Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File:                     ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier:          ia8bi9FZhtCiVJssOMCFoYHoeC0GbUnM4QnVc4YL+e8=
Subject key identifier:   07:D9:66:54:63:E6:47:96:B5:34:75:C1:1D:73:AF:6E:A9:22:2D:98
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer:       /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial:       01A0DE3C6F32E8C719542EB7A766370FC3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number:          1670
Signing time:             Sat 26 Sep 2026 15:01:37 +0000
Manifest this update:     Sat 26 Sep 2026 15:01:37 +0000
Manifest next update:     Sun 27 Sep 2026 15:01:37 +0000
Files and hashes:         1: G2vY-XyuXPEnGT50VL_DR2MGs8Q.roa (hash: FvP89IRchdhDOJHirpo71l3u2H6iIX16MtsmawYXGPM=)
                          2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: ADI01IUPyPxvjnXgllDG2/Qfd37fOLWsypCpskeyRvE=)
                          3: fuEaSuaZZwj27F0xF5X2wdAUpoQ.roa (hash: YJVv+UJ0lNsjvEC6w/06kpWtvXqjhidpu4HakQMisOA=)
                          4: wBsX-GYO-aEIdD-OnXmUqDDMdy8.roa (hash: rlyJ+Y0bf63UimFOrSGhNhA9pMMoo7xQfy3KPHlY1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:3c:6f:32:e8:c7:19:54:2e:b7:a7:66:37:0f:c3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
        Validity
            Not Before: Sep 26 15:01:37 2026 GMT
            Not After : Sep 27 15:01:37 2026 GMT
        Subject: CN=07d9665463e64796b53475c11d73af6ea9222d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:54:d1:ec:14:2b:ba:ca:12:df:16:30:f2:
                    ca:96:d0:4e:0e:0c:d4:c4:c4:af:0b:6f:1f:52:89:
                    e1:6c:0d:50:32:a3:2d:85:00:05:af:b2:e5:8d:79:
                    08:90:bf:b1:2f:13:65:b3:98:e3:24:d6:61:07:f6:
                    01:37:db:03:91:e9:0f:b1:ac:b9:61:dc:19:b7:aa:
                    81:da:15:50:bb:58:50:d4:b0:c5:99:c5:b1:29:b1:
                    53:59:73:b4:c5:1e:65:92:8d:12:34:f0:7e:51:ca:
                    09:ad:e8:ba:74:88:73:78:5d:7b:76:4f:6f:7d:c4:
                    ac:92:13:1e:0c:a0:fd:12:87:8c:0d:06:e1:9c:b0:
                    16:1c:cd:9f:aa:79:ba:45:db:2c:45:e3:f7:03:72:
                    51:c6:93:81:fa:dd:4c:77:a5:81:da:dd:ee:2e:d1:
                    8c:44:9e:71:30:3b:ce:36:18:ec:b4:8f:ca:4f:55:
                    b8:1c:6e:30:da:b3:fa:a1:a5:64:a5:20:e8:87:4c:
                    bd:30:17:35:ad:36:73:c9:c5:04:ba:c5:16:37:ec:
                    a9:7b:c1:f8:7b:d1:07:b4:f4:26:ca:da:43:3b:58:
                    5e:fa:30:82:2c:10:40:6c:5c:ee:72:85:25:89:fe:
                    54:34:08:0e:cd:17:6a:e1:78:39:31:f2:11:6f:29:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D9:66:54:63:E6:47:96:B5:34:75:C1:1D:73:AF:6E:A9:22:2D:98
            X509v3 Authority Key Identifier:
                keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:62:38:8a:6f:93:ec:a3:85:df:93:5e:60:4d:ce:20:b8:
         6c:a1:bc:95:05:f9:d9:58:d1:57:2a:59:01:a7:8f:b4:9f:a4:
         9f:f5:e6:fc:f7:b8:92:be:5c:07:d3:56:a4:5a:f8:31:39:2e:
         5f:1e:11:08:72:b6:03:d0:8e:07:f3:38:e0:06:7d:41:18:93:
         09:11:a6:20:ce:7e:49:f5:55:fe:10:ea:7b:d3:3b:a4:20:1c:
         61:5c:38:85:df:3b:b3:16:2b:99:4c:20:97:23:f6:da:22:f5:
         9d:35:86:d4:46:92:6a:8d:4d:c0:5b:d6:a4:7c:53:4b:ad:0d:
         c1:b0:f3:0d:e3:b1:46:93:52:13:4b:38:f0:80:1e:ed:2d:e8:
         e9:e5:31:b6:73:0d:a0:33:37:ac:6f:56:eb:a3:f4:a1:32:16:
         f8:d3:12:bb:03:4b:b9:5e:e2:2e:5b:40:b7:a2:0a:ac:9c:3d:
         a5:42:2b:07:71:df:f7:fd:39:91:55:85:39:a7:29:99:6f:bf:
         9d:f2:49:73:93:b5:6b:c7:3e:7f:3b:7f:b1:db:bf:8b:ed:c9:
         7f:eb:25:13:33:a2:27:f4:a8:99:f6:86:09:89:19:8d:48:d3:
         51:46:0e:85:e8:61:d8:39:06:9f:e6:14:e5:0f:b6:2a:07:32:
         53:ea:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:55:17 2026 by rpki-client