Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File:                     Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier:          2qQgPSUlvPWg7YfdhZaze9rM2VVwcs5nSlpXb2gC9ps=
Subject key identifier:   96:4C:1D:F9:3A:76:39:54:76:41:7B:06:1E:1C:D5:11:67:D4:F7:81
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer:       /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial:       01A1280CF141AFB663FB0584C8AC69EF995C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number:          1A9A
Signing time:             Sat 10 Oct 2026 23:01:39 +0000
Manifest this update:     Sat 10 Oct 2026 23:01:39 +0000
Manifest next update:     Sun 11 Oct 2026 23:01:39 +0000
Files and hashes:         1: 1gumHnj6OopnbaO5OKnK9usnN0c.roa (hash: jMf0UCwwHvdR+RYZ5nO/gYyfGV7EK/TsaRPXPqyAslg=)
                          2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: Io/3q4v7UIYcSUCZx5hkyHmb7DbSSmh5DXl8i09J0b4=)
                          3: huyceIHVnvQkvqjpwCiPSV0-omg.roa (hash: iUSoYSpkqD2GKh9pN5QDirlx+fKKFecxfJ2ArcTf/QE=)
                          4: yDBM58kt81zyAkC__aD6SmFbM48.roa (hash: BR6t0lSWRq79owbI5zS53DIuGEwrPtDn2T3AK3TJsVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:0c:f1:41:af:b6:63:fb:05:84:c8:ac:69:ef:99:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
        Validity
            Not Before: Oct 10 23:01:39 2026 GMT
            Not After : Oct 11 23:01:39 2026 GMT
        Subject: CN=964c1df93a76395476417b061e1cd51167d4f781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:7b:07:d8:ca:e9:63:b8:85:3b:46:d5:b8:
                    18:da:a2:cd:4d:56:43:f0:2c:8c:19:d2:f9:3b:90:
                    26:e7:f0:11:51:46:a3:f4:e5:14:bf:6b:44:a4:03:
                    b9:3b:78:ce:54:4d:46:a0:a7:7a:47:b1:b9:32:08:
                    47:35:1a:39:8a:d1:06:f1:45:56:70:cc:91:49:c8:
                    88:82:1f:1b:a1:de:ee:ea:15:d2:3d:3a:79:66:62:
                    2e:9a:45:fe:5d:88:5f:fe:ec:2a:c6:82:39:5d:76:
                    43:8e:c6:98:4d:7a:56:54:9f:f0:35:fd:d7:e7:b4:
                    05:e0:69:aa:09:d0:ac:bf:b0:ae:18:1c:5f:ab:46:
                    21:d7:70:46:75:44:65:0a:1c:4f:f3:1a:b1:41:84:
                    ab:7e:57:af:92:4a:27:d7:02:0a:89:8b:ca:47:55:
                    a8:3c:72:6b:f5:8e:d9:90:23:29:bc:c2:0b:06:ba:
                    76:dc:c7:bc:5e:93:85:79:16:c4:fe:ad:31:33:15:
                    bd:43:03:cf:3e:91:37:0d:b1:b7:61:e7:59:aa:80:
                    bb:0e:05:d8:a7:d8:ea:39:b7:7a:2f:d2:99:70:ff:
                    c5:71:74:c7:33:3c:3f:99:ea:6d:ab:ef:f2:d0:84:
                    b6:d3:67:6a:69:e5:7e:47:0f:60:85:2c:09:d4:d0:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4C:1D:F9:3A:76:39:54:76:41:7B:06:1E:1C:D5:11:67:D4:F7:81
            X509v3 Authority Key Identifier:
                keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:32:09:4d:c1:39:ff:8a:9a:9a:df:d1:43:cf:ca:9b:de:3e:
         3f:87:ca:fc:dc:82:ea:7f:e6:42:da:12:dd:6a:62:72:c0:11:
         0a:a6:b4:c7:27:21:b7:9d:ec:77:7e:66:2e:75:45:36:33:51:
         5d:fc:48:7c:d5:78:22:47:b5:a0:80:6e:fc:8f:d4:61:d3:f5:
         33:90:58:4b:98:89:48:1b:00:21:16:b8:60:ff:d2:55:ab:ad:
         da:a4:b7:8c:2f:bf:7b:ff:70:2e:7c:46:03:e8:5a:fa:1a:5f:
         3c:3e:99:51:c9:49:7c:9a:c0:4d:4c:77:c7:4d:b6:bd:97:9d:
         60:6a:77:b5:ce:06:57:53:b7:ac:c2:43:50:48:d0:51:c9:e6:
         27:03:e8:d3:bb:64:8f:43:3d:69:c1:72:00:0a:66:ca:b0:89:
         47:3f:75:50:05:8e:5f:aa:d7:cd:ca:ac:60:96:b6:32:b9:4f:
         45:38:8e:b5:34:6c:17:30:90:f5:00:ed:e6:87:e2:0f:08:2c:
         c2:e3:16:84:67:85:ea:0a:42:4a:e6:55:96:2a:09:c5:fd:ef:
         65:69:cc:33:54:7e:5d:df:28:2c:e1:e2:9a:83:1f:5c:88:d7:
         f7:89:93:e3:ac:03:85:f1:6c:d7:0d:9d:7a:a5:47:75:2f:a5:
         d9:f2:e4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:50:09 2026 by rpki-client