Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
File:                     ZzWoKVow19_KwqVwuN7LJcRlIUA.mft (raw, json)
Hash identifier:          ki1m7kAMrGHodxZLLwh234tj803WwCdXvLB35bwYKXA=
Subject key identifier:   26:7A:B4:41:4B:67:E0:7F:34:43:34:3D:B3:BE:4E:4D:32:00:B9:7A
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Certificate issuer:       /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial:       01A0E286F981AFCA6E07530597D6D34AD6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
Manifest number:          1A7D
Signing time:             Sun 27 Sep 2026 11:01:31 +0000
Manifest this update:     Sun 27 Sep 2026 11:01:31 +0000
Manifest next update:     Mon 28 Sep 2026 11:01:31 +0000
Files and hashes:         1: 8fT9Bwo1qSnIQUTFAaZlznnjaVE.roa (hash: ZgX4jXJIUC299mXxW62RnNsImL/nPwTMHS9fEBFmaP4=)
                          2: ZzWoKVow19_KwqVwuN7LJcRlIUA.crl (hash: Y+JBRmyHh37MJPIgsqNfGyA0aTnFxseFJOgTTvrcy/s=)
                          3: wlGZBZDMaCX_aQwpp2T4nJuVa5U.roa (hash: 256ACZVBiaeBcmN4S9TaoBdPfNmXXnRInCY8v0nfR2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:86:f9:81:af:ca:6e:07:53:05:97:d6:d3:4a:d6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
        Validity
            Not Before: Sep 27 11:01:31 2026 GMT
            Not After : Sep 28 11:01:31 2026 GMT
        Subject: CN=267ab4414b67e07f3443343db3be4e4d3200b97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:3f:ae:81:5d:63:59:fc:b9:f5:46:bf:a9:
                    f2:34:c9:09:b1:22:70:08:e3:66:0c:18:2e:2f:e9:
                    92:b0:e7:86:85:cf:f6:bb:19:b1:71:37:61:ca:32:
                    fa:08:44:1f:c6:9a:3d:92:0c:ea:8b:6c:79:08:e1:
                    88:04:42:2f:4d:c4:30:c5:4f:67:81:a6:60:d7:e8:
                    6d:b4:81:79:89:0d:2e:56:70:3c:7b:7a:b8:05:a0:
                    ba:a4:36:37:ff:c2:7e:aa:95:bd:bf:14:ee:fb:b5:
                    6b:bc:08:38:44:6e:a2:20:ed:99:2d:e8:ee:d5:4b:
                    a4:bc:b7:c5:d8:14:9c:82:6a:63:5c:5b:2d:87:f7:
                    23:85:15:8f:5c:d8:55:87:77:f3:66:81:f9:5d:2d:
                    54:7b:7d:6e:12:fb:b9:e0:67:2a:1f:ed:cd:ea:f5:
                    ac:cf:81:5f:2d:55:13:43:d8:1f:74:44:d5:aa:04:
                    f3:8e:1c:74:88:50:c3:ab:21:d5:2a:e1:5b:6e:b4:
                    86:af:55:09:33:fc:ff:59:94:29:13:3b:1c:ed:31:
                    88:67:ca:ce:b1:8c:35:a5:88:21:2c:c8:66:b2:ea:
                    e1:5f:59:66:6b:da:f2:0d:42:64:ad:89:36:0f:6c:
                    6c:04:62:6e:be:be:4b:57:b9:01:44:99:75:bf:b5:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:B4:41:4B:67:E0:7F:34:43:34:3D:B3:BE:4E:4D:32:00:B9:7A
            X509v3 Authority Key Identifier:
                keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:3f:3f:9c:83:56:d7:84:f0:2c:18:4e:74:c2:9b:69:cf:
         88:a5:ca:7b:fc:e4:c9:07:3a:2f:7e:65:80:dd:a1:ad:91:a4:
         77:4a:9d:28:bf:d8:ea:2c:7f:dd:77:85:91:c0:19:a4:4d:07:
         1c:d4:e4:55:51:91:e0:40:83:73:d6:ef:33:19:b6:2d:8a:48:
         3c:8c:39:9b:9e:c3:8f:3b:e7:b2:da:2c:93:ec:a1:e9:0f:6e:
         e2:47:b8:31:90:ac:8b:29:b9:4c:79:42:38:1a:5f:a5:52:90:
         c7:ab:09:f5:b3:b2:c5:b1:8c:10:60:2c:f7:41:a0:45:0c:3a:
         cd:b3:ea:85:3f:f7:90:fa:69:7d:b5:02:ae:37:aa:52:b0:18:
         7c:ef:9c:ff:61:b7:9f:f6:63:db:6d:1a:71:a3:0a:df:dc:2e:
         63:88:6d:6f:f3:a5:6c:83:cd:7a:58:24:9b:f0:8a:e2:eb:6f:
         70:37:45:dd:2e:64:0d:5d:91:2e:22:88:c8:bd:20:4c:92:88:
         bf:27:97:a6:e0:28:76:5f:58:88:40:00:57:d3:d5:3b:b8:d6:
         e9:26:fd:96:44:62:cf:0a:89:7a:62:9d:0e:91:56:b9:87:82:
         4d:ad:1e:a9:9b:7a:43:28:94:79:b3:63:2c:65:44:7d:07:bf:
         03:80:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:03:50 2026 by rpki-client