Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File:                     zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier:          /2q8KqfZrWBNTjaWZfi21rcTgTo1F8OFDPUR9mVlxEE=
Subject key identifier:   F5:2E:FA:ED:25:EB:53:29:BD:F8:23:48:93:2D:E0:A2:D4:35:08:FA
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer:       /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial:       01A13C375E9D13773623F579F55EEE7E4506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number:          0CB7
Signing time:             Wed 14 Oct 2026 21:00:24 +0000
Manifest this update:     Wed 14 Oct 2026 21:00:24 +0000
Manifest next update:     Thu 15 Oct 2026 21:00:24 +0000
Files and hashes:         1: 0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa (hash: 2tTjB+QcoGOzx+5PBvD5G637D13fBCfUdr4GPNFvVKU=)
                          2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: +CtW01a4G7EqRLQAMTZYFcVkFAcMdCIjaDmYTFGJkCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:37:5e:9d:13:77:36:23:f5:79:f5:5e:ee:7e:45:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
        Validity
            Not Before: Oct 14 21:00:24 2026 GMT
            Not After : Oct 15 21:00:24 2026 GMT
        Subject: CN=f52efaed25eb5329bdf82348932de0a2d43508fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:17:dc:fb:5c:ff:c0:95:26:1e:23:1f:cb:11:
                    80:d3:32:53:3e:a2:4b:ce:0d:23:c7:67:f3:d4:1b:
                    d1:58:c0:83:51:36:f6:a5:5a:3b:62:45:83:d0:0a:
                    34:8e:8d:01:5a:c2:6a:5f:fb:ba:b4:a6:cc:58:a7:
                    da:b0:41:30:cf:e8:9a:56:08:92:f7:d9:56:d9:84:
                    85:b4:74:f8:4d:e6:0d:f6:d6:4b:53:4a:b0:d8:fd:
                    e3:f4:c0:17:b4:21:d7:8e:b0:41:11:6b:5d:ce:ce:
                    1d:9f:8d:26:4f:90:09:13:20:40:96:9f:2d:55:b8:
                    48:ee:72:5e:f8:f4:ea:78:9a:8c:d7:e0:01:5e:70:
                    5b:47:64:41:2b:ea:85:53:7c:89:5b:b8:7a:46:05:
                    b2:97:ba:b4:70:1e:a6:87:c4:a0:c5:19:50:99:62:
                    e2:fb:31:47:c5:b3:ac:03:5a:d7:ad:43:5f:a7:b2:
                    59:42:62:26:16:aa:f2:24:f8:c6:3d:12:c8:df:90:
                    94:be:f2:dd:77:6b:f7:83:94:7f:e8:6d:cc:e4:b7:
                    68:39:c4:bb:97:56:ca:9b:e4:38:02:54:ca:a7:40:
                    89:eb:97:91:76:97:c4:6b:f5:99:15:fa:52:d4:94:
                    27:68:0e:aa:63:31:9c:0f:9e:2e:32:76:cc:df:3f:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2E:FA:ED:25:EB:53:29:BD:F8:23:48:93:2D:E0:A2:D4:35:08:FA
            X509v3 Authority Key Identifier:
                keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d0:2e:28:5c:08:1d:e1:46:ca:c7:88:41:80:75:64:16:05:
         b3:72:18:06:78:37:04:72:82:9c:ef:56:dd:2f:a9:85:44:07:
         9f:78:bd:a6:15:18:16:6c:6d:56:c7:44:39:92:15:64:71:3d:
         e5:5c:74:0d:2c:0b:ec:78:04:87:c0:7b:c7:63:f0:8b:49:cb:
         e0:53:83:86:86:e4:c7:9b:6b:7f:1a:7d:38:94:90:b1:f7:14:
         60:fb:e2:e3:91:b3:f7:7d:28:c2:3f:77:37:90:6a:5f:82:b9:
         03:4c:04:0a:82:05:5d:7c:b9:12:5e:83:96:30:11:ad:df:42:
         54:6b:8b:e8:1a:b8:27:a9:d3:86:77:f5:6d:4e:33:50:ac:de:
         b8:24:35:8f:14:71:2c:be:8c:3e:dc:ae:d4:80:d7:d0:37:6e:
         48:3f:b2:3e:0c:94:d0:74:64:ac:ab:0d:31:79:22:58:0e:ac:
         da:13:c4:4b:02:24:2c:aa:e5:c8:f7:06:f2:e9:f6:0d:f1:09:
         f7:b1:5c:20:ef:f9:0c:66:41:e6:4b:63:fc:39:34:f9:d6:24:
         43:4d:ec:15:72:e3:8e:b2:79:e3:d2:da:cc:76:eb:ef:a3:80:
         8a:0f:50:60:b0:75:a0:86:51:fd:35:6e:d1:b8:7c:23:99:01:
         93:c4:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:09:59 2026 by rpki-client