:ac:a1:b3:d4:fd:dc:51:d6:
                    f1:91:25:cd:b6:3f:e6:a1:8b:86:84:ab:b9:af:ec:
                    ca:b7:0b:64:ec:78:3c:01:57:ee:9e:23:43:22:d2:
                    f9:ef:85:13:52:a9:0f:39:7f:36:b8:17:99:b5:8c:
                    bf:32:51:f0:a2:ba:03:4f:33:7c:0e:8a:b9:c0:b0:
                    90:03:72:7e:12:85:60:71:b5:5c:4a:cd:a9:ae:40:
                    75:b1:94:c7:8b:87:a7:23:9a:31:f7:73:e0:00:4f:
                    73:1c:87:9b:39:de:5e:6e:8d:09:7f:87:51:e0:b8:
                    8b:b1:d4:dc:f4:f8:63:6a:88:5f:bd:f5:bc:63:7d:
                    30:d4:80:e5:73:86:b6:ab:fb:b0:63:f4:0b:ee:62:
                    70:00:51:b8:a0:17:bc:3a:9f:b6:0c:06:ee:64:bf:
                    a2:6f:4a:53:9a:b6:69:4d:a5:e8:f4:2e:3a:ea:c0:
                    b8:43:d3:39:a2:f3:12:0c:03:36:08:02:07:fb:4a:
                    91:31:3a:24:6b:dc:7e:2a:47:84:5d:2b:9c:87:d8:
                    c4:87:0d:3e:ff:7a:54:7e:26:c2:52:a3:2f:0a:dc:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:58:46:9D:B7:A3:6E:8C:74:E0:98:14:81:39:E5:CE:47:DF:BC:E6
            X509v3 Authority Key Identifier:
                keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1a:86:6a:18:a6:95:f3:48:e0:ab:c5:38:75:8c:23:14:3a:
         17:b3:93:ec:0d:11:b9:20:7c:27:4a:55:61:eb:51:b4:d5:c3:
         c8:81:e2:0b:41:12:21:f7:f0:17:43:95:df:9a:f1:4a:ab:07:
         65:a0:b5:1e:83:07:25:f4:3d:4d:59:e2:8c:d5:72:ff:87:60:
         3b:2e:04:63:d9:6e:ae:c8:3f:21:a9:a0:a3:2b:29:cd:c4:a8:
         4a:05:e8:76:e6:60:09:91:93:c8:f8:71:0a:95:b7:89:86:04:
         91:ec:86:a3:a9:6f:4b:7d:73:ed:0c:29:75:31:fa:90:43:b8:
         fe:37:20:a4:18:b1:ea:6c:78:e0:29:9c:28:2c:38:a9:36:72:
         73:41:6d:bb:d5:f3:44:02:6d:7d:94:03:cf:ce:e1:e4:96:1d:
         e4:e1:9c:56:1a:53:51:ef:52:26:b2:f0:70:37:27:b5:da:8d:
         55:32:07:c6:71:92:df:87:2c:67:25:02:f4:60:84:e0:e3:15:
         df:8e:29:b1:c7:e9:94:c2:b4:64:2e:4f:75:c1:ec:52:ce:ef:
         65:63:e0:1a:ee:3d:9e:52:10:98:3e:c5:ef:f0:d4:85:26:f1:
         a9:c5:10:79:e9:b2:32:9f:c8:c2:8c:7f:6b:79:c3:d4:df:c4:
         0b:1e:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:14:07 2026 by rpki-client