Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          I2IVsNfgV2TklDEPnr1myUWDSLZ4ybxgCukoY5Mdg9k=
Subject key identifier:   BE:12:8C:EA:CB:12:71:92:2C:C3:CF:32:DF:0C:BE:8C:6E:16:EF:03
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       01A0D45D5CF6A792BD49D01C8E702C7EAEF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          1348
Signing time:             Thu 24 Sep 2026 17:01:23 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:23 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:23 +0000
Files and hashes:         1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
                          2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: 3QtsJ4HVFvl9kY3vrg1LXuTqm4BiHe6K+7kLs+dnMcI=)
                          3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:5c:f6:a7:92:bd:49:d0:1c:8e:70:2c:7e:ae:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: Sep 24 17:01:23 2026 GMT
            Not After : Sep 25 17:01:23 2026 GMT
        Subject: CN=be128ceacb1271922cc3cf32df0cbe8c6e16ef03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:ec:02:5c:4c:42:5a:d9:2e:5d:9e:a0:dc:
                    67:70:11:85:a0:da:c6:19:1e:ca:0e:1e:b4:70:da:
                    c2:6c:24:ad:a5:f8:bb:d8:38:45:b1:dc:b4:e8:21:
                    55:6f:d5:5f:a4:bf:90:85:43:ba:5a:9c:6f:04:ac:
                    27:ff:b2:e9:65:86:02:d4:87:c3:7e:98:59:c9:c6:
                    55:2e:a1:49:c9:d5:3a:4d:46:79:50:88:23:6e:f5:
                    72:03:43:4a:2a:ec:e0:db:99:f6:75:dc:2c:0f:94:
                    79:59:ad:d4:d4:f0:7a:f5:3c:05:bf:41:da:4d:a8:
                    64:78:cc:d9:1e:fa:89:45:56:69:50:24:05:3c:24:
                    db:79:18:00:ce:57:19:73:85:ac:46:c2:82:20:ee:
                    a7:5b:6c:f9:4a:5e:57:6b:25:61:83:7a:9e:0f:62:
                    35:5d:18:f1:1b:87:64:65:cc:db:ce:52:85:a4:8b:
                    3c:16:e4:28:fc:1a:9d:55:10:cf:52:0e:56:8d:d1:
                    d2:4c:c3:b8:d3:64:c9:ae:f6:1d:de:ae:10:61:b1:
                    10:cb:13:c3:80:2d:cc:09:83:b7:dc:8c:9a:6c:0c:
                    17:b4:93:f9:f1:99:08:a0:5f:7b:6c:2a:fa:9a:3a:
                    52:36:67:ae:7f:c9:ed:7a:2f:36:ca:e2:01:c7:b2:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:12:8C:EA:CB:12:71:92:2C:C3:CF:32:DF:0C:BE:8C:6E:16:EF:03
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:e3:49:d6:79:27:bf:1d:af:f9:c5:69:83:f4:ee:f5:d8:
         88:8f:a9:ff:d3:13:7b:a8:1a:d1:61:2e:fb:53:a7:06:5b:19:
         77:53:d8:2e:9a:6c:e4:0c:a7:96:cb:41:4f:51:e0:b1:1c:28:
         a1:cd:7a:33:de:d0:c5:31:90:6e:8f:74:01:83:c3:38:a2:8c:
         21:00:72:45:e7:85:0c:3b:27:f2:e1:e9:e4:b0:a7:e4:41:20:
         c0:1a:50:bd:a4:4d:5b:43:44:44:b6:1f:ea:d1:fb:01:6f:79:
         5e:2a:2f:01:39:6e:ec:6d:92:72:e1:49:4f:81:c9:df:e4:25:
         ee:4f:fd:d3:4b:35:26:80:4f:ae:f1:51:a3:e5:79:6c:64:51:
         38:a3:c8:9b:ae:50:2c:5d:20:07:4c:8e:3d:89:1a:b7:6f:4b:
         b7:39:e9:ea:45:45:ab:3e:78:47:b8:5c:74:d9:bc:ed:36:96:
         fe:d6:fb:59:05:4b:da:48:81:bd:da:b4:7d:79:f6:75:ba:c5:
         0c:50:8b:04:1f:db:bf:ce:f8:69:de:b4:e8:73:28:0b:8f:8b:
         bf:98:d9:6f:ef:2c:3b:dd:21:a7:d2:cf:94:2c:ca:ce:f9:4a:
         41:83:b4:56:14:13:94:16:51:d1:a1:37:b5:f5:a2:b5:0f:10:
         2d:2e:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:59:29 2026 by rpki-client