Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File:                     p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier:          2GikJX+udnZgUBXmK6jiG8lOnNvdaiHFqs9LSdMCMuQ=
Subject key identifier:   8F:CB:0D:53:8A:96:BB:D0:88:73:85:8B:C0:C1:08:65:0A:93:D8:D2
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer:       /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial:       01A1065C14DDA51F5A7A751FF46A4979C2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number:          160B
Signing time:             Sun 04 Oct 2026 10:01:00 +0000
Manifest this update:     Sun 04 Oct 2026 10:01:00 +0000
Manifest next update:     Mon 05 Oct 2026 10:01:00 +0000
Files and hashes:         1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
                          2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: JFRsgH+5cwhf7n6/NwFijk2PE/6Z5ByGAZaUDsi9alU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:5c:14:dd:a5:1f:5a:7a:75:1f:f4:6a:49:79:c2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
        Validity
            Not Before: Oct  4 10:01:00 2026 GMT
            Not After : Oct  5 10:01:00 2026 GMT
        Subject: CN=8fcb0d538a96bbd08873858bc0c108650a93d8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:fe:98:db:31:89:22:56:7b:ec:f5:75:ab:
                    cd:a8:2a:0f:cc:f6:01:19:6c:6c:93:5b:ba:c9:ad:
                    a6:64:b1:7a:00:cd:5d:a8:c0:6f:a8:23:49:50:dc:
                    cf:b2:5a:af:c9:43:4a:e1:96:f7:9c:e9:96:33:37:
                    e8:39:9d:f5:2e:c2:4f:94:a8:74:e2:81:56:3a:8b:
                    31:ec:6d:63:fc:ac:4e:94:a6:48:03:01:98:09:74:
                    7c:08:fc:cf:1c:00:0d:d8:6a:16:e3:be:a6:8b:d6:
                    de:a5:2e:2c:5b:eb:29:08:70:be:78:0b:bd:c6:fb:
                    3d:e3:1d:be:d0:b4:3d:d1:99:dd:0e:1d:65:85:50:
                    74:73:40:33:da:bf:b6:4e:86:8f:d8:2a:c8:ed:a0:
                    ac:f3:e1:1f:fe:cc:36:66:cb:44:e3:3d:47:0e:99:
                    30:e8:fc:b2:f0:a0:2b:72:e7:41:59:e9:a4:cc:4a:
                    33:22:60:b6:45:2c:fa:81:56:e0:74:9e:10:5b:4c:
                    62:9f:92:27:f4:4e:b1:af:12:b7:3b:be:ae:21:47:
                    bf:e3:4e:c8:93:8e:74:7b:07:22:34:f2:61:bd:5c:
                    17:84:f8:07:24:f7:6b:64:35:7d:c9:87:d8:70:f1:
                    a7:f0:d2:ec:ea:4c:ea:98:5d:11:1d:48:01:74:1a:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CB:0D:53:8A:96:BB:D0:88:73:85:8B:C0:C1:08:65:0A:93:D8:D2
            X509v3 Authority Key Identifier:
                keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:13:b2:e3:4e:80:4b:9b:a8:19:e0:d0:e8:85:da:f1:62:
         55:fc:51:ae:e4:0d:b5:af:f0:e7:44:ff:14:66:78:7f:34:aa:
         37:ac:42:03:8a:32:db:75:fd:c4:d7:33:05:88:8f:78:3b:8d:
         33:45:85:f7:29:30:97:5b:bb:ae:38:c2:28:b6:e3:aa:8d:eb:
         2a:af:f0:78:cf:99:3b:a1:09:9c:03:5c:7e:be:c5:79:b0:77:
         e8:af:92:5f:02:bd:5b:68:9a:f1:81:14:97:05:82:29:99:48:
         f1:47:c4:62:63:18:e8:04:a3:00:64:b5:47:44:b9:6b:d9:67:
         5c:7a:10:7a:0c:17:f6:af:85:87:01:5c:b2:6e:17:f7:dc:4b:
         44:90:72:8c:94:7e:95:85:53:4c:4c:de:6e:e8:74:0e:09:f8:
         a2:ff:35:c5:13:cd:cf:2b:6b:0c:63:a9:1d:5e:88:fb:ea:65:
         72:91:47:46:1c:0f:f5:f0:ef:6f:c3:aa:21:0d:df:4c:38:26:
         80:88:51:08:30:1b:75:ae:99:55:19:1d:d9:a3:82:39:0a:6d:
         03:3d:3d:dc:d8:be:16:ce:e3:15:9a:9d:f8:ab:a0:78:43:51:
         54:ab:4c:68:ae:90:b9:8d:8c:ce:43:76:2a:71:09:64:d7:11:
         3c:2b:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:03:53 2026 by rpki-client