Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File:                     ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier:          qfhiUCOuKbAkkAEyfh8pr+zLncCZbmSbqCFabZ+pXOM=
Subject key identifier:   85:2A:0F:EE:7E:95:6E:B9:1B:D1:C5:32:EE:9C:0F:90:B7:75:35:5F
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer:       /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial:       01A10DA74270B8143F7C8A610E576294EDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number:          1A90
Signing time:             Mon 05 Oct 2026 20:00:27 +0000
Manifest this update:     Mon 05 Oct 2026 20:00:27 +0000
Manifest next update:     Tue 06 Oct 2026 20:00:27 +0000
Files and hashes:         1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: xMeomFP+Gdp9NgdKUeZY18YbIJStlgBCFM6zQE6GD1Y=)
                          2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:a7:42:70:b8:14:3f:7c:8a:61:0e:57:62:94:ed:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
        Validity
            Not Before: Oct  5 20:00:27 2026 GMT
            Not After : Oct  6 20:00:27 2026 GMT
        Subject: CN=852a0fee7e956eb91bd1c532ee9c0f90b775355f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:62:d3:82:1a:1e:0a:fd:91:6d:b2:bc:54:
                    70:cc:8d:90:9e:30:eb:6f:3f:d4:20:1c:75:75:f6:
                    3e:45:60:48:33:1d:a2:0b:c7:38:45:89:74:0b:a2:
                    87:5c:17:18:d7:11:06:aa:13:c9:eb:fd:3a:2d:65:
                    d8:46:d3:7a:fa:bf:91:20:40:09:ff:9a:c2:e7:14:
                    ff:92:23:72:3d:cf:ef:fb:65:1f:9b:7e:24:4c:5f:
                    c6:0f:90:be:0e:f8:db:36:2c:77:63:2a:b8:a5:ed:
                    78:66:f1:8e:9b:cc:68:73:25:14:38:8d:bc:07:aa:
                    b4:ca:7a:48:56:83:04:0f:29:b2:b6:47:c2:56:6d:
                    9c:d5:c7:97:9a:d6:be:5e:0a:85:07:a0:69:18:c0:
                    d3:bf:4a:f8:1c:f7:35:88:91:ec:63:ce:a4:c6:88:
                    ed:17:6e:99:d6:be:17:9b:df:8b:e0:7e:ca:5c:f0:
                    b8:86:7d:16:3d:68:30:0d:13:ba:ca:eb:89:55:9c:
                    87:fb:e0:18:19:e8:22:4a:b8:24:32:31:36:d2:97:
                    15:9c:f4:e5:41:db:3c:08:7a:50:e2:11:e5:ae:a3:
                    ff:1a:67:62:b9:75:9f:40:ef:1a:c9:75:9d:0b:17:
                    f1:1c:77:bc:6c:0b:3a:ea:fa:9c:bb:a9:11:1f:95:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2A:0F:EE:7E:95:6E:B9:1B:D1:C5:32:EE:9C:0F:90:B7:75:35:5F
            X509v3 Authority Key Identifier:
                keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:c9:39:f4:14:3c:29:92:ae:23:7f:9d:11:7e:19:9e:96:
         70:92:8e:33:28:6c:cf:4a:54:7e:25:9f:89:3a:6b:0e:d1:e7:
         d5:f4:17:d3:17:42:e6:a7:c3:f1:63:b7:bf:ea:6a:96:57:42:
         d6:fa:c1:92:d5:36:7c:e0:82:77:7d:b8:d0:f1:00:75:9d:96:
         ac:21:df:c3:dc:62:48:1b:52:83:cb:09:d9:4b:0c:d3:bb:d8:
         9f:ca:36:0a:26:c3:e6:36:11:96:75:0f:44:b4:43:4e:34:e0:
         a3:db:ba:2e:3e:0f:10:64:47:53:bf:60:55:c3:0b:30:d6:78:
         31:a3:51:5f:01:ce:e6:5a:be:5d:67:2f:dd:01:69:55:ac:e7:
         9e:e8:96:cb:58:15:2c:b5:cf:92:f5:d2:03:92:c1:50:63:95:
         fc:9a:e1:5c:f5:8b:30:3a:47:28:f6:0c:3e:09:e5:05:d4:d5:
         ea:e0:6d:cb:16:c3:5a:10:33:3f:e4:f1:5e:6b:88:15:fa:69:
         cd:14:dd:bb:5f:f4:07:74:ca:7c:8f:a5:04:64:d6:44:ce:ac:
         36:a2:92:b0:ee:57:37:ee:2d:52:ce:7c:de:10:4c:45:31:05:
         7a:e2:c0:46:87:98:10:66:36:13:b9:f1:f2:32:49:1d:f4:45:
         88:ec:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:10:21 2026 by rpki-client