Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
File:                     ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft (raw, json)
Hash identifier:          vOjMQBzXrNKwpsN0DvgrK0v3JOXsFL+a3LkWsVE6/2s=
Subject key identifier:   46:A1:4E:22:29:B7:EC:3D:D4:7B:11:D9:D7:99:57:E9:E3:2C:48:A5
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Certificate issuer:       /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial:       01A0D9BAF52CC716BEB8A814EAD7F942DF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
Manifest number:          EA
Signing time:             Fri 25 Sep 2026 18:01:43 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:43 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:43 +0000
Files and hashes:         1: 1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa (hash: gzQs+2Sri4/i+ZuiKLzc6oYRR4Wmc7We38Tn2yPF6nU=)
                          2: KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa (hash: XSPZXPjtWmH3tsooKgIJCC9hK4ebdbO48OGaE0GPJDQ=)
                          3: Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa (hash: ZVqCkdThQ+Dxa4j8Ohcu5jpE4zpamft8rts1/91ztKk=)
                          4: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl (hash: Adi4TIiJhzkn0qyWTJOFU02xk96cU37wmRcDy5kZq7Y=)
                          5: boyjYBR7CeYYqBubps31ePeRjKg.roa (hash: 44PfnVaKtdz7BnqSwnT3jqIEnA/Gm5oPQKvw5imMG+E=)
                          6: jwSgudfTgoD0rYPgWs2QdsgCaFY.roa (hash: T7RwlJl15rnyYrYfOU8otSAOkH0fOifwVGS8FpasWE8=)
                          7: kTamAiL6qOOf57nIraLXQq7irIk.roa (hash: djhCgJi8JfOsutJAAl8lRxYE0HKm1fCZVH28XEIjiKY=)
                          8: lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa (hash: PwjbCusxHYbPcriuRl5QcW2dN5wg11/a1p9YKj/rRnQ=)
                          9: pOkq5deJnN6boK6s5xEuzkj_cGg.roa (hash: J7cGVPgbOqr7KYHw8zUxLmdbPeKxga24cigIY5mS8rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:f5:2c:c7:16:be:b8:a8:14:ea:d7:f9:42:df:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
        Validity
            Not Before: Sep 25 18:01:43 2026 GMT
            Not After : Sep 26 18:01:43 2026 GMT
        Subject: CN=46a14e2229b7ec3dd47b11d9d79957e9e32c48a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:af:89:02:76:6f:08:fb:67:f9:60:99:46:
                    8a:fa:93:65:a9:f5:43:64:66:d3:17:7a:8c:e2:fd:
                    6a:7c:ec:3c:88:f6:a3:a5:f3:ec:21:2f:c5:ae:f3:
                    b8:2a:b8:24:75:be:a0:fe:6a:b6:14:8d:94:82:5d:
                    aa:81:47:9a:9f:d9:cf:dc:1f:c3:e3:78:b0:ac:ce:
                    49:73:6e:0b:03:ab:b5:40:16:c8:72:c8:03:48:63:
                    ca:9e:51:d9:34:29:bf:e1:1c:f3:a3:6f:64:49:a1:
                    50:fd:67:5e:44:1a:7a:e3:85:fe:bd:7b:2a:71:08:
                    46:07:a4:f7:64:c3:eb:6c:a9:47:ad:f4:89:51:f3:
                    26:13:f9:28:f3:d5:62:2d:e6:63:f6:30:98:b8:90:
                    10:a1:6d:4e:93:59:b9:9a:10:48:c2:dd:17:4e:e9:
                    39:74:7a:63:d6:cc:22:c4:e0:b7:ab:7e:80:a7:c6:
                    b0:54:8e:33:36:25:18:78:e3:2c:53:8c:f5:0c:e4:
                    ed:dc:51:99:68:da:cc:41:21:a3:02:1b:4a:d2:2c:
                    21:41:9b:82:bc:73:ac:a6:79:7a:b9:7b:01:34:4b:
                    bd:01:ef:8e:45:6c:93:fd:f2:5f:be:04:38:be:fb:
                    fb:6d:cb:37:23:d2:44:77:02:7c:95:cf:f0:eb:6d:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A1:4E:22:29:B7:EC:3D:D4:7B:11:D9:D7:99:57:E9:E3:2C:48:A5
            X509v3 Authority Key Identifier:
                keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:66:25:71:5c:55:ef:b6:c9:de:0a:a1:b0:bd:85:9d:51:c8:
         b3:46:50:f7:26:1d:53:43:ac:3d:d0:b0:77:29:b3:93:55:8e:
         d5:15:55:52:93:c9:2b:12:36:ca:b7:ea:8c:4b:6e:50:a8:43:
         dc:de:fd:71:42:43:2d:f7:05:00:3a:ee:d3:0b:f0:1e:56:43:
         6a:bc:76:d4:44:9b:c6:4a:df:9c:9d:dd:38:9d:81:29:a3:cc:
         34:3f:89:01:2d:ef:7f:4c:83:73:cb:2b:63:7e:20:5e:71:3c:
         80:80:d7:8f:21:85:8c:4f:83:b7:c9:17:76:d7:75:26:9c:f6:
         14:bc:f1:cc:76:0a:16:fb:9e:95:c2:f3:28:52:20:9b:34:5c:
         47:04:88:5f:78:94:cb:2a:b6:d0:13:63:4b:56:19:d4:c4:4a:
         e9:44:9d:df:5c:2f:2e:ee:bb:4c:f0:98:91:1e:bb:39:9c:71:
         5f:62:2d:ba:6a:a6:1d:d2:f3:d5:2e:a1:cd:b5:33:a4:48:b5:
         27:70:99:29:85:33:75:9c:35:9f:02:63:15:63:5a:4f:30:26:
         85:6f:a0:ab:2a:a4:d9:1d:76:f9:60:31:ce:fb:aa:f0:5d:ff:
         33:04:e3:33:8a:12:cc:24:df:38:09:63:98:31:81:b8:71:31:
         4f:12:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:31 2026 by rpki-client