Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File:                     zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier:          AkdRKRwKAj3IDOww03XpVCot2EknPgoIvWZ1U1vbf8A=
Subject key identifier:   42:36:50:BE:26:4B:33:3C:2E:3A:93:F3:BC:CB:60:8C:AF:A6:8D:00
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       01A0DCF2D172236BAD067A2BF78D9B20829E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number:          1A7A
Signing time:             Sat 26 Sep 2026 09:01:35 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:35 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:35 +0000
Files and hashes:         1: LyD-byAqHkCId2X413D2X1Z2qHU.roa (hash: X3jzbRpGbv2O4J/HEOEG5KsHYAnqovf/BVNCZIBzGEc=)
                          2: NciFosUTZQjh8wuLeV_tqda00bY.roa (hash: zOA4Wef7GnD51/XhXMPfbgxKu5akVCbUSUyI9R7xcbI=)
                          3: Y8fFR3SR2JFo5SN-QHUy1g5AXnQ.roa (hash: rcBm3Sru1/9gzs1C6m5Kf+QWRSXdM9HmkBd/Rq/ayVk=)
                          4: gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa (hash: HeuNS/isx5Ir7rrhD9rHIdV2SzMR1qCm5KBXOXdXtqU=)
                          5: np_2_SKmGfgCwircPk4_KpAxetI.roa (hash: EXS4ryAU66idTchghJIvxISW9h87H73QFGZzRNJ0+zI=)
                          6: uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa (hash: xSRJcjd0eLR5MNbT/qQW4MnOH8NKSKy8VGBBsMm1Rj4=)
                          7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: FuT0ErK+WrXR0P6x4n1MSYq8cSeEyQiOaM63rhdwCik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:d1:72:23:6b:ad:06:7a:2b:f7:8d:9b:20:82:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Sep 26 09:01:35 2026 GMT
            Not After : Sep 27 09:01:35 2026 GMT
        Subject: CN=423650be264b333c2e3a93f3bccb608cafa68d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:19:ad:5a:b2:66:c1:2a:0f:5f:0b:96:c3:
                    60:5a:30:ec:66:8b:67:6a:d1:82:68:a9:11:4c:eb:
                    b8:6a:34:96:33:9e:58:ba:37:c1:c2:ec:d9:13:18:
                    a8:18:8c:05:41:b5:f0:bb:c7:f9:8f:5a:28:da:cc:
                    80:e0:97:8f:5e:45:8d:63:25:d9:3d:a8:84:21:98:
                    69:a1:22:05:64:c9:05:aa:b2:4d:05:97:e7:fa:3c:
                    96:58:f2:13:57:f8:b8:0c:67:8f:40:f6:11:e0:b7:
                    75:e0:97:96:e9:cf:23:f6:4d:6a:d8:78:76:7c:aa:
                    7a:c3:81:fa:71:b8:67:55:16:2f:2f:a0:19:e8:e0:
                    2e:74:7c:38:36:89:8d:80:ce:c8:04:d7:29:c6:3e:
                    0d:8a:54:d9:dc:41:75:ea:00:8b:1f:c5:87:ff:52:
                    81:7d:de:f7:2d:8a:21:1f:82:e6:11:78:e0:27:2e:
                    5b:c4:26:b0:7a:be:a8:90:a1:12:86:c7:1c:3a:1c:
                    67:f1:38:a3:dc:34:6f:d7:bf:e1:72:a0:f4:36:2c:
                    06:74:3c:15:47:f7:76:52:3c:ea:d7:ac:98:93:c7:
                    31:3c:b8:e3:91:fe:48:b7:0d:07:af:7e:0c:1c:9e:
                    67:9f:86:29:25:fa:f1:ff:a6:b1:95:45:16:d0:d3:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:36:50:BE:26:4B:33:3C:2E:3A:93:F3:BC:CB:60:8C:AF:A6:8D:00
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:52:89:5e:30:7e:90:dd:e0:53:cc:22:a8:b4:90:d9:a0:1f:
         a5:96:00:4c:8a:f8:5d:a1:32:d2:f5:4a:87:0b:29:fe:b4:ab:
         6e:f9:24:6d:00:70:62:35:8e:83:15:38:67:6d:38:87:af:24:
         20:96:45:b8:2e:a6:3c:2c:fc:6a:77:07:78:f1:6b:c5:ca:0e:
         fc:6c:5e:26:fc:4e:21:5e:23:14:d1:46:2d:8e:ee:c8:a8:0a:
         d8:b6:8c:62:e8:f8:ba:d8:af:8f:d4:ac:19:81:35:11:c1:c2:
         1e:ca:18:78:75:10:fb:4e:25:77:54:13:05:5a:f7:0d:7c:8d:
         0c:4a:77:32:d4:48:69:bf:30:da:5d:f2:de:e5:5b:09:3e:51:
         b3:10:5f:3a:ec:54:c0:61:43:26:1b:7b:7b:40:97:17:d7:59:
         99:af:25:a1:0c:36:6f:e7:dd:6d:1b:6f:fd:d5:61:69:d5:b9:
         18:a9:48:a4:2e:af:9d:d0:da:73:9f:b7:a3:e4:c0:ee:4e:ef:
         4a:9a:69:ec:be:80:4e:72:dd:6b:08:d1:9b:95:a3:8a:7d:5a:
         54:16:f5:02:04:bd:7a:d2:52:3c:bb:10:4b:64:83:cc:86:bd:
         42:42:46:73:c1:5f:ac:fc:3a:b0:27:6e:90:d8:96:b1:11:08:
         b1:49:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:36:25 2026 by rpki-client