Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.mft
File:                     ZHEgPcvtauti27eYy_pam14JnE4.mft (raw, json)
Hash identifier:          u0S5ow8mY7r3IHqvfhno6g6ktwARsx3gUwD74bNn10o=
Subject key identifier:   FE:8D:25:91:08:B8:3F:A0:D4:12:A3:DB:70:EF:7E:45:57:D8:5A:D9
Authority key identifier: 64:71:20:3D:CB:ED:6A:EB:62:DB:B7:98:CB:FA:5A:9B:5E:09:9C:4E
Certificate issuer:       /CN=6471203dcbed6aeb62dbb798cbfa5a9b5e099c4e
Certificate serial:       01A187F68F9E9B333B021D58968711C5D999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHEgPcvtauti27eYy_pam14JnE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.mft
Manifest number:          78
Signing time:             Thu 29 Oct 2026 14:00:45 +0000
Manifest this update:     Thu 29 Oct 2026 14:00:45 +0000
Manifest next update:     Fri 30 Oct 2026 14:00:45 +0000
Files and hashes:         1: 8sWq3iBM9wYecX3JTdNG7Ia3bJE.roa (hash: q2E9rflz/LIYtWYQs+DXx+8pAI3puYyAV0/X9AJkqv0=)
                          2: ZHEgPcvtauti27eYy_pam14JnE4.crl (hash: WHuhd2qfCDe71+3QlWurXlQV0meRsBquFC7lgijYg9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHEgPcvtauti27eYy_pam14JnE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:f6:8f:9e:9b:33:3b:02:1d:58:96:87:11:c5:d9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6471203dcbed6aeb62dbb798cbfa5a9b5e099c4e
        Validity
            Not Before: Oct 29 14:00:45 2026 GMT
            Not After : Oct 30 14:00:45 2026 GMT
        Subject: CN=fe8d259108b83fa0d412a3db70ef7e4557d85ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:92:97:4d:6a:04:14:f6:7f:1d:6c:38:14:
                    55:c5:01:21:4f:1b:e8:92:bf:d2:9f:76:15:9b:73:
                    2d:da:fa:f8:dc:20:4d:5c:4e:42:d9:b3:ca:19:e6:
                    7e:ea:4a:82:e5:44:b3:bf:6f:a3:45:de:cf:a3:10:
                    72:23:ed:2c:9f:2e:f0:25:47:34:9c:20:cd:9a:0a:
                    59:d5:89:e6:87:9f:49:60:2c:33:d3:53:28:9b:c5:
                    f1:fd:09:5a:2e:f0:09:e6:32:18:50:fb:61:d0:27:
                    89:29:40:d4:0b:f8:52:5c:31:8e:fd:6f:16:fc:09:
                    92:aa:c0:b5:d1:ec:59:8f:a2:56:78:2d:b5:0f:fe:
                    7b:22:1a:d1:69:63:49:6d:49:09:3d:18:72:20:66:
                    64:5f:3b:63:9d:56:a7:f6:e8:f4:66:c1:f2:0b:d2:
                    90:33:cc:f2:97:f0:69:cc:69:4e:93:79:70:3e:d2:
                    f9:2c:85:b8:d0:65:a6:77:65:d9:cb:b4:dd:24:be:
                    34:ee:a1:c6:d2:b6:93:25:a2:71:bc:33:bf:9e:bc:
                    c0:32:8c:67:cf:23:fe:ef:4f:20:b5:08:17:cd:56:
                    a7:b8:a6:7e:d5:f2:aa:c2:78:54:19:3e:bb:80:7f:
                    bd:9f:9a:bd:41:7a:55:12:54:8b:aa:60:68:67:8f:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:25:91:08:B8:3F:A0:D4:12:A3:DB:70:EF:7E:45:57:D8:5A:D9
            X509v3 Authority Key Identifier:
                keyid:64:71:20:3D:CB:ED:6A:EB:62:DB:B7:98:CB:FA:5A:9B:5E:09:9C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHEgPcvtauti27eYy_pam14JnE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:95:95:0c:21:24:fe:34:14:bf:97:66:24:43:2e:0f:a4:
         94:2f:3c:33:6e:32:0b:01:d0:69:12:08:b1:54:90:31:c6:1c:
         09:2c:ed:13:3f:15:15:b0:79:6d:55:54:18:2f:62:ce:6e:4f:
         22:d8:0a:75:1e:73:b0:7b:03:bc:fc:84:ab:2c:34:89:03:54:
         16:f4:26:83:c8:b4:66:9b:df:40:49:2e:c6:3f:5b:75:00:91:
         7a:00:d6:17:24:0f:8e:8e:14:5a:04:16:29:aa:8c:bd:2f:a2:
         b7:75:ad:bf:a6:14:62:8d:1f:e9:0e:30:29:e5:cc:a0:7d:55:
         0e:9a:6b:98:5b:f7:26:3c:d0:7b:52:2c:40:5f:2f:e1:e0:74:
         cb:2f:c5:56:a4:87:95:8b:ae:56:02:f7:d2:05:43:b7:3b:fc:
         34:ce:de:3b:23:be:07:7f:8e:70:51:60:c4:33:de:3a:9b:da:
         ac:47:bf:98:2a:2a:c5:42:1b:67:db:eb:9a:59:66:f8:3c:92:
         5a:1e:07:f3:11:02:ed:1a:1a:2c:b5:81:f5:f9:61:b6:b9:11:
         35:cf:cc:9e:af:50:49:75:42:75:82:b2:44:0e:81:f0:ef:a9:
         cc:98:e2:d5:28:3b:35:e2:81:39:62:f5:88:03:41:b3:6a:49:
         ab:46:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:19:35 2026 by rpki-client