Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File:                     Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier:          I+S2DwySc9+u9XelKf3eLAGrlH1xTa9igpKjkjrqt/M=
Subject key identifier:   E0:97:C8:7E:77:E8:DB:C7:4E:40:41:40:0E:56:D3:79:DA:71:AF:A7
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer:       /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial:       01A0D3159E95E35EAFED686AEE0B43049B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number:          1130
Signing time:             Thu 24 Sep 2026 11:03:24 +0000
Manifest this update:     Thu 24 Sep 2026 11:03:24 +0000
Manifest next update:     Fri 25 Sep 2026 11:03:24 +0000
Files and hashes:         1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: qQz7B5nRE5u5QSK+oL/jlfNuKl4f4q3PXgWzvG79jeM=)
                          2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:15:9e:95:e3:5e:af:ed:68:6a:ee:0b:43:04:9b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
        Validity
            Not Before: Sep 24 11:03:24 2026 GMT
            Not After : Sep 25 11:03:24 2026 GMT
        Subject: CN=e097c87e77e8dbc74e4041400e56d379da71afa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:bd:d7:1c:12:af:91:31:99:85:fe:55:28:
                    78:4a:23:7d:88:bc:5a:82:97:d3:7c:7d:9f:7c:2b:
                    17:86:40:e2:cb:01:de:ec:cc:d3:bc:46:a8:f4:bf:
                    9d:df:07:1d:51:ac:db:ce:7f:42:d8:49:16:b6:81:
                    31:91:29:d3:0e:12:52:0c:d6:0e:8c:db:c9:fd:de:
                    d3:90:19:fe:d4:d6:32:14:ca:3d:ad:0e:6e:e3:1b:
                    90:f4:61:14:5a:d6:5f:cd:c0:fa:01:b5:51:73:61:
                    54:91:da:5f:27:00:32:6e:9b:10:0c:4d:bf:80:8e:
                    21:da:96:da:37:a8:1c:e0:73:01:55:ca:1a:dd:d7:
                    63:2c:f0:dc:51:e4:3c:aa:1e:f9:e1:99:1d:9a:c5:
                    72:82:c9:6b:bd:6c:ec:15:2c:c0:4f:31:b9:3b:88:
                    59:78:51:d5:49:b6:87:e2:2f:11:cd:42:b4:44:7a:
                    72:0f:1d:bc:04:95:1a:82:ed:b4:cb:fe:5c:45:93:
                    53:67:eb:78:1e:91:34:a2:e1:ca:c6:8e:1c:ed:0b:
                    74:9f:1f:3c:62:53:88:94:56:68:7b:b0:42:85:76:
                    38:e8:5f:10:fa:5a:5d:45:55:ad:76:e3:6f:ad:b3:
                    33:58:ca:ec:ef:58:95:c8:57:29:ec:57:ab:cf:7c:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:C8:7E:77:E8:DB:C7:4E:40:41:40:0E:56:D3:79:DA:71:AF:A7
            X509v3 Authority Key Identifier:
                keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:35:7e:ea:95:3a:52:76:a4:b2:fd:de:0c:96:fe:f1:6b:97:
         b1:d6:68:30:87:6f:1d:3e:0d:d1:be:e4:2b:16:da:45:5e:3f:
         92:e1:23:66:07:40:ea:62:f4:97:ed:14:bc:eb:0e:dc:90:bb:
         23:1b:be:a2:c1:39:28:6e:bd:ca:ce:97:ba:5c:50:7b:3e:13:
         1a:c8:90:bc:04:69:a0:84:58:24:04:50:97:31:0f:b9:9e:16:
         55:68:3e:89:f3:75:47:7f:f7:db:c9:12:7c:a6:22:a7:d4:8b:
         34:7f:99:23:2f:a3:1f:27:65:38:99:3e:b4:77:1b:28:df:63:
         f5:ec:40:24:ab:14:f9:1a:ff:32:6f:26:c8:52:2a:c2:9a:8c:
         c4:eb:75:3b:79:ee:a1:16:a5:ff:31:82:99:9e:0f:5b:d6:2e:
         b3:93:d4:0b:c2:18:66:5e:8e:31:33:2f:e6:e9:03:f6:88:16:
         e6:9a:97:34:de:5a:10:c0:a6:e6:f4:01:ec:53:67:c6:b1:2a:
         d1:52:f1:b3:74:68:3d:f2:0c:41:7f:4d:3b:93:b2:dc:d5:01:
         59:35:62:ca:2a:ef:d8:f2:c7:d7:3c:dd:25:cb:5b:3f:fc:02:
         40:8f:49:72:6f:e0:d4:81:2c:44:34:b6:37:e9:2e:d4:61:00:
         7f:10:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:42:23 2026 by rpki-client