Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File:                     ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier:          SrjnnvMz07Yb8mar8wm9LL8+TzNZFZKldZ1u/JvyzQU=
Subject key identifier:   E6:51:94:F9:AA:F7:83:DE:DF:D4:87:C4:EA:5D:43:85:B9:4A:72:DC
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer:       /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial:       01A0F29E843ABBAE070EFEF65861B7AC9F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number:          1A7E
Signing time:             Wed 30 Sep 2026 14:01:09 +0000
Manifest this update:     Wed 30 Sep 2026 14:01:09 +0000
Manifest next update:     Thu 01 Oct 2026 14:01:09 +0000
Files and hashes:         1: 7a3jx1e7OA1EvpScFrXmNMe5y_M.roa (hash: tYNpUtLbZOwbXL/8gGlkXA0JhxkITkZz7z+FpesOG/s=)
                          2: LO7eXF6OcCBWRqiHSI58WfsNfTc.roa (hash: kS9qCezSVg1pWa1B2LuRlgPBMoX60MqXPWVZsOzHZq8=)
                          3: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: dLCtIjI/X/Nq24VDc3USJEuUGIQ6zokjXXAs4NUEbBo=)
                          4: osWiuCxFKK7p5wtHqJimdeaWv-0.roa (hash: uNL2gHPQqgqmPM9/9Y5/YfTqQyz7bRjGXXYyc1z5tGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:9e:84:3a:bb:ae:07:0e:fe:f6:58:61:b7:ac:9f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
        Validity
            Not Before: Sep 30 14:01:09 2026 GMT
            Not After : Oct  1 14:01:09 2026 GMT
        Subject: CN=e65194f9aaf783dedfd487c4ea5d4385b94a72dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:ee:08:4e:ec:e2:43:88:35:a7:39:7f:23:
                    91:9f:cc:4c:3b:85:f5:d5:f2:fa:c1:26:d6:38:49:
                    cd:0b:1e:d9:be:53:3d:7d:5a:63:76:ab:e1:38:75:
                    be:dc:e8:c9:16:38:96:c4:17:09:34:fd:00:88:62:
                    cb:c2:4f:a5:00:29:57:4c:3f:cd:06:28:6c:5d:0d:
                    e1:44:14:b8:a9:41:25:4e:d5:e2:4e:57:33:8f:81:
                    b7:45:a1:81:ba:3a:f5:56:83:02:b5:8d:d5:91:8f:
                    a7:14:e4:5e:fc:49:cf:ff:78:8e:62:02:49:29:8b:
                    26:da:77:6d:2a:9b:76:1c:92:67:29:a4:44:fc:16:
                    40:e2:e4:b3:8a:98:e3:ec:a4:77:4b:0c:28:26:cc:
                    e0:27:82:f2:e7:5b:8f:7d:67:26:af:83:3e:14:9b:
                    e8:98:03:7a:ed:1e:ca:4a:9f:31:3e:de:3b:cd:0f:
                    5b:cf:c9:c9:43:b7:d6:9a:ce:62:04:cc:4b:ea:b0:
                    69:fa:54:31:0b:68:4e:b1:85:43:f5:66:3d:88:27:
                    d7:e3:99:19:25:a4:2f:87:e2:7a:b3:9a:5f:2c:75:
                    ad:09:c6:e1:9c:26:3f:46:99:5d:9a:d2:10:45:87:
                    57:e0:14:b4:7e:7b:98:73:29:af:54:d6:29:4b:e5:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:51:94:F9:AA:F7:83:DE:DF:D4:87:C4:EA:5D:43:85:B9:4A:72:DC
            X509v3 Authority Key Identifier:
                keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:f0:45:9f:d0:0b:ec:31:94:71:32:46:a3:b6:8f:67:39:
         f5:1d:d5:06:24:f0:51:04:a3:8f:eb:77:ce:3a:9e:68:e3:17:
         8b:0a:b8:87:87:dd:c5:dd:36:fd:3d:de:9e:ec:f2:3f:5f:f6:
         3d:3c:7d:0d:23:e9:83:c8:1e:f3:ba:66:14:7f:24:de:ec:6d:
         44:3b:fc:2e:e0:77:bd:49:e3:dd:3e:34:f8:94:0e:ce:1b:0d:
         f4:c6:75:c3:53:45:e3:fd:51:de:9b:27:3b:fd:c2:9d:0f:ef:
         2a:48:1f:5d:39:1d:e7:1f:c8:eb:a0:4a:03:e0:f0:bf:5e:03:
         bd:ba:ae:36:50:2d:28:83:00:03:b9:e4:dd:65:fe:e3:f7:6c:
         81:2e:d1:ed:f6:b7:50:11:0a:47:0d:cf:31:2a:a3:1a:3c:f2:
         b2:17:df:e8:4f:bd:76:57:92:3e:cf:d2:7e:38:66:05:3e:dc:
         52:f7:6f:6b:0d:af:5f:59:8e:e3:a3:3a:03:36:a1:10:aa:41:
         e7:f1:cf:44:74:0f:e3:a8:a4:1a:e1:1c:e1:81:66:2c:e8:4f:
         88:5f:35:a9:37:e8:aa:c5:4f:38:5c:25:4e:06:c8:0e:de:5b:
         12:35:79:8b:71:90:2b:aa:ae:a1:84:93:2a:8d:51:55:48:c4:
         6f:86:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 23:54:52 2026 by rpki-client