Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
File:                     ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft (raw, json)
Hash identifier:          f4PaBrYAI4P+luBwZzOSkSalhbujyRaDIZ8MXeDwOTo=
Subject key identifier:   11:DF:57:2D:DC:74:CA:1C:6A:C6:ED:8D:32:32:B5:E3:7B:80:F5:2B
Authority key identifier: 66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
Certificate issuer:       /CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Certificate serial:       01A107A6406591E275FC4271D11AD63BE6CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
Manifest number:          54
Signing time:             Sun 04 Oct 2026 16:01:38 +0000
Manifest this update:     Sun 04 Oct 2026 16:01:38 +0000
Manifest next update:     Mon 05 Oct 2026 16:01:38 +0000
Files and hashes:         1: ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl (hash: 20Jf/kwm2zkrp5Ud9drhk3c7x92UCgfgRk4ZNVS6ORY=)
                          2: hwu5SvCgU59ShO9fogdURCv6AoU.roa (hash: nBkergd1LBGxB0QpkcjB5a9Defi7cKkNRW0IBJmar/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:a6:40:65:91:e2:75:fc:42:71:d1:1a:d6:3b:e6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
        Validity
            Not Before: Oct  4 16:01:38 2026 GMT
            Not After : Oct  5 16:01:38 2026 GMT
        Subject: CN=11df572ddc74ca1c6ac6ed8d3232b5e37b80f52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:6f:9e:fc:6d:40:62:3d:66:78:a7:f0:16:
                    de:89:9f:d1:92:ad:7e:18:14:98:a6:7a:ba:8d:53:
                    57:60:e6:83:3f:7d:26:fa:9a:43:ce:b7:eb:86:4a:
                    f7:20:16:93:ed:a5:6a:5a:68:3a:7b:c7:64:7f:b1:
                    9a:68:18:b8:9f:75:5c:65:6d:09:20:7c:e3:cd:ea:
                    ba:52:20:71:dd:c7:d2:25:94:78:aa:18:9a:51:f2:
                    f4:2f:1c:de:ad:b5:35:4b:33:9a:35:cd:6c:c5:6c:
                    6f:bd:7d:4c:13:5f:df:f6:cc:37:0b:25:3a:bf:db:
                    47:7d:a7:9f:c5:b1:30:57:a6:0f:8d:57:56:52:6a:
                    4b:52:56:04:09:9a:df:2d:43:ac:03:d8:ad:47:df:
                    ae:b0:b6:ea:03:ff:88:c0:ea:77:25:29:c9:f3:b4:
                    83:60:b1:05:0f:0f:5a:fa:f1:c7:94:ee:2a:8f:a3:
                    11:3d:05:0c:f6:5f:47:82:6f:9b:3c:37:2d:0a:39:
                    b9:b9:fe:8f:ed:2d:80:a0:33:a0:95:2e:e9:ca:73:
                    40:6e:66:69:1b:e3:6b:70:13:30:e3:94:49:90:ba:
                    96:20:c8:06:9c:29:62:52:8b:7b:b7:44:17:3b:45:
                    a6:a2:d1:71:af:39:85:91:42:f7:31:a7:6a:35:5d:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DF:57:2D:DC:74:CA:1C:6A:C6:ED:8D:32:32:B5:E3:7B:80:F5:2B
            X509v3 Authority Key Identifier:
                keyid:66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:66:f7:65:43:63:8a:81:c5:92:db:99:28:16:c0:8e:c5:c3:
         5f:98:91:2e:c9:ea:30:82:5b:0f:ed:e0:86:2d:cf:69:42:cf:
         99:c8:ab:e7:81:c1:9e:89:3c:5b:72:fd:e4:3f:01:94:e4:ab:
         7b:73:9a:3e:5c:f3:29:1c:23:6b:7a:11:36:fe:20:78:96:3b:
         91:50:74:b5:da:3c:ce:56:58:ca:f1:b2:4a:74:77:4f:1a:fb:
         94:8d:26:7f:64:cf:a3:b1:4c:07:64:c0:da:9f:09:25:9c:1c:
         7a:fe:0e:ac:70:6b:a2:d4:46:7e:c7:d5:f6:c9:3b:cb:cf:9a:
         33:a4:06:27:46:94:45:a4:80:f1:3a:ac:7a:be:41:f3:15:a2:
         0e:a0:75:fb:ce:bc:ed:fc:2d:dd:f7:17:be:35:27:fd:ab:1e:
         75:c7:70:69:29:38:f3:c8:5d:cd:b8:46:22:02:a4:32:b7:25:
         5c:e2:ec:5f:8f:70:8f:fe:c1:eb:8b:3e:6f:14:2d:7a:cf:0b:
         5e:83:73:97:2d:3f:6d:55:3d:d5:d7:d0:c3:53:5e:f4:be:b7:
         9e:d2:f9:e1:2f:58:ac:9d:bd:5d:95:34:ac:18:d6:79:29:f6:
         3a:4d:a4:5c:08:2a:2f:e1:d6:5c:d3:7c:8f:9f:e7:d4:7c:3a:
         d4:3e:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:44:08 2026 by rpki-client