Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File:                     ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier:          KwO3it+nmdHNyHtPENZWWJrJSExDplv/G+Qoud+K9y8=
Subject key identifier:   DF:85:A9:BD:66:10:94:01:77:5E:5C:E3:00:EF:D8:1D:23:08:F5:97
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       01A0D6150EE3ECC15F8A152C6B9475C9BB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number:          09C6
Signing time:             Fri 25 Sep 2026 01:01:39 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:39 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:39 +0000
Files and hashes:         1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
                          2: 7kdDh-pEj2k42422BoX6JBW3_Ms.roa (hash: 84QvPY+D41j3++xe4cxLcvuMi2We/Q8cDVLZ9oZiJC8=)
                          3: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
                          4: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: vW4zfL+UOF+t9k5xQxr7avsEJEneQy+uDGOjwftKYyQ=)
                          5: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
                          6: ivskltFte33VewLgfli-wfOqjjY.roa (hash: o3M7ZlkH3ONuXIb7njuGbLpQCaz2xbQRxNHYLNLRYh4=)
                          7: pSFN4rwZh3g3uJxPDSWhVBSsD9o.asa (hash: PLUYa3CkiQgtgudazkMKn7OCGSMVNORfV7YJoCRScLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:15:0e:e3:ec:c1:5f:8a:15:2c:6b:94:75:c9:bb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Sep 25 01:01:39 2026 GMT
            Not After : Sep 26 01:01:39 2026 GMT
        Subject: CN=df85a9bd66109401775e5ce300efd81d2308f597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:03:6e:16:c6:a2:02:4c:c1:a5:22:f3:85:
                    58:b2:53:d0:dd:53:2d:4b:1d:66:16:ab:71:ba:0f:
                    d1:96:3a:da:36:25:4e:b3:4a:6a:3a:b8:bd:b2:62:
                    d0:59:d5:d5:e6:d1:50:99:fe:db:eb:24:74:dc:ac:
                    af:cc:64:e7:44:62:3e:7e:7b:80:23:12:a6:60:61:
                    95:72:01:1a:1b:fe:b6:87:ab:81:b6:51:a9:2c:c6:
                    c0:78:e7:71:a9:ce:b7:f5:ed:f0:19:4e:69:b6:24:
                    f1:10:4d:45:b5:5d:44:26:37:95:3d:29:39:ca:aa:
                    a0:be:25:ce:b7:97:00:97:08:5f:7a:84:1e:8c:2c:
                    90:e2:43:73:5b:5a:a6:75:2d:47:15:cd:39:fb:52:
                    b3:5e:b6:c6:9c:51:76:c5:f4:c1:cf:85:9c:a6:54:
                    4e:a9:65:75:af:28:b3:15:42:33:02:40:92:0c:3c:
                    01:ea:b9:70:36:3d:29:08:81:56:60:2c:05:3f:63:
                    02:74:59:67:d7:36:3b:35:cc:b2:09:3b:ba:bd:23:
                    07:99:51:2f:8f:7d:1f:5d:48:8e:a5:2b:cb:1b:49:
                    b2:32:0f:a7:22:db:00:39:2a:7d:34:f2:af:9d:32:
                    36:02:12:8c:48:f4:c6:cb:67:c0:55:05:4e:f4:3f:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:85:A9:BD:66:10:94:01:77:5E:5C:E3:00:EF:D8:1D:23:08:F5:97
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:43:54:f9:b0:8b:b5:72:14:8c:56:bc:2f:fa:98:ae:b2:bb:
         9c:96:a8:91:7f:91:59:75:75:4e:b5:40:96:62:4c:9c:6a:b0:
         80:78:93:93:b4:08:42:f1:a6:3e:19:68:2e:20:57:a3:3d:c5:
         17:2e:18:27:65:1f:e9:32:0d:54:37:ab:4c:52:49:c4:6b:af:
         10:45:99:77:69:cc:2e:f2:84:92:d0:9e:45:be:b6:99:ca:2f:
         57:27:5d:be:ab:ed:94:b4:93:96:83:17:68:11:2e:f3:66:38:
         91:88:3d:56:d1:02:ca:d7:e6:ec:b3:e5:9a:79:cc:de:04:89:
         2e:11:c3:1a:7b:07:46:1c:07:93:a7:43:4f:60:ff:23:fc:7e:
         0d:0c:2f:18:9b:95:d8:7e:6d:48:ff:54:cc:7f:4f:a4:69:2f:
         37:65:09:97:9d:1e:ad:97:d5:da:92:94:bd:d0:21:32:e9:34:
         c4:17:34:ea:a3:50:30:88:67:dd:03:d5:2f:72:30:ba:ab:31:
         c7:ab:e7:47:1b:a7:5b:c3:a4:17:7c:3f:dc:bb:33:9e:7b:b6:
         0d:12:b4:ba:a8:d8:00:5d:5c:2c:f5:ac:ee:31:cd:2e:20:03:
         7a:68:30:17:68:96:21:cd:a1:96:5a:b9:93:6a:35:18:67:c8:
         50:b1:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:34:29 2026 by rpki-client