Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
File:                     zxMebPBAsKlffsLJPjJqYQh9jG8.mft (raw, json)
Hash identifier:          W6yvy5aYzGbN+ysoRrvg+NCoURzsw50WbmBYHJFA4ws=
Subject key identifier:   28:D5:D2:FB:8D:AB:5C:97:AA:93:3D:F6:44:6D:FE:1B:08:24:DB:5D
Authority key identifier: CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
Certificate issuer:       /CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Certificate serial:       01A11974570CC1F05C34F57B8359EE831409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
Manifest number:          010B
Signing time:             Thu 08 Oct 2026 03:00:17 +0000
Manifest this update:     Thu 08 Oct 2026 03:00:17 +0000
Manifest next update:     Fri 09 Oct 2026 03:00:17 +0000
Files and hashes:         1: vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa (hash: /QlR6UrnyGXIfWBFiHE7gFFLbMr1qU25LazaUkwU8DA=)
                          2: zxMebPBAsKlffsLJPjJqYQh9jG8.crl (hash: fJqur7rU+/3xQibvalnUYLX7rdaiTHRa1UeIqH7WmvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:74:57:0c:c1:f0:5c:34:f5:7b:83:59:ee:83:14:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
        Validity
            Not Before: Oct  8 03:00:17 2026 GMT
            Not After : Oct  9 03:00:17 2026 GMT
        Subject: CN=28d5d2fb8dab5c97aa933df6446dfe1b0824db5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:d3:e4:26:c8:ea:a6:1c:8a:87:6d:04:1d:
                    a0:c6:b4:20:f0:4d:c6:29:e2:42:d9:fc:26:f8:26:
                    f8:23:40:b2:e6:cf:ce:b9:ac:16:e5:94:55:8c:ec:
                    24:0a:60:76:8d:7c:8d:5e:b1:83:75:0e:04:c3:c5:
                    ce:5c:e6:48:08:70:57:56:22:81:93:f9:0b:2a:18:
                    55:6b:7f:06:51:01:02:e3:9a:0f:86:d3:62:f5:d8:
                    10:2a:64:70:ab:43:68:e5:f7:6b:c3:e9:24:8b:5e:
                    ef:30:00:5e:a6:74:75:5f:3b:84:84:15:ec:76:be:
                    0b:3a:8e:78:cd:6a:39:63:31:2c:1b:52:bb:88:7d:
                    d3:2c:4e:43:b5:ed:cf:a8:02:cc:4d:8a:19:ad:4f:
                    8f:9b:67:ae:03:07:3c:c3:ec:2d:24:dd:0a:b8:9b:
                    96:4e:4d:4b:22:17:ae:17:80:1f:44:f8:41:3e:c7:
                    74:12:be:d9:93:61:4e:a9:e6:81:d5:64:26:23:d7:
                    07:0d:b6:8a:d6:81:6c:03:07:0c:95:f1:8d:b8:dd:
                    69:c1:c9:50:b0:01:67:9b:69:c4:4d:31:c7:94:26:
                    ec:ba:b2:70:d3:b6:26:68:61:49:5c:75:ac:55:d6:
                    a9:cd:e1:57:5a:33:18:19:68:b7:11:3e:90:2c:fe:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:D2:FB:8D:AB:5C:97:AA:93:3D:F6:44:6D:FE:1B:08:24:DB:5D
            X509v3 Authority Key Identifier:
                keyid:CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:21:43:fd:13:e9:e7:b0:01:17:74:8f:26:a6:f2:75:0e:73:
         cf:cb:12:59:25:d3:15:e5:36:52:a2:1f:a5:64:3e:e9:61:72:
         1d:62:44:3d:18:43:bd:bb:1c:5c:75:dd:45:95:8c:69:80:32:
         ca:7b:f1:14:ad:8b:73:92:4c:64:5f:fa:61:cc:91:dc:b0:6f:
         ad:77:7f:77:7d:05:04:b4:ae:a6:87:34:8d:b0:dc:ab:72:5c:
         99:be:57:ff:11:9e:d1:36:67:de:e2:9d:f4:54:e3:f6:95:46:
         e4:97:0f:a4:c7:c2:d2:2d:80:e3:d7:c0:5f:5c:01:e6:6a:5b:
         c4:72:d5:3f:63:56:fe:2d:e9:97:16:35:5b:a6:1b:ad:70:64:
         e6:fc:07:17:ad:9a:5f:ac:43:b3:4e:b5:b1:cb:08:be:0a:91:
         34:e2:44:bb:54:6f:41:36:5f:9d:70:6c:d2:72:d3:8e:5c:ff:
         5b:35:8f:fb:43:26:fb:c8:f4:68:7c:a7:c8:bc:b4:07:f9:e0:
         2a:ef:a1:d5:3c:b4:06:03:31:37:17:40:8d:90:ec:3d:b6:4c:
         31:e6:22:8e:c6:b0:5f:cb:e2:73:09:d9:28:ed:a3:c7:11:a8:
         0a:41:c6:67:7b:21:91:4a:ee:43:08:2a:7e:48:3f:76:85:ec:
         89:b7:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:22:32 2026 by rpki-client