Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          485bg5UpAfITqbqh5xOxhSPNBPBxvzBk3owARk5OxTg=
Subject key identifier:   24:F5:2A:DE:AA:B5:A6:7D:D5:59:BE:81:7C:7F:5A:75:B2:0D:4D:F7
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       01A0D64C576B98187F69CA8F56183670A037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          0A9D
Signing time:             Fri 25 Sep 2026 02:02:02 +0000
Manifest this update:     Fri 25 Sep 2026 02:02:02 +0000
Manifest next update:     Sat 26 Sep 2026 02:02:02 +0000
Files and hashes:         1: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          2: Otz-lRLGypvf7TIwVms5jHBwxYQ.roa (hash: DTvEpHl+5nUpwx5mYYuodxVy4t8FUL7YR0GMpNyL6AA=)
                          3: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          4: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: 6sH5ZuY0J5DGXp6OykkhUmvvH+OdT0aigJPXgCI3omU=)
                          5: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:57:6b:98:18:7f:69:ca:8f:56:18:36:70:a0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Sep 25 02:02:02 2026 GMT
            Not After : Sep 26 02:02:02 2026 GMT
        Subject: CN=24f52adeaab5a67dd559be817c7f5a75b20d4df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:66:22:d1:1d:95:67:f4:83:bd:b5:e1:07:6d:
                    98:a1:19:39:33:f9:fe:a4:53:b9:88:68:8e:7d:8d:
                    ec:5a:ad:bf:c6:c1:7c:fb:b3:88:6e:30:d6:1b:d6:
                    9f:fa:da:66:1b:df:9c:bb:99:13:fe:09:72:ae:58:
                    56:2d:2a:2b:e0:45:bd:28:fc:ce:b3:1c:b8:00:36:
                    c6:dc:0c:c0:23:ad:5e:88:9b:9d:f0:f0:ba:68:3c:
                    1b:90:3c:a9:e0:6b:c2:a5:99:32:27:96:ce:67:1b:
                    df:30:bf:6e:c1:c0:fe:30:c9:42:d0:1b:53:78:66:
                    27:84:69:dd:c9:07:e2:8c:8f:10:41:a7:a6:8a:e5:
                    63:07:76:52:6d:ac:91:38:4d:b8:01:b6:a0:ed:a0:
                    c4:2f:4e:3d:75:cd:ff:c2:1a:43:d0:b4:9b:18:d9:
                    1f:c2:95:66:80:c0:eb:12:c8:8e:dd:d5:a6:de:1c:
                    28:8e:8a:61:51:04:45:dc:99:ac:f4:3d:8c:3e:c7:
                    1a:b7:08:82:ec:45:03:85:56:e0:91:b4:cd:55:bd:
                    a1:93:d3:49:34:3e:0b:77:a0:10:f5:9a:b6:c9:14:
                    f8:21:56:77:1c:21:97:f1:2b:d0:9f:49:41:45:2e:
                    44:84:0b:aa:02:35:df:bb:78:10:31:78:57:c4:4a:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:2A:DE:AA:B5:A6:7D:D5:59:BE:81:7C:7F:5A:75:B2:0D:4D:F7
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1e:d6:90:c8:87:2a:1c:67:c3:ba:6f:cc:26:f2:85:b1:4b:
         04:90:33:9c:43:5d:f1:89:cf:d2:ff:e4:16:c2:c7:33:d5:ad:
         64:08:34:30:11:86:5d:57:fc:5c:b5:13:d9:b2:4e:66:e8:16:
         63:ee:2f:15:e7:47:fe:c3:7a:4c:0c:cf:5f:3d:84:28:44:59:
         33:87:51:5d:7f:1c:c8:86:40:3b:57:e5:2a:98:24:51:f4:35:
         c4:48:ab:17:98:ec:58:c0:e6:a1:c8:31:ac:a0:3d:07:b1:0f:
         9d:ef:f8:6a:ed:f1:44:63:87:74:51:8f:89:b1:a4:80:c7:aa:
         7d:5d:f3:ea:5e:2a:ee:ed:16:be:cd:0d:51:b3:03:41:8a:7c:
         55:9f:5f:32:cc:20:6f:8a:2e:35:c6:62:c7:84:15:08:97:81:
         e0:69:98:52:0e:23:84:e0:05:f1:a5:19:66:48:4a:ee:7a:40:
         b5:4b:20:50:9a:28:22:ca:3b:62:06:04:7f:82:c3:fc:7a:72:
         ad:7c:f3:a9:06:a0:a7:18:50:6f:b3:30:ef:92:d7:41:f5:5d:
         54:9a:44:e2:af:c4:e2:c5:28:dc:09:54:62:b4:af:5e:ca:69:
         a8:08:02:cc:5e:d2:e9:f5:a2:6d:6a:09:86:f7:c7:15:dc:fe:
         14:19:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:13:08 2026 by rpki-client