Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
File:                     zXXolNaajeSsnxixZzCGj8JY5Jg.mft (raw, json)
Hash identifier:          TYfTDw83FBS8RVM1KDtNS4pFRLGcghRJUIVu4iliYIY=
Subject key identifier:   E8:60:FC:96:C6:75:EB:F9:19:2F:38:73:01:93:60:A8:B3:B8:D4:32
Authority key identifier: CD:75:E8:94:D6:9A:8D:E4:AC:9F:18:B1:67:30:86:8F:C2:58:E4:98
Certificate issuer:       /CN=cd75e894d69a8de4ac9f18b16730868fc258e498
Certificate serial:       01A0D6F06C1A25B33CBD930DF1915A9761FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zXXolNaajeSsnxixZzCGj8JY5Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
Manifest number:          7C
Signing time:             Fri 25 Sep 2026 05:01:15 +0000
Manifest this update:     Fri 25 Sep 2026 05:01:15 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:15 +0000
Files and hashes:         1: G2UcFG5kngEVhRj3W-C85i4l2Q8.roa (hash: BpC7XpATs78NWBVSbkp0h5ZYQFR2te7nCt6bYeLy7yU=)
                          2: zXXolNaajeSsnxixZzCGj8JY5Jg.crl (hash: xuY1DO8ZdrMkaMN/EhCyFJlqKzwdIDZ+mzSSPx92ckY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zXXolNaajeSsnxixZzCGj8JY5Jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f0:6c:1a:25:b3:3c:bd:93:0d:f1:91:5a:97:61:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd75e894d69a8de4ac9f18b16730868fc258e498
        Validity
            Not Before: Sep 25 05:01:15 2026 GMT
            Not After : Sep 26 05:01:15 2026 GMT
        Subject: CN=e860fc96c675ebf9192f3873019360a8b3b8d432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:2c:9c:59:88:f6:25:41:5c:59:2e:36:29:
                    72:af:25:48:34:07:34:6a:61:d0:d9:43:87:6b:c0:
                    24:c5:5e:eb:c5:ca:7f:d6:2c:6b:c7:b2:28:03:01:
                    5c:4e:75:0c:59:dd:65:c1:61:0d:a2:f4:17:c0:1b:
                    53:21:63:28:dd:ef:d9:be:e0:1d:e5:22:24:36:47:
                    cc:0b:aa:69:ed:4c:ad:1c:aa:55:aa:a7:55:05:eb:
                    05:07:d7:97:29:41:eb:33:ce:1a:a1:93:f9:85:52:
                    3f:c8:46:b1:3f:4b:87:a9:ed:5b:55:1d:a9:3a:1c:
                    0c:cd:df:a5:45:20:f9:2d:7a:69:4a:45:0e:00:33:
                    da:23:2f:46:11:b5:51:99:88:77:ea:fb:1a:86:29:
                    7f:e6:2f:96:5e:e1:33:b3:34:1d:71:a9:a0:51:fb:
                    19:a4:d7:95:dc:c9:d2:3a:13:70:1e:86:cc:d0:de:
                    63:21:c4:6b:0c:5d:c1:59:4e:d3:65:db:92:d3:e7:
                    bc:cc:ea:e0:ad:09:f3:4e:7b:9c:90:c3:b8:ce:4d:
                    8c:80:b7:37:59:58:86:7f:57:fc:1f:2f:7a:af:6f:
                    50:61:50:1f:ee:51:bd:f6:75:0d:05:b8:18:c2:32:
                    32:3d:a5:c0:36:e5:c7:d9:9b:02:83:5a:58:4c:4f:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:60:FC:96:C6:75:EB:F9:19:2F:38:73:01:93:60:A8:B3:B8:D4:32
            X509v3 Authority Key Identifier:
                keyid:CD:75:E8:94:D6:9A:8D:E4:AC:9F:18:B1:67:30:86:8F:C2:58:E4:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXXolNaajeSsnxixZzCGj8JY5Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:08:f5:d5:bd:bd:a8:3e:01:81:07:3f:e1:b4:3a:ee:b3:d9:
         81:ab:f6:3e:42:a8:03:b6:dc:8c:98:53:58:63:30:33:50:7a:
         ae:72:9b:36:4c:cd:78:34:99:12:f1:66:5d:35:56:d8:39:4f:
         95:39:1f:e6:73:df:38:37:41:11:b1:9c:78:21:38:4b:bb:bb:
         b9:46:c0:9c:55:4d:bb:1b:f8:65:c9:66:40:bd:f1:49:4f:67:
         91:8c:45:10:07:72:f3:7c:02:47:a3:2a:f5:3a:14:c8:20:39:
         27:9c:8d:23:c2:ff:a3:64:12:77:13:1b:84:ce:6b:77:80:af:
         2c:21:d3:c5:c0:f3:8a:97:b8:63:2a:d8:13:b3:3d:3f:48:27:
         f4:94:e3:e5:9c:f6:ef:b6:db:86:35:92:f8:99:16:a2:b8:69:
         e7:04:9e:79:89:97:76:7c:9c:13:39:8d:3e:b3:c2:00:0b:cf:
         cd:51:55:20:62:79:5e:f6:18:13:06:9b:85:f8:87:ac:bc:57:
         95:56:ee:b1:4a:03:70:d2:66:6a:7d:79:6c:b7:46:7c:57:5d:
         c7:7d:52:90:ea:4e:82:d3:dd:c6:99:65:e9:d2:b5:30:41:35:
         2f:15:4d:f2:af:f7:2e:e9:fc:15:7f:89:95:fa:82:41:b3:53:
         ce:ea:ee:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:59:49 2026 by rpki-client