Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File:                     1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier:          QI0SSVMokLkv6GmpN3eMc2fNNtPBLhcvSpOS7Ny7kMA=
Subject key identifier:   F7:E3:16:7F:5E:1B:42:FA:DF:84:6E:6C:BF:97:09:EF:4C:EA:EE:9A
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer:       /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial:       01A0CFA46065E4E2A16C192AEAD550534012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number:          1362
Signing time:             Wed 23 Sep 2026 19:00:51 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:51 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:51 +0000
Files and hashes:         1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: mzslK1uqe4+8bgrdS/ulQ+o93xFBSzguJXwUvBcdfzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:60:65:e4:e2:a1:6c:19:2a:ea:d5:50:53:40:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
        Validity
            Not Before: Sep 23 19:00:51 2026 GMT
            Not After : Sep 24 19:00:51 2026 GMT
        Subject: CN=f7e3167f5e1b42fadf846e6cbf9709ef4ceaee9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:9b:6e:5d:2b:eb:01:99:a4:6c:e5:6b:ce:
                    36:36:c0:5e:61:55:5e:bb:d9:89:43:69:40:f8:ea:
                    84:02:d7:04:c8:29:6f:35:1c:7b:9f:9a:dc:dd:fe:
                    53:fe:a9:5f:d8:fc:89:cf:14:f2:7a:50:7b:60:73:
                    4e:71:88:d1:b7:28:6e:7e:ee:97:ab:cc:6f:32:77:
                    9d:b0:c3:9c:b6:79:98:b0:67:38:d2:f0:e6:36:3c:
                    e0:5c:23:01:8c:14:5b:1f:99:8b:65:dd:2b:d3:69:
                    3c:17:9e:d7:38:66:87:43:8d:1d:cf:b2:84:00:88:
                    7f:31:bb:77:07:39:77:35:50:45:67:5f:fa:73:77:
                    de:96:00:80:b7:8b:6a:a4:d7:5c:81:ca:93:ef:dc:
                    55:12:61:bd:e1:70:4a:2e:38:a6:ad:e6:83:b8:d3:
                    49:71:4f:96:9f:0f:1b:a3:91:3c:51:25:c9:86:50:
                    15:57:f9:0d:0f:46:b6:4c:84:0e:04:ed:6a:1e:bc:
                    da:9e:8e:f1:87:64:6e:54:71:7b:74:75:f2:8e:b0:
                    05:7f:86:fe:c4:c9:66:bb:02:88:c4:2c:4b:72:f3:
                    82:46:16:01:1c:9d:ec:da:19:10:9e:7b:29:49:55:
                    8c:be:0f:95:b0:59:4f:a0:98:e2:e7:27:39:1b:de:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E3:16:7F:5E:1B:42:FA:DF:84:6E:6C:BF:97:09:EF:4C:EA:EE:9A
            X509v3 Authority Key Identifier:
                keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:49:8e:34:fa:6e:61:aa:95:b0:68:63:2f:85:9b:86:d0:aa:
         57:42:a0:61:84:2f:55:f6:3d:df:4d:85:d2:ab:08:0b:31:79:
         bf:02:58:c6:95:bc:52:cf:d0:54:c0:3a:ec:ca:99:62:02:61:
         df:4f:48:46:39:ad:7c:2d:5b:51:e4:6d:f5:e9:2d:48:63:ac:
         7c:72:56:f8:bd:79:af:fc:d1:af:99:c3:f2:e3:12:8b:08:2b:
         a1:05:a8:ef:be:0f:4f:77:3b:b2:23:6c:5d:47:09:9e:77:16:
         28:5b:7b:2b:4d:a1:8d:8c:0e:19:82:58:c2:4a:31:21:7c:68:
         65:31:46:68:6f:66:35:08:d8:5f:b3:fc:77:f0:9a:b9:b1:49:
         d3:4b:5a:ee:d8:7f:dc:82:da:16:77:29:02:4d:dd:50:09:1a:
         6e:39:a5:b0:69:83:48:04:cf:78:4a:77:b7:56:90:7b:32:ea:
         9e:6c:77:b0:c0:fc:88:ba:03:e4:20:b0:99:3d:40:2d:e5:93:
         0d:fa:02:a3:e8:1e:77:d8:33:23:22:0a:a5:b1:2a:aa:44:41:
         53:24:b2:31:fc:d8:82:c6:92:07:0f:10:84:74:ec:36:51:66:
         ab:40:b5:30:31:31:74:2c:53:73:04:90:86:b7:20:ed:37:01:
         18:fb:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:12 2026 by rpki-client