Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File:                     RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier:          JSMikk9zVY95YgEbvyC0uR1oKmJJZw2K1r3mFORqBaU=
Subject key identifier:   DD:66:34:76:7F:AD:7F:73:4C:B5:39:19:09:69:D7:4C:61:44:51:E2
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer:       /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial:       01A0DFBCB2E0521C8ADE1579C2F030BE2EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number:          0A7B
Signing time:             Sat 26 Sep 2026 22:01:20 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:20 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:20 +0000
Files and hashes:         1: J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa (hash: 5skkO0VA2fXKD8mx8GGrzwshnvuHDY9J9MdJAaUhV/8=)
                          2: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: /Khu1bZELLwrmLF8D/6fftyM/0ArDVybOhhQaSx/2xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:b2:e0:52:1c:8a:de:15:79:c2:f0:30:be:2e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
        Validity
            Not Before: Sep 26 22:01:20 2026 GMT
            Not After : Sep 27 22:01:20 2026 GMT
        Subject: CN=dd6634767fad7f734cb539190969d74c614451e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:6f:10:6a:23:15:17:b0:b1:98:e4:63:91:
                    c3:ed:09:e8:d0:0e:c1:99:01:fa:c4:b5:59:f8:95:
                    39:c6:58:c3:bd:f7:e2:d7:07:2d:d4:ac:ee:a6:b5:
                    be:29:ef:f3:e6:b4:f8:35:1c:d7:2a:54:d9:46:4e:
                    92:9e:f1:ec:be:db:f1:da:b4:66:8e:5c:7f:07:a5:
                    0f:e4:17:88:c2:cf:8b:ef:e3:7c:6f:ce:7d:e3:3d:
                    4a:5a:55:92:85:82:8e:7c:c4:23:e5:60:1e:be:fb:
                    da:69:0a:92:27:db:a2:a7:4d:0a:0f:7b:85:7f:83:
                    4a:66:6b:9e:7d:c0:11:a8:1a:90:c2:37:37:d7:79:
                    36:3a:e6:2d:18:46:c9:8f:0a:82:82:42:e0:05:84:
                    6b:08:4a:69:82:90:62:77:85:4b:b9:71:f6:e5:4c:
                    3a:ef:05:45:3a:8e:2d:66:aa:5c:6b:d3:d1:76:fc:
                    e7:b4:f9:47:29:83:09:17:02:6c:a1:e3:56:b9:12:
                    84:b7:b0:0a:8c:10:b2:6f:48:cc:28:a2:e0:e3:ac:
                    92:73:87:cb:08:fb:c2:42:94:5b:00:f9:03:80:a9:
                    f0:a8:ff:7e:f7:ea:6d:40:59:cb:d2:da:c9:a2:a0:
                    ad:e6:d3:52:93:77:4e:80:14:e6:88:a8:2d:2b:28:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:66:34:76:7F:AD:7F:73:4C:B5:39:19:09:69:D7:4C:61:44:51:E2
            X509v3 Authority Key Identifier:
                keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:13:59:45:5d:54:7f:e5:3b:e2:72:31:3c:93:65:32:b0:
         3c:d2:13:5a:9d:2a:ff:b3:b5:ca:63:cc:a5:19:66:09:3a:eb:
         8d:96:bf:19:94:51:3c:88:d5:3d:62:45:9b:75:7d:f0:28:64:
         cb:39:fb:5e:96:4e:9f:dc:d1:9d:78:c4:cf:e0:7b:82:94:38:
         d4:85:2e:ed:4f:d1:f4:d4:00:bd:d4:22:b8:fe:5b:cb:44:7f:
         5a:06:67:e7:83:9b:96:95:37:5f:aa:09:0c:7f:18:fc:7b:bb:
         72:61:d9:33:a3:6b:4a:c6:87:6b:2f:7b:ff:20:dc:51:76:fb:
         da:33:3b:24:05:84:4a:f1:d5:66:0d:12:60:ff:3b:6e:76:08:
         a2:b2:ed:e4:e5:0f:8b:0d:8c:f3:3c:0a:9b:52:b5:3e:04:e5:
         9a:94:16:9d:82:da:9a:64:33:c1:ea:3b:0f:a3:bf:8e:a3:ed:
         1d:90:fe:a6:5f:39:fa:c7:87:c5:c9:62:39:c1:73:15:59:43:
         26:c2:65:c8:c0:c9:58:44:ed:b6:0d:3c:1c:e0:a5:32:09:76:
         47:02:44:65:bf:4b:c2:48:d5:13:db:ae:5c:54:42:55:98:dd:
         50:b5:8f:16:96:09:12:fb:5e:39:8f:7a:da:7c:dd:78:98:e4:
         b2:32:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:11:00 2026 by rpki-client