Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File:                     Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier:          3+NDr8UbwQbJLH+r/rwrvYb/yq65SAZW73BST32oGic=
Subject key identifier:   CB:AD:58:7C:0B:AB:F3:B1:77:81:FE:7C:55:0B:7F:40:C2:C1:63:24
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer:       /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial:       01A117BD81A5EBD31FD3ADF064945D746DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number:          1AE2
Signing time:             Wed 07 Oct 2026 19:00:57 +0000
Manifest this update:     Wed 07 Oct 2026 19:00:57 +0000
Manifest next update:     Thu 08 Oct 2026 19:00:57 +0000
Files and hashes:         1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
                          2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
                          3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
                          4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
                          5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
                          6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: umjwjN6gIQhlsil/sVMIZAGbInKWlpaM//tb427OrYE=)
                          7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
                          8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
                          9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:bd:81:a5:eb:d3:1f:d3:ad:f0:64:94:5d:74:6d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66df7742890173927935206a28efbf48123e787c
        Validity
            Not Before: Oct  7 19:00:57 2026 GMT
            Not After : Oct  8 19:00:57 2026 GMT
        Subject: CN=cbad587c0babf3b17781fe7c550b7f40c2c16324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:65:38:99:2a:1a:79:e8:44:7b:b7:48:fc:
                    a8:30:61:81:ab:30:41:d0:8d:57:8c:ba:c6:e2:3f:
                    42:4e:61:7b:8c:a8:f0:e5:f1:7d:1f:23:11:de:98:
                    04:69:47:ca:19:54:2a:f3:fe:a1:0a:dd:11:1a:6d:
                    07:02:2e:ec:3a:26:a6:ef:e2:fc:15:f8:fe:31:ea:
                    7b:86:c2:9b:7e:dd:12:c7:c7:00:29:56:cb:22:cc:
                    63:70:eb:dd:bd:30:2b:9d:25:7f:1e:6f:ea:8b:8c:
                    62:b5:00:a4:99:bd:48:7a:3b:ae:f6:78:21:78:27:
                    50:48:16:88:73:00:10:73:98:ba:85:99:6b:2a:43:
                    12:e2:b7:18:05:0c:47:c7:e7:ab:92:c5:21:af:9e:
                    ff:26:9a:38:5e:a3:03:31:57:cf:12:35:3e:ae:33:
                    c5:ed:1c:d2:e3:3d:30:5b:eb:d3:49:69:5d:d6:90:
                    3b:dd:79:df:ab:e9:9d:2f:37:a0:e4:57:7f:9a:d0:
                    80:c1:50:17:90:58:57:5c:47:03:e4:3d:e2:af:c3:
                    0a:3e:0d:8b:1a:57:63:f6:c0:fb:01:15:28:1a:32:
                    cb:ca:77:b0:2f:cc:f3:62:9c:ba:b7:4c:b5:8c:89:
                    b1:7c:3b:8c:ce:87:d9:b6:19:83:ff:03:d9:e3:b5:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:58:7C:0B:AB:F3:B1:77:81:FE:7C:55:0B:7F:40:C2:C1:63:24
            X509v3 Authority Key Identifier:
                keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:97:7c:92:d9:36:22:bd:fd:88:fd:c7:ec:31:fd:16:8a:a9:
         dd:f8:a2:1e:94:bc:04:71:b1:88:43:6c:ff:4d:0f:c1:10:7a:
         ad:ea:e1:43:59:19:cb:91:11:5c:61:3b:c4:e8:3d:0c:f1:32:
         c0:9a:a7:0b:0e:30:fa:f6:a6:20:9f:01:64:7a:5c:4d:75:ca:
         97:9d:01:6f:19:ab:9e:d8:3a:11:8a:ea:8e:5b:57:eb:fd:1b:
         2b:92:18:6a:53:6c:cf:7a:36:d9:8d:12:19:1d:85:2c:1e:c9:
         54:95:8c:1e:98:e0:77:f1:90:b8:2b:8e:76:97:17:a5:98:8d:
         02:99:f7:cf:8c:42:be:a8:0a:d8:4b:7f:65:59:21:e2:27:3b:
         51:9b:d5:bc:a4:e0:c3:0a:83:60:42:d2:8a:f3:81:da:c4:d5:
         2a:55:28:fa:6b:47:29:60:a5:d9:79:8d:bf:f9:d3:53:3c:96:
         3a:66:be:6d:38:7d:3e:49:0f:24:28:52:ac:7f:c1:8e:c8:6c:
         57:b7:af:a0:2a:20:da:d7:a0:55:a0:05:12:97:36:e8:8e:64:
         66:08:5d:f4:d5:50:96:a7:c4:df:75:a9:1e:43:42:97:39:25:
         08:53:d7:42:1e:a7:85:04:74:20:e6:04:ac:b8:85:df:6f:2c:
         86:ee:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:39:35 2026 by rpki-client