Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          +K3oToG8dbU4iRgvEo8MLpNaDxGJvhbl/sLsmbL2Q7w=
Subject key identifier:   F7:70:06:22:20:20:86:23:26:77:06:31:3C:CE:BE:15:D1:83:71:A0
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       01A0D0B6C6F0D35AE2EA1DFAECFDE70AD48A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 00:00:34 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:34 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:34 +0000
Files and hashes:         1: 6xuNTY_iWkHPPmX8ImnPUwpIICw.roa (hash: rki5JF3Dn8KF0wiQ0pOA5KuyYBjrNPOOlyoFXsz/Nw4=)
                          2: Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa (hash: /UOlw8R9RHBXRNf2pHB5ILY2/31tspmHrZEY8rczLws=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: TBm8Th5vQNZhZkz2QTriVzTVm+ag1vM8Tq7dED1/ROA=)
                          4: l6fGw5x0kwKbWm6qlO4Cb8mnozw.roa (hash: qIO5x+8uTr9xwt8GJiCJP0qK55Dhutv/sFwU3VkQhb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:c6:f0:d3:5a:e2:ea:1d:fa:ec:fd:e7:0a:d4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Sep 24 00:00:34 2026 GMT
            Not After : Sep 25 00:00:34 2026 GMT
        Subject: CN=f770062220208623267706313ccebe15d18371a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:83:65:b8:5c:7e:5f:bd:8a:00:fa:77:49:
                    d4:82:d4:12:0f:7e:37:bb:b0:81:15:28:6a:fa:1d:
                    20:27:f7:7f:66:87:13:3e:98:c0:84:18:b6:11:d5:
                    b0:d2:e0:4a:f4:79:7b:fe:49:67:12:ed:f5:5e:6e:
                    46:8c:5c:ad:3d:f4:be:16:eb:9d:04:a8:0d:fb:1d:
                    e1:12:49:8e:13:84:3f:1f:00:e8:15:c4:ca:0e:d1:
                    8e:3f:b7:7e:45:3e:dd:f2:96:45:b2:5d:62:52:05:
                    61:c5:be:a3:09:d1:6b:83:b6:19:1a:cf:21:34:3f:
                    08:76:32:b6:50:de:d4:fb:14:b4:d0:4e:bd:62:fa:
                    70:fd:8a:36:d6:67:a6:b0:82:ff:0e:07:83:5c:4b:
                    f7:1e:b2:bb:0c:66:0f:4b:a1:52:fd:da:0a:fd:27:
                    41:86:35:32:b4:e5:be:ff:ba:70:9c:03:1a:91:27:
                    e9:14:34:49:0e:6a:4c:d6:7f:b1:52:15:64:b6:99:
                    7e:d8:1c:f3:65:89:73:a0:02:aa:26:28:34:16:0c:
                    45:51:a4:a8:5b:98:2f:ba:88:4b:14:8d:91:a9:4e:
                    71:f6:74:82:81:76:7d:41:9d:7a:f8:ca:6b:fa:42:
                    cc:46:ca:13:23:1a:8c:16:08:0a:d5:2e:41:51:a6:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:06:22:20:20:86:23:26:77:06:31:3C:CE:BE:15:D1:83:71:A0
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:83:8c:ba:ba:a5:8a:37:09:02:a1:a6:8c:84:ed:1c:36:90:
         88:09:e0:dc:ed:f6:3a:69:9b:e8:d7:eb:bb:b5:db:f0:ea:78:
         5e:2a:3d:d5:d3:49:c0:f3:ba:78:60:c6:fd:b9:55:39:78:da:
         63:e5:84:b4:73:33:bb:0f:2e:de:3d:70:df:70:6f:20:2d:dd:
         fa:05:55:c6:c8:17:b8:39:d8:03:ea:2f:21:24:87:dd:b1:85:
         32:26:11:26:cc:90:b1:ca:3d:be:66:7d:f8:c2:cf:f3:34:98:
         be:9c:60:94:04:38:6b:7f:40:ab:74:c8:16:b0:b9:5f:5b:35:
         b5:51:a7:34:ab:7e:98:1b:fc:0f:b1:23:b3:d0:55:db:02:7d:
         74:8e:11:57:76:49:9a:03:6f:2f:50:fb:f6:6d:76:23:ec:05:
         cc:d1:8d:18:0c:18:66:93:05:15:95:d0:ae:12:99:4c:35:42:
         07:e6:ed:f3:aa:c2:2c:14:58:6e:55:45:0f:2f:7c:b7:2b:30:
         51:5b:5e:a3:32:f5:55:2c:85:64:8f:5f:a6:1d:a4:5d:d0:a4:
         ee:b6:c6:41:f6:6d:c4:88:82:af:09:ad:b4:38:1e:4e:34:83:
         4b:99:fc:86:03:35:1f:34:38:95:f6:ae:ad:8a:f7:14:97:47:
         52:84:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:40:56 2026 by rpki-client