Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File:                     Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier:          mAG6zZZKlqjOR2WZx5geVoy3mlcLhyTHYO3PtsVbCwM=
Subject key identifier:   AB:E2:09:F5:BE:04:87:66:24:BC:6E:0F:DC:01:C0:AD:D4:8C:A9:71
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer:       /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial:       01A0DC4DC1775C6973FD94049708AADD407C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number:          1A05
Signing time:             Sat 26 Sep 2026 06:01:18 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:18 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:18 +0000
Files and hashes:         1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=)
                          2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: LZuGCIvKaHhQGEQ/cAAg/Glu1yzYkeZljqZd2vutWLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:c1:77:5c:69:73:fd:94:04:97:08:aa:dd:40:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
        Validity
            Not Before: Sep 26 06:01:18 2026 GMT
            Not After : Sep 27 06:01:18 2026 GMT
        Subject: CN=abe209f5be04876624bc6e0fdc01c0add48ca971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4e:c9:7e:98:7f:ff:5e:5e:e8:78:c5:30:f8:
                    42:31:c9:14:33:50:5e:05:9d:14:8b:ec:c2:40:e8:
                    12:01:d5:ba:8f:e5:66:a1:ba:66:7a:c7:bb:d9:dc:
                    26:f5:89:f9:e6:fa:f5:70:ef:ce:cb:a9:ee:f0:19:
                    ed:b0:2d:a9:76:29:69:00:8b:e7:43:0d:b0:72:27:
                    88:21:b1:68:d2:ff:7c:3f:2a:08:3a:ea:7f:38:4e:
                    55:4c:b6:00:fe:87:97:39:80:dc:a3:87:2b:11:c6:
                    c2:34:53:37:1e:5a:b8:0f:e6:e0:1c:13:38:bb:f3:
                    85:56:98:92:ef:53:2d:4b:fe:a7:de:cc:ae:2e:cf:
                    38:c5:54:45:a4:b1:33:75:63:f5:63:9b:f5:18:ca:
                    c5:43:2e:60:52:90:42:84:ca:e1:2b:90:e0:94:20:
                    78:aa:35:bc:3b:41:05:59:fe:87:55:db:6e:9d:d4:
                    c2:c4:d2:c3:a6:65:32:4d:cc:de:1e:80:e8:41:05:
                    d0:af:a8:8e:02:d6:54:e6:db:a2:5c:63:81:75:6d:
                    45:2f:8b:14:ec:42:43:38:38:f2:72:99:46:0c:ce:
                    d4:74:d4:dc:37:df:40:fb:34:6d:6b:80:0c:a2:f0:
                    39:2a:a5:ab:53:9c:2f:f3:ad:e1:73:bb:ab:d7:c7:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E2:09:F5:BE:04:87:66:24:BC:6E:0F:DC:01:C0:AD:D4:8C:A9:71
            X509v3 Authority Key Identifier:
                keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:63:63:12:d9:0e:01:06:8a:f8:39:e0:01:47:6b:6a:8d:7c:
         43:db:34:20:a5:c6:dd:f2:1e:90:94:20:38:e7:80:55:a3:4f:
         87:7c:73:02:43:f1:73:3f:39:d2:97:a1:47:72:e4:a2:13:3c:
         90:f8:1c:70:fd:a2:d3:e9:2a:70:ca:de:e1:3b:7b:e8:e2:a7:
         b1:6a:21:05:0d:89:78:ee:a3:cf:83:0f:d4:63:68:b6:a3:f6:
         02:52:b7:09:7d:38:30:11:7a:89:e0:0f:ea:07:f3:39:88:82:
         bc:4f:58:1a:01:8e:a3:85:ba:e8:2f:5f:86:5b:7a:4c:e6:39:
         8f:1e:77:ce:4b:7b:c0:b2:0f:b9:63:23:61:d0:5d:31:1f:b2:
         c9:1b:16:65:b1:75:42:04:df:7c:f1:85:7d:ab:d1:c3:09:89:
         69:ef:df:11:69:52:c7:df:a6:34:1b:3a:be:f5:48:37:b5:a5:
         ec:e6:ec:c2:8d:05:c3:f4:4d:ae:9d:ee:c0:16:32:49:7d:bd:
         3b:3d:18:d4:10:c9:f6:e5:eb:a9:6b:e0:30:d6:ab:29:ab:3e:
         8f:46:2d:76:91:4a:91:f4:d7:51:c3:c3:b7:9c:56:6a:c0:f6:
         20:40:2f:ef:7f:95:32:e4:a4:c7:7c:13:2d:20:df:18:50:12:
         d0:46:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:32:13 2026 by rpki-client