Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File:                     zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier:          GlOhMJLwIwbw8cVNnJ0j5miHBGsmxGTgBE/VaDg2U/M=
Subject key identifier:   B6:C2:02:EE:CF:08:F4:13:8A:F1:55:27:0F:62:E1:8A:9C:84:25:23
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer:       /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial:       01A1242F8AB82D33CFA58D2965CEB1579D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number:          06EA
Signing time:             Sat 10 Oct 2026 05:00:57 +0000
Manifest this update:     Sat 10 Oct 2026 05:00:57 +0000
Manifest next update:     Sun 11 Oct 2026 05:00:57 +0000
Files and hashes:         1: IAA66PvhbnZNq6DYqFa4jxHq9Mg.roa (hash: CI2b/MsfzBD//bruekgU/jIDPxItVVrUl8xZ4Kyd7+M=)
                          2: P0v6mR3smcBt5UiE9QMtEljH-o0.roa (hash: 1OZZCNxK0pEOgMba5af7rR5wKnFTBqdHQ6QRRxIRAJU=)
                          3: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
                          4: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
                          5: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: cBfhqjJyDqcST1w4Bpc1aq//dfuVhJ+eiHi3MHR1jOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:2f:8a:b8:2d:33:cf:a5:8d:29:65:ce:b1:57:9d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
        Validity
            Not Before: Oct 10 05:00:57 2026 GMT
            Not After : Oct 11 05:00:57 2026 GMT
        Subject: CN=b6c202eecf08f4138af155270f62e18a9c842523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:8c:d5:d9:2b:7f:d5:3b:78:c7:a0:5a:94:
                    4b:f3:ba:d1:93:f0:d1:06:cf:02:6e:84:1a:a2:97:
                    a0:a4:4b:27:00:ca:09:ab:43:1a:3f:a1:bb:5d:87:
                    43:af:17:9c:d1:ea:9c:43:a4:0b:62:90:76:0b:e8:
                    0f:62:d3:26:5a:ce:9f:c8:fd:fd:90:a4:a9:67:df:
                    19:04:23:1d:fe:03:4b:f7:06:79:93:af:95:65:bc:
                    78:fc:58:ac:89:11:bd:09:fe:6e:84:8f:1b:ff:d4:
                    f8:d2:cf:de:33:30:ab:5d:6f:6c:f6:39:73:02:60:
                    c7:98:ab:29:68:f9:1d:3b:26:84:9c:b5:b2:6b:47:
                    df:f7:6a:77:52:91:61:95:9f:66:b2:c6:ae:65:cd:
                    78:22:6b:49:d4:56:44:fe:af:e7:84:c3:73:98:ab:
                    21:57:ed:52:61:bc:95:d7:f2:42:4a:56:21:8f:ec:
                    a5:f3:73:5a:5f:6d:e6:c2:5d:1b:e8:06:07:e2:40:
                    79:81:1e:aa:d6:85:0b:16:db:f0:38:d0:fb:12:4c:
                    0c:fe:ab:f5:c2:be:88:c1:2b:b8:ba:c9:c0:33:37:
                    22:4c:9f:e1:8b:41:66:09:5a:a6:af:5a:d4:12:17:
                    ed:05:53:00:bd:12:00:75:bd:37:b5:83:f3:14:9d:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:02:EE:CF:08:F4:13:8A:F1:55:27:0F:62:E1:8A:9C:84:25:23
            X509v3 Authority Key Identifier:
                keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:26:ce:d2:fd:5e:e8:e7:1a:c8:84:22:d2:c0:ab:1f:9c:
         cf:42:39:f3:7a:89:09:d4:00:56:71:2e:da:41:14:0c:11:52:
         c8:6c:74:13:54:e5:87:5d:15:ca:e8:81:70:45:72:00:76:ff:
         d7:da:41:5f:75:b7:84:36:ed:62:da:19:aa:c8:4c:5f:77:71:
         68:ff:1d:59:b0:00:61:f9:05:54:f7:60:b9:11:96:3f:5a:dd:
         9d:6c:a5:07:14:15:98:61:62:97:e6:43:28:76:5f:25:c2:23:
         da:fa:8a:72:7c:af:f2:bd:09:04:a2:05:6b:ca:c8:5f:dd:23:
         16:b0:24:31:73:db:e6:33:30:28:29:ad:7f:19:a7:88:a9:e2:
         27:31:fe:5c:c2:34:92:36:16:eb:84:7f:11:21:0c:26:44:94:
         e2:af:d3:3e:1f:3f:e9:43:cd:11:56:7e:a5:d5:5e:d0:53:0f:
         ea:bb:24:5d:20:9b:2d:83:8f:0a:70:55:53:31:5f:37:ff:fa:
         a8:1f:a5:87:ab:b1:a9:87:0e:c8:36:f6:df:fb:09:7a:73:7d:
         46:88:76:8b:34:04:7b:4a:6b:53:5b:93:4a:f3:17:c3:ce:4a:
         6d:3b:d5:62:b7:fb:d5:6f:1c:49:4e:fc:03:3a:af:a2:4e:3d:
         ec:09:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:09:10 2026 by rpki-client