Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
File:                     mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft (raw, json)
Hash identifier:          j5Rm+8z7WTWUvZeXYw7Hxld/kbqVl0SXdtzpTDDy69Y=
Subject key identifier:   84:13:0D:89:70:42:9F:7A:B7:E7:58:8B:5D:F2:5C:F3:DF:A8:B9:62
Authority key identifier: 99:3F:99:CC:DC:E1:D7:1A:6C:5E:E8:5B:67:E2:D1:FE:FE:AD:88:48
Certificate issuer:       /CN=993f99ccdce1d71a6c5ee85b67e2d1fefead8848
Certificate serial:       01A0DBE04DCEFE6B539140EF20284C1BC4A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
Manifest number:          7C
Signing time:             Sat 26 Sep 2026 04:01:45 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:45 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:45 +0000
Files and hashes:         1: b91U6HYF0ho-j3RbSoom-vw6azw.roa (hash: u+n1AmOZJw8G3qiLP8bKsVx/fGf6mN4ChrHMCSiOMho=)
                          2: mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.crl (hash: zPmEDxOfI4ePCSYJqTRVh2iwmhxVtgMEkhGaslqYg9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:e0:4d:ce:fe:6b:53:91:40:ef:20:28:4c:1b:c4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993f99ccdce1d71a6c5ee85b67e2d1fefead8848
        Validity
            Not Before: Sep 26 04:01:45 2026 GMT
            Not After : Sep 27 04:01:45 2026 GMT
        Subject: CN=84130d8970429f7ab7e7588b5df25cf3dfa8b962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:07:9b:00:77:bf:a8:fb:9b:ca:d2:eb:92:
                    e3:9a:ea:3a:10:2b:1e:75:b6:7f:8f:b7:5d:76:df:
                    57:97:65:9c:f5:6e:0b:45:43:5d:a7:ab:9b:45:91:
                    59:80:60:3d:ba:57:34:52:7d:24:b9:2e:e6:ed:9e:
                    19:85:03:42:60:07:59:8c:38:5f:60:35:2b:ad:c9:
                    c9:da:f1:0e:61:fd:f6:ec:c5:e7:a9:7e:f0:9d:b7:
                    33:2b:14:f9:0e:24:ab:f8:ae:49:a9:2c:e5:e6:de:
                    c5:32:21:4e:83:6d:a6:04:e2:55:67:39:be:32:cc:
                    41:fb:23:bf:04:93:0c:eb:f6:0e:44:1b:70:0a:bc:
                    31:2e:88:c0:32:0e:f4:bf:d2:ab:c8:ef:3b:c6:6c:
                    3d:23:81:0c:21:b3:94:5c:ea:a7:9c:24:ac:1f:cf:
                    15:62:5c:34:ae:26:eb:14:c4:8a:39:49:1d:59:c4:
                    e4:65:7d:7e:ca:70:71:b2:e7:7e:40:c8:56:76:4c:
                    8c:f6:9f:6f:bd:af:c3:6d:58:6b:cd:df:2d:96:bc:
                    68:36:e6:a0:52:d2:98:2f:18:35:dd:3b:dd:4f:cf:
                    44:c3:31:ed:54:43:4e:79:c4:6e:33:e6:d8:ee:52:
                    58:72:96:9c:f4:de:9b:61:a9:73:fc:5a:20:01:dd:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:13:0D:89:70:42:9F:7A:B7:E7:58:8B:5D:F2:5C:F3:DF:A8:B9:62
            X509v3 Authority Key Identifier:
                keyid:99:3F:99:CC:DC:E1:D7:1A:6C:5E:E8:5B:67:E2:D1:FE:FE:AD:88:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:d1:15:35:99:ea:96:e4:df:4b:bd:83:a9:db:39:a7:2b:
         18:78:5f:3a:82:a2:33:0a:f6:25:23:e9:8a:3b:0f:f0:00:aa:
         e4:45:fe:8b:1e:8c:64:5c:11:6e:10:2e:1a:5d:e7:f9:98:d3:
         01:95:d0:54:aa:c8:af:5d:db:09:94:81:72:33:ef:99:fc:7b:
         b6:39:97:a0:27:d1:c6:b8:d5:ef:22:19:27:ff:c0:7b:3a:9e:
         dc:ec:1e:24:75:8c:9f:36:9c:52:a9:95:47:68:89:d9:2d:8e:
         11:c2:d6:30:53:66:ab:a1:19:af:f8:16:db:78:71:ce:23:7c:
         bc:4d:41:c7:88:f6:6e:df:8e:9b:55:eb:be:61:ca:d5:23:62:
         3c:d4:2c:36:2c:9f:54:70:7f:3f:76:06:0a:72:a0:44:49:8e:
         d4:03:53:af:3f:f3:b5:c2:7d:bf:ed:4f:fe:46:39:8d:5e:16:
         50:73:e8:db:f1:00:ac:f2:15:08:88:da:96:5b:00:0a:b3:07:
         e4:79:6e:39:c4:4d:08:16:ac:61:17:7a:bb:ed:27:f0:38:f2:
         4a:b2:f4:6f:d0:a5:2e:7f:c4:b9:73:04:a8:a6:cb:a6:ab:c6:
         ad:e2:65:68:46:2f:f3:32:51:72:5a:d9:3d:6b:a9:c4:13:aa:
         9f:51:b8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:01:50 2026 by rpki-client