Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
File:                     1ZTpX6WbUrWZ26QG17dvODypD6g.mft (raw, json)
Hash identifier:          YdUcwQ+YTCDWrhRA5LJgbKW5NxA9HNetr3nGXeo/kq0=
Subject key identifier:   2B:2A:E6:9A:11:5D:8C:CF:2D:8C:1B:E6:84:9F:68:ED:A3:DD:94:E3
Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
Certificate issuer:       /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Certificate serial:       01A0CA0FA2C0C3E509D33AC90D1CF61A4927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
Manifest number:          1211
Signing time:             Tue 22 Sep 2026 17:00:17 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:17 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:17 +0000
Files and hashes:         1: 1ZTpX6WbUrWZ26QG17dvODypD6g.crl (hash: 6ov+LgRSjxEV0fQFGTLl0FZtC2d9M+NqZhpb2Gq5VIw=)
                          2: DUskNcIQZwjTb7DZ-freME2oNjk.roa (hash: nDcT9LCMb7BQTYuDE4O/4AXMPAGpOTpeKPOxcFIo824=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:a2:c0:c3:e5:09:d3:3a:c9:0d:1c:f6:1a:49:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
        Validity
            Not Before: Sep 22 17:00:17 2026 GMT
            Not After : Sep 23 17:00:17 2026 GMT
        Subject: CN=2b2ae69a115d8ccf2d8c1be6849f68eda3dd94e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:50:e6:c9:c7:84:6c:e5:24:45:ea:2d:8c:1a:
                    28:28:f8:ec:73:e0:af:f4:6a:f6:2a:59:31:6e:21:
                    ec:ed:d9:96:d7:cb:d0:9e:c0:f2:a2:13:17:e5:cb:
                    5e:86:90:f7:5e:c0:9a:38:e2:5f:f4:56:41:dc:14:
                    04:40:b5:0d:da:2f:41:37:33:11:c8:c4:24:43:2a:
                    fc:2d:27:6a:d7:91:73:a1:1f:b6:0b:a1:f8:ec:59:
                    86:10:3e:07:09:60:61:2b:5b:55:41:51:88:42:c6:
                    3b:d1:7d:4f:da:fa:91:48:67:c3:a2:6b:0a:e4:8b:
                    58:b6:33:ee:43:10:a6:32:7f:fc:ff:31:85:dd:5a:
                    2f:a0:6d:85:26:05:9c:45:79:5c:08:56:40:e2:d6:
                    48:5b:c6:20:c2:8c:35:e8:a2:56:a0:17:b8:9e:3c:
                    46:cf:88:eb:64:fc:ce:d2:00:59:08:21:b2:4b:cd:
                    5d:32:1b:0f:eb:0a:b2:9e:6b:cb:ed:bf:a4:d5:c0:
                    a8:6f:2e:e9:a9:ae:59:1f:44:1f:6e:3b:8b:8d:f2:
                    d4:0b:bc:75:4b:7e:71:ac:81:da:b4:4a:06:e3:ce:
                    c3:55:81:c2:2b:86:f3:4c:4e:01:35:73:cb:47:16:
                    ac:d7:e8:e8:0e:03:dc:1a:2e:b6:a3:76:fa:89:ee:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2A:E6:9A:11:5D:8C:CF:2D:8C:1B:E6:84:9F:68:ED:A3:DD:94:E3
            X509v3 Authority Key Identifier:
                keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:a3:05:29:95:c7:d7:4b:d0:a5:a2:f2:45:99:1f:ed:58:
         a9:0f:18:d6:32:19:93:11:10:82:79:46:7b:a4:3f:8e:46:ec:
         93:0b:64:e8:a8:2d:32:05:05:2a:3b:af:8d:f3:f3:67:b5:22:
         b4:e3:8d:d7:ba:57:a7:55:eb:de:43:3a:d3:39:14:1f:ba:7e:
         a8:ce:e9:bf:e9:44:6f:5d:14:5e:b7:df:4d:26:7d:c1:c9:d2:
         04:2e:fc:c6:9c:0e:e0:7b:c1:59:8b:be:74:f8:cc:f7:e7:9b:
         af:2e:99:9a:8e:d6:65:5b:c0:1a:21:b2:19:0e:e6:36:cf:2c:
         a0:a8:3c:f4:80:66:e9:7e:05:71:84:e2:79:0a:a8:b4:08:f8:
         40:53:88:e4:15:15:d4:82:e3:94:c9:e6:0a:bf:ae:3c:f6:44:
         fd:f4:75:75:59:1f:76:1e:86:b3:f2:1e:32:eb:e7:cd:51:2e:
         a9:ed:bb:2d:72:27:2a:a9:2d:00:a6:4a:7a:69:81:f0:57:de:
         a7:d3:41:ac:8b:91:9b:18:f4:d0:d8:4f:5a:df:49:14:7a:e5:
         e3:e6:ff:78:cf:7e:da:18:b6:52:e7:00:1d:20:97:6c:ad:ab:
         c5:3d:a2:0c:50:2c:40:56:41:4e:2b:ba:24:42:7c:29:23:48:
         f9:0b:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:54:46 2026 by rpki-client