Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          3ChYiaz9wYe/kezRslIdMrezvA51lECiaG7/kTEZsCE=
Subject key identifier:   48:C4:DE:3F:5F:87:BD:76:CA:9C:B3:E9:76:52:52:39:82:A9:3D:4B
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       01A0E92E173AD80B3B40B61D221D5C0053A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          1A7D
Signing time:             Mon 28 Sep 2026 18:01:46 +0000
Manifest this update:     Mon 28 Sep 2026 18:01:46 +0000
Manifest next update:     Tue 29 Sep 2026 18:01:46 +0000
Files and hashes:         1: Jn62z3mXSy1gXL7OU0u8UHUvETk.roa (hash: kRvtxB45lBHtSWkwsN/FFj92E84r6pWGnn92gwu5MRk=)
                          2: Q0PF7iRFV7hzJhLHDcJ_uhfh7z8.roa (hash: jNqkyMhlcRIUSCAW+fYK+zrtm4rQVOjjxMdq67NIAq0=)
                          3: ZZTFmfbdMQ6snkjprGV8Heyn37E.roa (hash: lKKyBMRX1vPM6siDs8lqYfEIzSGcaMWz+LcZio2IfVk=)
                          4: ni888ovsC-BTLPerI4QeQ0fgZFE.roa (hash: 7VDMLDKY6Y0XMf/x1rrlPpTjJxlLSO2U8m99nvv5wFc=)
                          5: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: xLrQeNXw5PZttDiKR1pLdIg6Bz3VF5oiW60AMsWgvM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:2e:17:3a:d8:0b:3b:40:b6:1d:22:1d:5c:00:53:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: Sep 28 18:01:46 2026 GMT
            Not After : Sep 29 18:01:46 2026 GMT
        Subject: CN=48c4de3f5f87bd76ca9cb3e97652523982a93d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:e0:2b:0b:2b:3e:2f:82:20:ae:97:7a:1e:
                    28:ad:a3:4f:8a:99:3b:e7:55:64:31:bd:0d:68:99:
                    08:a2:2c:b9:de:13:2d:76:e5:57:11:86:77:9e:ad:
                    f0:da:05:dc:cc:df:8d:07:ce:25:42:d7:c9:04:f4:
                    2a:f0:a3:ea:81:a0:22:3a:bf:c1:c7:43:2a:22:05:
                    61:a8:d2:2c:db:3b:fb:b7:55:28:c8:4c:8a:c8:d8:
                    84:3c:5e:d0:6f:9e:24:ef:41:c2:95:8f:05:37:d0:
                    3d:a7:6d:5e:5e:1e:b8:2f:2f:09:90:40:98:95:ea:
                    21:7e:c9:4f:cd:d4:29:76:f9:fb:40:d8:ff:59:12:
                    52:a2:24:63:4c:9a:71:22:ab:a0:b9:51:ed:78:80:
                    98:02:7d:5e:f4:b4:43:95:15:00:ee:69:31:60:10:
                    51:7b:49:e7:b9:5e:d3:06:8d:05:43:2b:26:61:3a:
                    b4:c0:39:8c:33:01:15:15:51:32:3c:8f:1e:2b:63:
                    d2:9e:e0:5e:6f:ec:29:02:d7:22:fd:46:5d:6e:f3:
                    3d:ba:7f:76:d4:80:ee:6d:bb:57:82:6c:c3:c4:e4:
                    d2:a5:09:94:77:dd:8c:1c:ea:c6:ac:cb:64:c8:96:
                    ec:53:08:c4:a2:87:37:36:0c:f2:38:18:1b:4c:03:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C4:DE:3F:5F:87:BD:76:CA:9C:B3:E9:76:52:52:39:82:A9:3D:4B
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:27:8f:91:40:71:67:bc:10:71:51:de:bd:19:91:4b:5a:45:
         ba:84:02:8d:fd:f2:e9:f6:d7:31:3e:23:8c:29:cb:b4:98:8e:
         69:6c:31:24:b8:de:07:c7:5a:d7:cd:5d:69:89:79:ec:84:4c:
         bd:8e:a4:ab:a8:3e:b4:22:96:45:f3:d3:39:ea:a0:80:b9:6f:
         a9:4a:57:3d:7e:96:4f:f5:4a:19:b0:c9:9d:b2:98:fe:11:97:
         3f:9c:2e:8a:a4:d3:ab:c0:be:5c:b1:71:44:6b:69:bd:13:7e:
         7c:4d:61:e4:67:52:d2:b0:70:84:d6:d6:ac:fa:49:5d:fd:0b:
         6e:08:ca:02:bd:3f:f2:bc:bb:0e:a2:09:a9:6a:77:f1:e2:d3:
         b0:a4:4d:b6:23:94:8c:9f:59:0a:f2:db:49:53:35:24:b9:bd:
         81:d1:4a:74:77:1d:33:83:d7:b9:9f:62:ce:f4:23:0b:27:7e:
         9f:55:1f:df:e7:2d:0b:32:89:64:55:61:0b:26:cb:cf:5c:33:
         0c:e9:ee:a1:cd:06:b1:80:91:c5:2d:c9:70:64:20:13:3a:8b:
         56:8a:03:43:1f:86:c8:64:d9:4b:f8:e5:be:69:0a:aa:65:87:
         68:ef:f0:ed:44:2d:48:ba:07:1e:03:93:fe:de:3b:a9:da:24:
         97:38:bf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:12:30 2026 by rpki-client