Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File:                     z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier:          x+4xx11OGNPYEBRbNGC9SgiZqo2yPsTFSg1KNFnF2D8=
Subject key identifier:   B3:1B:24:BE:CC:3A:95:2E:39:85:5D:3A:25:30:3D:54:36:8B:A5:42
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer:       /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial:       01A0EFD483C8169C72C29A742030BD984795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number:          0CE1
Signing time:             Wed 30 Sep 2026 01:01:17 +0000
Manifest this update:     Wed 30 Sep 2026 01:01:17 +0000
Manifest next update:     Thu 01 Oct 2026 01:01:17 +0000
Files and hashes:         1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=)
                          2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=)
                          3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=)
                          4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: cAzPBdHgajjSiw3jgqig5rBFqpaR7UlASqpdn6jZ6s4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 20:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:d4:83:c8:16:9c:72:c2:9a:74:20:30:bd:98:47:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
        Validity
            Not Before: Sep 30 01:01:17 2026 GMT
            Not After : Oct  1 01:01:17 2026 GMT
        Subject: CN=b31b24becc3a952e39855d3a25303d54368ba542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:e1:e0:eb:3d:4d:c2:0f:f0:31:63:c3:32:
                    21:ee:20:37:12:f4:b7:46:63:90:0b:9c:0b:1e:18:
                    c3:91:8a:d7:64:51:ef:6b:c3:75:ce:a1:21:65:3a:
                    d8:75:0b:a8:5a:c8:0c:8e:ec:dc:d4:c4:54:7c:08:
                    1a:b0:f3:39:d1:d0:3b:03:00:6e:a4:c0:32:e5:65:
                    df:59:9c:9b:64:b3:66:1c:ea:cc:6a:c6:47:4c:5a:
                    2a:69:46:40:22:54:6c:4b:07:d1:30:55:00:36:a8:
                    6b:d0:a2:aa:b7:84:5d:09:c4:33:51:f2:d6:87:67:
                    aa:84:d3:95:b4:39:61:f0:b9:e6:96:e8:8e:d7:75:
                    40:36:e0:43:33:95:8d:b6:f8:66:b5:4f:a4:54:3f:
                    ab:87:31:8e:c5:ed:9c:fa:f9:ec:4c:2e:f7:9b:ce:
                    53:c4:b7:2c:18:60:60:28:c2:39:1d:70:6e:e6:62:
                    7e:7b:6f:7c:c5:fc:1a:e4:74:2b:6c:1d:29:98:d2:
                    2a:8c:b3:e9:f6:d4:a2:08:4b:8a:f5:99:11:54:ba:
                    6e:ed:aa:90:f5:ed:f1:00:83:8b:fd:2e:d8:30:de:
                    2a:0b:26:ab:a9:d2:c9:c7:54:a7:74:5e:c5:de:22:
                    e3:3b:cc:20:c9:31:83:0c:0b:b8:e0:35:3a:5c:e8:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1B:24:BE:CC:3A:95:2E:39:85:5D:3A:25:30:3D:54:36:8B:A5:42
            X509v3 Authority Key Identifier:
                keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:9f:20:42:06:ff:ed:0e:0a:3c:ab:6d:67:3c:07:3d:c9:
         91:e5:56:45:ce:33:02:15:90:1d:b4:88:c6:f4:80:a2:c0:38:
         9e:8b:0e:8d:02:10:e5:12:66:d4:8d:bb:2b:8b:f4:7b:93:0e:
         b5:1f:c3:e5:e7:f5:d0:4c:45:80:1f:42:b2:c7:38:1c:b1:c3:
         57:10:9e:39:ee:87:1c:66:27:16:97:59:12:6d:7e:b7:72:67:
         39:2e:7a:a2:8f:2a:40:c4:b7:d7:12:2e:98:2c:cc:42:b2:92:
         2e:6f:5b:92:95:8e:25:28:72:65:aa:68:44:2a:51:bf:cd:b3:
         af:be:14:0b:71:c7:62:81:d1:36:76:6a:3c:ad:49:65:a4:c6:
         61:66:2b:05:4d:c2:79:62:d9:b3:78:12:33:bd:4a:5b:38:49:
         03:07:5f:d9:2f:c3:66:35:d0:6b:14:4e:e6:fc:2a:c4:db:ba:
         40:f1:31:d4:63:b7:ed:03:a1:85:97:f1:94:97:05:5a:50:25:
         f1:64:0b:26:ca:ad:38:0a:d1:24:dd:be:10:bc:5c:87:ad:51:
         f8:f4:72:47:ab:f1:20:be:e8:a5:ab:20:40:50:97:94:06:7c:
         54:83:93:ee:d3:97:cf:e8:8e:86:a5:92:77:53:f2:b1:68:a6:
         ff:72:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 08:44:15 2026 by rpki-client