Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File:                     mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier:          nAnW5DnKST11egsO7+VEq5FLWZ+PFnkVGowsGxU4Xqg=
Subject key identifier:   83:48:0B:23:73:CF:45:14:56:F9:26:41:E8:37:38:BD:9B:15:8A:7B
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer:       /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial:       01A0C4E97B1D2216F09113E3C29BC2F649F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number:          1A6A
Signing time:             Mon 21 Sep 2026 17:00:30 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:30 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:30 +0000
Files and hashes:         1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
                          2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
                          3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: uIbsGUhSz9ZyYpPsfGDB8Diki/q2uNfRavOLgXGwC7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:7b:1d:22:16:f0:91:13:e3:c2:9b:c2:f6:49:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
        Validity
            Not Before: Sep 21 17:00:30 2026 GMT
            Not After : Sep 22 17:00:30 2026 GMT
        Subject: CN=83480b2373cf451456f92641e83738bd9b158a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:c5:30:e4:91:5e:24:ed:64:79:4b:74:54:
                    46:ec:c8:ba:cf:f7:5a:47:b8:93:19:a5:8a:f9:4c:
                    f5:53:a0:61:60:79:00:ec:82:95:3d:e6:08:1d:f1:
                    2c:af:1a:c3:15:40:ff:91:1f:8f:16:07:07:a1:b8:
                    4b:f9:1a:76:ac:3d:d7:9e:4f:63:06:2e:f0:b2:1d:
                    62:d1:7d:4c:76:35:5e:28:0c:3d:10:fd:be:bf:a4:
                    dd:5f:5b:8a:aa:77:49:49:6d:a4:f0:ac:26:4d:ec:
                    24:58:37:71:a8:32:3b:17:36:fd:6a:0e:c1:18:71:
                    b8:bf:0c:23:fe:11:cd:a0:b3:b2:f2:b9:71:20:95:
                    86:8c:87:93:52:ee:66:a4:84:42:0c:13:6a:a1:20:
                    3e:b0:af:8c:60:8a:62:33:b1:43:42:43:a4:ad:e9:
                    0b:de:10:3c:e1:be:55:45:b3:95:14:7f:b3:4d:2d:
                    9d:6c:30:a5:11:f9:f3:d3:0f:b3:02:b0:47:e7:06:
                    4d:4a:13:3f:f3:3a:20:ac:14:2e:bc:0e:ef:89:ae:
                    b8:9c:ea:2b:b4:c7:b8:58:85:83:86:2e:5b:00:ad:
                    68:96:47:e4:88:1b:03:d5:3a:38:76:90:d9:3f:8f:
                    8d:74:90:24:fa:e9:70:ca:36:39:a9:fc:f1:c5:ad:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:0B:23:73:CF:45:14:56:F9:26:41:E8:37:38:BD:9B:15:8A:7B
            X509v3 Authority Key Identifier:
                keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:06:25:5a:ff:aa:48:79:1a:4c:c3:5d:c3:1a:3d:0b:47:
         c3:c2:fd:7c:70:c7:d1:ef:45:bd:95:36:46:c9:45:31:1a:3f:
         2a:81:93:23:47:55:6e:97:b3:4b:0f:bf:6a:8c:68:ed:90:5e:
         e1:ab:b9:1a:23:a9:be:48:b0:88:28:4d:f4:6e:a3:c5:c5:95:
         05:65:fa:00:f2:7c:02:ec:39:23:a3:35:c8:45:d9:a8:2b:50:
         8f:90:90:8d:2a:5b:7e:b7:38:10:93:b8:59:3d:02:ee:8c:4f:
         b2:e0:42:6e:28:72:02:d2:db:8f:0c:e5:85:49:70:bf:8b:4f:
         e3:4b:c0:5d:0b:18:a0:03:d6:e5:90:02:5c:1e:0c:7a:05:c8:
         b9:f4:3c:60:5c:01:a7:f6:a7:dc:a3:ef:55:01:8a:34:b2:95:
         aa:0b:cb:d8:cc:1e:76:ca:8c:46:96:74:93:47:a7:c0:df:0e:
         23:0f:6d:f4:86:d4:ab:6b:f1:ac:82:b4:4f:0e:9d:b4:4d:15:
         1f:67:b8:73:aa:9f:02:31:23:d4:f8:e4:82:89:b4:59:04:db:
         54:52:51:28:26:4a:b3:bd:20:60:af:17:ea:49:73:30:87:55:
         0f:0e:b7:69:3e:06:78:a3:d4:ed:51:09:f6:72:30:12:6a:d2:
         1b:cb:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:10 2026 by rpki-client