Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File:                     1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier:          4Q4LU7RHVezOA6V1+gM1mMkLotN2yWVrYSbkZZQ5TzI=
Subject key identifier:   DD:53:7D:5F:F7:8C:73:34:B4:08:7E:97:C7:43:23:08:D6:8C:6D:73
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer:       /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial:       01A0EEF95D767E1B268F09A36DFF74FC9471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number:          F5
Signing time:             Tue 29 Sep 2026 21:01:54 +0000
Manifest this update:     Tue 29 Sep 2026 21:01:54 +0000
Manifest next update:     Wed 30 Sep 2026 21:01:54 +0000
Files and hashes:         1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: TEeg/N+/ePfYRHdII0e9w3rPlGMckN9u/EJ0yGb4/lg=)
                          2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:f9:5d:76:7e:1b:26:8f:09:a3:6d:ff:74:fc:94:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
        Validity
            Not Before: Sep 29 21:01:54 2026 GMT
            Not After : Sep 30 21:01:54 2026 GMT
        Subject: CN=dd537d5ff78c7334b4087e97c7432308d68c6d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:2a:8a:53:c1:7e:89:05:0f:8c:9a:1c:33:
                    df:2c:d8:1c:95:4f:cf:62:57:8e:3c:76:cc:57:ee:
                    dd:67:e0:44:15:29:ef:ce:08:57:f3:ef:82:0a:f2:
                    a9:39:ff:5c:8c:9f:24:03:4c:08:4c:f3:88:59:9e:
                    5e:3b:fc:bb:92:c1:89:87:49:9b:f4:ea:3e:0e:a2:
                    dc:1e:4c:21:91:f0:7e:6c:f1:60:97:e1:e1:4e:b6:
                    d0:ef:52:95:7e:9a:f2:0d:b9:ff:92:23:46:d1:ad:
                    8c:d2:c1:01:c1:94:9c:67:98:8a:ab:02:85:6a:9f:
                    ca:19:99:ac:8c:75:2a:9f:fe:06:f6:be:af:bb:c8:
                    4f:28:20:13:0e:cf:77:03:2b:5b:23:36:1e:a3:26:
                    f0:9b:bf:8e:2b:a8:da:bf:a7:a6:95:5c:4f:e1:ce:
                    34:22:cf:92:2b:4e:9a:f9:9c:a6:67:42:c5:98:fe:
                    73:94:35:44:63:3f:86:c4:59:41:56:2c:ee:f3:a8:
                    a4:9d:f1:d8:b3:ce:4a:ce:3a:cb:ec:9b:66:b7:01:
                    fa:73:3e:b8:a6:d2:9c:81:12:82:77:b7:03:7a:8b:
                    1a:29:e0:c5:2d:32:72:57:80:b2:4a:9f:fa:97:79:
                    67:08:c3:47:35:fd:7d:fa:36:d1:60:63:e8:3b:14:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:53:7D:5F:F7:8C:73:34:B4:08:7E:97:C7:43:23:08:D6:8C:6D:73
            X509v3 Authority Key Identifier:
                keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:51:b2:d5:48:73:d2:7a:0b:0e:73:03:e9:74:fb:6e:61:20:
         65:cc:f3:7b:61:0a:dc:d0:c2:e0:ce:e5:20:51:e0:e4:d8:23:
         e5:41:fa:26:96:9b:89:5e:c7:e9:e7:d4:27:87:7f:03:16:69:
         7d:07:e4:ab:36:b5:65:69:65:2e:96:af:ef:1e:26:7d:af:75:
         2c:24:a9:31:ed:86:a5:83:7f:a5:bc:8b:5a:c9:38:32:63:61:
         50:2a:0f:49:4e:5e:fd:2d:bc:fd:d1:3a:4e:b7:ed:9b:ed:5c:
         d4:ae:51:0f:99:ef:8b:90:c9:32:1d:bb:cc:32:2a:10:47:5c:
         0c:41:0c:6d:dd:4c:d6:c9:80:a2:6c:db:24:14:23:94:c8:ad:
         a2:2e:64:f4:07:8e:2f:67:2e:57:ee:a1:2b:84:53:8d:59:4f:
         7b:03:47:90:7c:81:91:53:3a:b0:ca:9d:7a:09:b0:16:28:57:
         f9:ca:dc:5c:c5:4a:6f:5a:fe:20:98:18:f1:bc:db:af:ca:fe:
         2a:c7:0a:6f:ef:7f:b4:dd:42:f7:18:5c:f6:d7:9f:40:cc:bd:
         20:98:4c:4f:ed:15:fb:38:d5:11:d0:04:71:6a:8c:06:10:0d:
         7c:88:c0:e5:07:35:9b:6e:27:82:cb:70:95:00:fb:6b:91:d5:
         29:64:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:33:43 2026 by rpki-client