Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File:                     zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier:          XXqJPBJz2/8Qd2um2pG79urfQy8GRZz7c8hv/q76Ueg=
Subject key identifier:   5D:00:78:50:AD:48:5B:54:28:8D:03:4F:43:ED:8C:92:1F:5F:8F:C6
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer:       /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial:       01A125E780A50DEAEFF67AC16BCF5615CA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number:          1A9C
Signing time:             Sat 10 Oct 2026 13:01:31 +0000
Manifest this update:     Sat 10 Oct 2026 13:01:31 +0000
Manifest next update:     Sun 11 Oct 2026 13:01:31 +0000
Files and hashes:         1: 5qgROKxHOicoj6aXRRzKoWhQEys.roa (hash: cbdLbf/a0AVWeV/g7UhTY6JncYkBe68DrZLAHz3ibQE=)
                          2: D0wGS-yddeO0xfMmRUxbHkj9wmQ.roa (hash: 1GkR1ZZ4k8rO+nd6oDot6saKoU0S85i7RRYtoQ2NVC8=)
                          3: OoheSSCa5I7EwzgFEnlfY2jnBjs.roa (hash: 4TrMNV+CUPEbrPuDX+5VWadJ22cCDdcCYltr8Dnb3+w=)
                          4: SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa (hash: uIUOOzCmCZIfAItCkWriSRWvWy1Wi25C++tLdPRufDc=)
                          5: hXDlG2G0xbowy6t6EZnHJ70Ehao.roa (hash: 3IDUKM+58lF7xSd9cxW6Agkn2PnQGt/z8nVFt8JreYU=)
                          6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: 0qcHidlB4sGvh2lQUf74w0VShBZutH0PrD8+Wmf2Jgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:e7:80:a5:0d:ea:ef:f6:7a:c1:6b:cf:56:15:ca:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
        Validity
            Not Before: Oct 10 13:01:31 2026 GMT
            Not After : Oct 11 13:01:31 2026 GMT
        Subject: CN=5d007850ad485b54288d034f43ed8c921f5f8fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:09:23:51:52:50:9c:44:9d:38:41:97:cb:
                    67:40:c4:9b:ca:2e:54:69:7a:14:2a:25:b0:05:c5:
                    de:95:a8:f1:42:9d:ac:98:df:b3:05:87:61:16:a2:
                    7b:f4:0c:ea:64:79:6f:9e:cf:b2:13:dc:6d:b6:07:
                    ee:53:f1:13:3e:64:e8:62:2b:d5:2d:ba:31:0b:66:
                    b6:f0:da:5a:3c:e8:0d:23:95:cd:d9:0c:3c:71:5d:
                    fc:50:21:2e:9f:51:77:61:18:c0:5e:99:66:58:48:
                    c0:16:59:a6:70:45:27:13:16:e0:d1:fa:44:db:1e:
                    3d:af:3f:52:f7:92:f8:30:a7:56:14:bd:90:c5:3d:
                    d0:b6:bc:68:6f:c4:88:37:f6:c1:52:0d:45:d2:d6:
                    93:e8:94:98:1d:2c:70:d6:7e:c3:f4:e4:cf:64:13:
                    11:d3:a2:f1:c6:b1:2f:7b:45:22:80:7a:ac:e8:44:
                    3d:bf:0a:a7:9f:da:b6:9b:11:a5:ff:d5:e5:b6:09:
                    e2:3f:3c:b4:15:89:48:77:0e:7a:f7:75:ee:87:e5:
                    14:79:47:13:4c:41:52:7a:ce:db:74:5f:18:84:d4:
                    a5:4c:7d:19:4c:3e:a7:5d:39:ad:29:fa:7f:4f:da:
                    10:8e:91:cc:e0:2f:56:f4:c4:7d:e2:2a:3f:07:ef:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:00:78:50:AD:48:5B:54:28:8D:03:4F:43:ED:8C:92:1F:5F:8F:C6
            X509v3 Authority Key Identifier:
                keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:44:ef:e7:6f:14:f9:74:18:88:cd:89:36:be:cc:b8:01:
         81:a9:58:41:5e:1c:7c:c2:65:b5:4f:b5:d0:e5:0f:38:9d:cf:
         13:2c:6e:fc:de:33:46:8a:45:4c:97:64:8a:a1:7e:28:c3:d8:
         40:a1:09:bc:a3:1c:b3:a6:03:5b:2a:4f:ca:f0:0f:13:28:be:
         c9:0b:7d:75:5f:2d:0e:8a:d9:80:a9:43:21:33:03:1e:ed:98:
         68:7b:8c:73:69:f2:78:e1:98:7a:37:81:5c:6b:1f:20:64:ab:
         f9:c5:8c:e4:bd:32:77:f6:50:20:69:b5:15:53:36:6a:4a:bd:
         69:9e:c3:7f:14:83:62:56:88:31:5d:4e:ef:8a:95:9d:90:4c:
         04:80:27:e7:47:c6:01:0f:db:b6:fb:55:b3:56:84:64:de:95:
         3e:1b:bc:5c:c5:a8:e9:35:2b:3a:fe:9d:4c:3f:fa:27:93:2b:
         d0:60:56:15:fc:13:b0:61:78:12:f6:ca:f4:24:39:99:0b:4d:
         25:18:28:d1:c1:1a:94:13:be:5e:7b:10:f1:ce:35:11:74:d1:
         42:99:ac:46:66:8c:41:99:6a:0c:c0:54:13:13:82:0f:48:48:
         cd:e1:68:02:a6:4d:c0:2a:95:38:4c:7b:1c:ce:84:bc:c8:db:
         90:4d:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:24:03 2026 by rpki-client