Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File:                     zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier:          YrFM0BMJlwk+LEmMr3AYVYdqhd8ONL/6KhhrNVEptpw=
Subject key identifier:   49:AD:11:36:E4:C9:A4:D5:F5:48:8A:CB:FB:27:B2:AC:CD:FE:5D:B6
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer:       /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial:       01A0E13D56C23354EA90713C8BCC3D02B1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number:          1370
Signing time:             Sun 27 Sep 2026 05:01:28 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:28 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:28 +0000
Files and hashes:         1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
                          2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
                          3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
                          4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
                          5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: QWE991a72sMMvDLYoQLY+Yh9qxBydm7pGAO8A7yxniM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3d:56:c2:33:54:ea:90:71:3c:8b:cc:3d:02:b1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
        Validity
            Not Before: Sep 27 05:01:28 2026 GMT
            Not After : Sep 28 05:01:28 2026 GMT
        Subject: CN=49ad1136e4c9a4d5f5488acbfb27b2accdfe5db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:c1:47:fc:e4:72:40:39:f3:f3:25:27:70:
                    d6:38:dd:a6:52:d9:0a:68:0e:5f:da:e8:b8:a1:7b:
                    4e:96:a6:21:78:6e:15:c2:bb:2f:33:57:4d:8e:68:
                    b5:3e:24:a9:79:f5:2e:5a:be:39:42:dd:64:b9:52:
                    cd:fa:68:6f:c7:aa:5a:ed:cb:43:63:2b:d9:25:09:
                    f2:d9:4d:c3:d3:0d:d2:c6:1a:71:eb:43:ef:e9:6e:
                    db:de:62:e6:3c:07:cb:2e:78:55:72:26:4d:26:98:
                    8b:07:d1:45:0e:22:db:17:ed:73:be:d4:8b:8d:94:
                    f1:30:8e:a8:4e:54:ea:9a:bb:85:bd:2e:7f:2b:8a:
                    f5:0b:19:e5:06:9e:55:a9:ba:92:d0:a4:d4:99:2d:
                    c2:b5:16:05:df:3d:7c:b1:c4:2a:3f:1a:4f:3a:f9:
                    f5:97:df:77:60:01:af:92:34:df:15:ea:0c:53:39:
                    9f:7e:05:6f:18:ed:3c:8e:85:82:b6:73:3d:28:c5:
                    c5:72:06:49:0b:db:50:0f:89:da:a7:b4:25:95:55:
                    41:2e:e1:e7:06:3b:6b:33:3a:20:03:5d:4e:1a:92:
                    e5:b8:f2:b5:5e:4a:6d:80:af:d3:59:cb:9a:6b:09:
                    b1:90:2c:c7:82:d3:cf:ca:07:f3:eb:a0:61:d7:9f:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AD:11:36:E4:C9:A4:D5:F5:48:8A:CB:FB:27:B2:AC:CD:FE:5D:B6
            X509v3 Authority Key Identifier:
                keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:60:a3:56:d4:83:e1:d3:08:90:a7:c4:00:43:0c:c8:6a:
         9d:76:d5:88:ef:ae:c5:bd:64:b3:25:44:de:52:5d:8c:7c:0e:
         e0:f0:c5:b4:e7:0d:fd:bb:c1:ec:5d:04:96:3a:50:16:89:06:
         4d:db:dd:6c:f1:c1:9b:f7:de:5a:ec:a7:f5:a8:af:f9:53:a3:
         18:8d:a5:d0:68:ed:57:9d:21:3b:fe:92:96:68:58:8a:3e:7a:
         40:ae:0f:c7:b5:3e:a0:23:de:9f:43:b7:9d:4c:44:68:47:a8:
         dd:70:cd:96:3d:6b:b0:75:9d:13:21:e2:5b:5f:1e:34:61:2b:
         7d:2f:6a:73:fc:0a:ed:48:c0:3a:b2:5e:69:04:45:bd:7d:13:
         be:f4:d3:8c:f2:b8:b3:0b:d6:45:64:6c:58:aa:f5:aa:a5:bd:
         9a:3e:4b:79:e1:7d:9b:fd:a0:f7:ef:98:38:88:7b:c6:93:67:
         72:4b:12:91:6b:6c:c0:2a:53:12:f4:65:19:2a:c4:35:cf:e0:
         a7:13:52:42:76:cf:09:b1:5d:aa:15:e9:c2:f2:77:a4:8c:11:
         59:2e:88:e8:1e:4a:b6:dc:f0:1e:f4:d9:2d:d1:10:3c:31:77:
         3b:cd:b8:a4:3e:ef:6b:71:f8:44:44:1d:9a:f0:6f:1b:0c:27:
         28:0d:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:49:02 2026 by rpki-client