Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File:                     ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier:          EFWWFuEtH1DS0ICz4fKFw9pRPvqZWJ7Jei3e7iNMhaI=
Subject key identifier:   23:19:5F:98:F3:32:76:0D:B4:FA:1B:A4:D6:87:87:92:A6:3D:7B:EA
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer:       /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial:       01A0DC178BDA27688576089BFD483F88DF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number:          1A7D
Signing time:             Sat 26 Sep 2026 05:02:05 +0000
Manifest this update:     Sat 26 Sep 2026 05:02:05 +0000
Manifest next update:     Sun 27 Sep 2026 05:02:05 +0000
Files and hashes:         1: 1-RWTcjebB00EEPXrCQe14UhdpaU.roa (hash: xcBiWpi6+uT5sbN5EOtc0NeFtZPbsGISgJTOn56/et0=)
                          2: Ke8kTxOnrDSRnbMan8QsXJ_XEkU.roa (hash: CPpeXl3+kqfUGFSBaMiqr+IqI4glRjRTWo/lOcIIFFo=)
                          3: XFkubg9wfX84ABip8hpjo9juzcU.roa (hash: RFSGBBaYL7X28QtoqEmxImOKkYGxx+hir2PVsN+RGjY=)
                          4: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: 8WlKAXXkkZAU7JkrcudqvCDtDNOg4dVFQTLctttQM48=)
                          5: aoxQba3i7QUm65BfMLv96JuOb74.roa (hash: QIB1S/gkkRQGrocEZtGs9uUeW1n+BujIUCxe8lcxHAw=)
                          6: j_e68P-AYa2rmUhuYOkm9hzEeD4.roa (hash: fu5OUQBQJIV8KAmP0Ju9hs+ANS87d5jd3QwiV+u9mQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:8b:da:27:68:85:76:08:9b:fd:48:3f:88:df:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
        Validity
            Not Before: Sep 26 05:02:05 2026 GMT
            Not After : Sep 27 05:02:05 2026 GMT
        Subject: CN=23195f98f332760db4fa1ba4d6878792a63d7bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:65:b7:f5:67:03:08:9c:80:37:06:38:fd:
                    c5:06:1c:03:ed:3c:70:cf:fc:bc:ba:3f:41:4a:57:
                    41:98:b7:7c:7c:e3:78:82:d1:87:2e:f6:fe:e6:fb:
                    77:d4:93:5f:dd:89:39:57:09:bf:76:84:36:c8:4a:
                    86:71:7e:c5:6c:48:fb:16:6b:68:ae:30:87:07:d3:
                    4b:a5:7d:c9:53:20:35:de:3e:3c:7c:27:1a:c9:2e:
                    49:ca:ea:46:c1:a0:db:84:1c:ea:94:82:9b:6a:9b:
                    4c:a9:7f:a5:21:3d:52:27:34:89:41:ad:79:3c:c8:
                    d1:33:f6:a5:a3:64:7a:42:d3:f8:da:9e:8a:9d:59:
                    1f:83:ee:8d:33:b0:d0:25:83:e3:a3:7d:5d:8a:d0:
                    5f:65:8e:a8:36:ec:a0:ca:0e:90:c1:ed:3f:b4:e4:
                    8f:c8:94:43:52:60:db:58:61:32:05:22:76:5e:46:
                    7e:ea:c1:97:83:6f:a2:e6:c5:f5:5a:f6:c9:f5:00:
                    c1:58:fa:dd:86:d7:a6:0c:b7:51:91:28:f6:0b:34:
                    66:d6:e3:3f:51:50:3f:bb:ed:9e:8d:d3:c9:d1:c7:
                    3f:49:ec:9b:52:fd:19:6b:03:ca:36:4e:67:24:90:
                    50:99:1e:ff:30:b2:0e:7b:5b:f6:98:f9:a5:4e:d5:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:19:5F:98:F3:32:76:0D:B4:FA:1B:A4:D6:87:87:92:A6:3D:7B:EA
            X509v3 Authority Key Identifier:
                keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7a:a0:21:a8:b8:66:99:b9:2c:23:1d:a2:e8:24:e6:04:50:
         88:e7:f9:99:c5:e0:0f:cc:59:df:e6:dd:a5:0a:5a:12:85:a9:
         4d:39:e3:0b:6f:c3:b6:2e:ff:69:38:4f:4f:85:9c:54:21:b3:
         b3:f8:df:15:e0:7a:73:34:6d:52:06:58:ef:24:26:d8:d9:f4:
         38:9b:61:d2:f7:54:06:ae:40:f9:85:a1:d0:40:92:16:e3:91:
         1a:59:b8:1e:23:0e:53:37:ad:4f:ea:be:f2:17:ab:49:65:fc:
         88:ed:d1:9e:24:96:9c:86:c3:37:a1:b1:51:f7:59:7d:8d:17:
         d5:e0:a4:d4:6b:20:a4:71:99:bc:fc:64:56:a7:5d:cd:54:a0:
         b0:8e:7e:48:e0:e9:ed:df:b2:20:33:af:4a:68:a9:6c:76:ae:
         eb:c6:33:ed:92:c6:95:a7:52:dd:92:b9:24:f9:e1:8f:4a:dc:
         5d:75:1d:c4:d7:a8:06:b7:ad:d7:12:d0:4c:f9:9b:cb:78:9d:
         a2:2a:d0:0e:40:ae:06:fb:09:4e:f8:fc:f9:a3:55:e3:f7:4b:
         62:9c:e8:ea:93:5c:b2:81:8e:f7:6f:9c:83:f9:55:c8:f3:7e:
         27:f4:d8:25:85:12:ee:ff:f7:f1:67:59:ad:4c:ce:c5:3a:29:
         7d:8e:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:19:15 2026 by rpki-client