Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File:                     ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier:          pmcBYCTxMwXpTGHelYraieawLCRGaS8Xok690hXDNKE=
Subject key identifier:   5C:19:8A:82:15:83:67:86:06:30:5A:4B:DC:5F:53:24:23:76:E3:FD
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer:       /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial:       01A0D5A687038193BB4D9209ED86A0B2C26C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number:          1A77
Signing time:             Thu 24 Sep 2026 23:00:55 +0000
Manifest this update:     Thu 24 Sep 2026 23:00:55 +0000
Manifest next update:     Fri 25 Sep 2026 23:00:55 +0000
Files and hashes:         1: 0z9citdXF8752nMEZiQ4oSMIADQ.roa (hash: JsB61vUCFnFWtGQaFlnVeeC8gXBCxefSLsjNjYyY9/g=)
                          2: 1QDofdrdxn1wg6XblVl9BvBWUmc.roa (hash: 8Sto9TSm0VzEJfpih+W00AHEzAW1aUXacQ7edZT+jK8=)
                          3: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (hash: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs=)
                          4: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: O3j7qFOBELEktS6taxWcwIYQu4zXXKxMAUYXDcpC6zw=)
                          5: mYZ-CoJ30ryRjfCq_ZwrN2mkqqU.roa (hash: yzaoDw2vJVnlrfgQa+Wm4W0pkL/1ud5VYXRkIehmaa4=)
                          6: qBMQ_OTzlhMPTgYD0x98v7ieh-M.roa (hash: srAfkImn91GUj6UJibeFHF6TEzTA92kUfQ1mQv9UhIQ=)
                          7: vivzNK4w1TVYnua5SgoJCXmDNng.roa (hash: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:87:03:81:93:bb:4d:92:09:ed:86:a0:b2:c2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
        Validity
            Not Before: Sep 24 23:00:55 2026 GMT
            Not After : Sep 25 23:00:55 2026 GMT
        Subject: CN=5c198a821583678606305a4bdc5f53242376e3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:61:2c:0f:9d:70:8f:af:b2:eb:a1:d1:0d:
                    d2:b2:54:73:9c:20:7e:81:50:83:d2:c5:22:89:68:
                    7d:20:8c:38:6b:31:21:7b:b9:fd:5d:49:f7:29:f1:
                    d5:6b:d9:ad:c9:8e:5c:e0:89:f4:16:61:d4:a9:90:
                    1c:cd:24:4f:e2:da:f8:88:23:f9:a7:e9:d8:60:77:
                    a0:19:2d:fc:94:a1:0e:4a:48:e2:cb:95:f8:92:ee:
                    e0:05:eb:97:2a:3d:78:69:48:ad:37:2e:30:81:2a:
                    94:71:3c:81:2f:bb:d3:4d:3e:12:f4:8d:89:93:12:
                    f9:c3:25:44:69:a5:0a:d3:00:93:a8:fc:96:02:7c:
                    ec:50:d7:60:ff:4b:4b:ed:6c:f5:cb:e1:12:ad:92:
                    1e:c7:04:cc:e8:90:bd:19:59:a4:d9:18:cd:ee:b3:
                    06:89:33:fc:64:dc:b4:67:eb:7f:5f:23:7b:c8:44:
                    cf:f2:5e:c1:bc:b5:1f:9f:b5:c7:73:5a:08:60:cc:
                    99:a8:b9:1b:31:d8:87:0a:21:28:99:d7:0a:3d:0f:
                    6d:c5:73:dd:19:9e:23:75:88:10:f3:32:89:07:fb:
                    78:f6:2e:17:35:48:23:df:24:62:96:82:32:fc:7f:
                    fc:66:53:02:b5:a2:bc:87:0d:5c:87:eb:5b:b5:81:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:19:8A:82:15:83:67:86:06:30:5A:4B:DC:5F:53:24:23:76:E3:FD
            X509v3 Authority Key Identifier:
                keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:20:cb:1a:7e:06:16:53:10:d4:4b:77:40:3b:e2:b0:da:20:
         f1:cb:46:96:fa:12:b7:b8:3f:eb:20:b7:ef:8a:28:fb:e2:67:
         cf:12:4b:91:80:f9:c9:85:5e:ca:a4:21:1d:01:0e:eb:8b:39:
         62:6e:47:44:39:34:46:a7:b1:e3:93:3a:0c:60:32:4b:c1:44:
         f6:bf:3c:be:4f:41:c2:36:8e:c3:a3:bf:98:e7:95:70:35:12:
         9d:35:42:7a:44:95:22:32:e8:73:f8:e8:29:1c:3c:19:f9:5f:
         89:23:8f:df:1f:7a:6e:1c:00:44:b2:65:61:6a:ca:de:93:07:
         81:71:ab:b9:18:c7:5c:9b:9b:58:1d:f5:16:34:84:eb:2c:24:
         94:54:50:d8:02:f8:f3:4c:dd:ea:c7:b0:9e:a1:69:98:91:fa:
         3d:0e:1b:14:7e:fc:f2:56:94:5c:02:1c:b8:3b:da:de:ce:68:
         07:36:be:0c:30:af:ee:ba:ba:42:6a:8b:f3:b8:69:62:6e:ca:
         51:d9:6d:a2:7e:fe:18:d7:16:96:2d:91:53:7b:78:12:3b:50:
         ca:ee:5d:ac:da:9e:c0:0a:4e:19:46:c5:60:39:36:94:fe:5b:
         72:02:f2:60:ee:18:4a:0c:82:1c:8c:45:cb:08:03:fe:94:b8:
         d9:2e:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:31:23 2026 by rpki-client