Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          x1qB5GXGPoeUKIkWSqPBm7nYJsDrsxNErVsVgLSawjA=
Subject key identifier:   E6:1F:E3:63:8C:AA:E0:11:31:D2:A1:21:C9:31:D5:B8:AD:33:4D:7A
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       01A0D4266C09F9D8E3594FB321BEF10AD611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          1746
Signing time:             Thu 24 Sep 2026 16:01:22 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:22 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:22 +0000
Files and hashes:         1: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          2: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          3: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          4: rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa (hash: 5EPYMX4bCFhTuhRxbCYeuyqQ6i8l79Kij3J+8QpNg1Q=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: 3+B66qyCQOSy7ZEBnDH/dTrJoz+x3ddZMF4TOiF8mqA=)
                          6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:6c:09:f9:d8:e3:59:4f:b3:21:be:f1:0a:d6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Sep 24 16:01:22 2026 GMT
            Not After : Sep 25 16:01:22 2026 GMT
        Subject: CN=e61fe3638caae01131d2a121c931d5b8ad334d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:b5:11:7f:5d:b6:ec:66:c5:1e:00:dd:7d:
                    af:8f:64:95:88:e7:8e:5d:6e:62:7d:c6:a8:a2:7a:
                    bb:4e:96:64:7a:06:12:f6:87:2a:d4:f1:06:e1:42:
                    ce:48:b3:43:74:0e:f8:b6:3b:c5:61:5b:ee:ba:e0:
                    d4:e9:e7:34:0d:87:63:d8:d7:82:bc:b9:bf:3d:c2:
                    51:3f:a0:c4:8d:d5:12:95:be:47:0f:69:ee:13:7c:
                    e8:50:49:5f:21:80:f4:b3:2e:9a:b5:f2:4d:cd:91:
                    2e:35:99:3d:6e:51:33:f0:e7:1a:11:cd:f4:38:34:
                    4e:79:7c:e9:36:dc:4c:c0:ea:da:6f:81:d6:1e:ab:
                    32:d4:6f:5f:1b:44:c2:d2:80:0e:0c:18:a7:33:8c:
                    e2:a1:c6:62:1c:76:12:9a:e2:44:98:97:12:c5:d1:
                    7a:65:f7:de:5a:13:1f:fd:25:17:2d:bc:a2:63:5c:
                    fe:f6:dd:8e:0f:37:fb:b0:a7:8d:d9:3e:5b:04:e4:
                    68:0a:cc:29:76:22:e8:17:29:95:df:ac:e3:cb:ac:
                    f9:fe:ed:53:7e:80:f1:ca:97:38:48:e7:28:50:9a:
                    cd:ef:97:3e:38:83:42:d0:b9:b9:45:b4:6e:91:47:
                    e6:c6:e3:2b:01:cc:df:8f:34:c7:37:91:f6:25:1a:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1F:E3:63:8C:AA:E0:11:31:D2:A1:21:C9:31:D5:B8:AD:33:4D:7A
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:bd:92:3e:0b:af:f9:9c:5e:4f:0e:20:3b:0e:e2:9d:d4:
         f3:9e:cd:a2:79:09:cf:27:07:c0:28:11:d8:1e:7d:a2:19:d2:
         78:1e:96:00:9b:c4:3a:51:02:5f:0b:f2:bf:65:9f:6c:36:87:
         98:9f:42:6b:57:08:8b:b4:68:a2:42:8c:1d:9a:da:cb:9a:b4:
         1a:78:48:be:c8:b4:ea:a6:49:51:5d:25:40:7a:2d:4e:46:74:
         5c:db:11:ad:31:7a:28:c8:6d:ad:3d:5e:a4:36:ce:80:98:a5:
         f5:d8:60:8e:16:4a:87:64:7c:8a:95:a9:d9:31:c9:94:84:97:
         08:6f:1b:82:bf:0f:1f:1c:95:d4:ad:77:cf:f3:62:26:b2:ab:
         0a:54:46:53:29:6a:a2:38:39:50:c1:8c:95:e6:7f:4b:8e:93:
         a5:3a:74:2f:a1:65:b0:cc:25:6e:70:8a:02:1d:29:9c:8d:58:
         71:16:e0:ff:ba:4d:e9:d9:c1:45:f0:f0:08:f4:b9:4e:88:e0:
         ce:2e:2e:3e:50:cd:35:13:89:6b:c6:00:84:cf:cd:db:61:bd:
         0b:a0:48:12:c2:b3:01:33:ed:e2:4d:e2:cf:0e:bf:d3:e3:02:
         50:18:48:2c:08:f0:4b:87:7f:f8:4e:85:9a:2a:27:e0:96:74:
         ca:1f:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:52:48 2026 by rpki-client