Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File:                     zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier:          043rtLU22Sh3106k5eZSZt0PwWk2L7FpQlyszfkLU+U=
Subject key identifier:   06:EB:A0:A0:4B:7C:3F:B9:23:21:77:E0:6F:E6:07:19:08:EB:F1:FB
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer:       /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial:       01A0C5C553C51D125023585228425A29D0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number:          10C4
Signing time:             Mon 21 Sep 2026 21:00:38 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:38 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:38 +0000
Files and hashes:         1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
                          2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: 0y5mFOviEePKfo9ohFyXKsOslaoomVIURNC2uMKUXxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:53:c5:1d:12:50:23:58:52:28:42:5a:29:d0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
        Validity
            Not Before: Sep 21 21:00:38 2026 GMT
            Not After : Sep 22 21:00:38 2026 GMT
        Subject: CN=06eba0a04b7c3fb9232177e06fe6071908ebf1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:40:84:da:b1:a5:4b:d3:71:87:b5:3f:b6:
                    68:79:f1:1f:10:08:45:09:c5:45:2b:62:81:7d:0c:
                    8e:3c:ed:46:1e:94:31:b2:4a:df:ef:d2:ae:f5:94:
                    cb:b9:b6:b8:f7:9d:76:b8:9b:ae:4e:61:61:11:66:
                    3a:c7:88:b0:3e:30:5b:cc:75:ec:17:c5:ae:33:20:
                    69:3e:33:82:5b:28:97:a1:9d:c6:1e:9f:1d:21:35:
                    d2:e8:39:36:b7:db:05:70:b5:d5:83:f4:4d:0b:2c:
                    80:6a:73:ee:f5:ec:ac:68:28:b2:a6:c1:a9:34:10:
                    3f:2b:24:c6:61:8e:d5:1e:ba:23:e4:ca:7b:ff:dd:
                    7e:e9:30:a9:15:b3:f8:f6:16:4c:81:10:05:65:25:
                    ea:f8:6d:7f:53:c9:07:52:ee:86:a4:64:20:4c:16:
                    ed:7b:21:67:7a:dd:3a:4d:52:c9:dd:d6:9b:7c:5b:
                    be:70:b5:f5:4f:65:95:63:1f:7d:36:9c:2f:2f:bf:
                    5d:ba:ad:72:ed:85:58:0d:ad:ac:75:74:af:dc:2f:
                    08:cb:1f:c0:10:30:4a:31:f9:01:4d:b3:a5:e5:47:
                    40:91:82:17:35:d5:a4:5d:b4:5a:77:f7:75:91:06:
                    3f:4f:67:d7:cb:79:f8:a6:a1:e1:9e:7e:b4:f1:18:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EB:A0:A0:4B:7C:3F:B9:23:21:77:E0:6F:E6:07:19:08:EB:F1:FB
            X509v3 Authority Key Identifier:
                keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:22:f4:a9:88:4f:0f:f5:4f:0a:7f:60:f2:53:3e:e9:31:
         82:c2:a8:9e:13:61:27:54:d8:a5:fe:fc:f7:a3:32:57:0a:da:
         73:17:5c:f5:0f:5e:1a:d1:b5:50:33:ab:0c:fd:93:6b:b8:30:
         61:80:90:02:29:26:1e:bf:a0:0b:e9:c4:5b:c6:c2:cc:2c:ad:
         f6:ad:25:76:36:f2:3e:dc:fd:21:2c:aa:c6:2c:4f:38:ba:16:
         fd:e7:9f:c4:1f:34:ad:fe:21:06:ce:59:9b:8e:82:4e:c8:c5:
         f7:83:b2:b4:b6:32:ea:e1:2d:f6:1a:c6:fe:5b:5c:2c:5c:b0:
         ed:f5:dc:61:07:8c:ff:d5:a9:1d:18:b4:2e:4f:de:b6:ce:46:
         61:6f:46:db:bc:8c:ab:12:11:9e:a4:16:69:56:89:07:6b:2f:
         89:35:61:f0:12:18:40:e6:2a:96:22:91:a4:90:b0:cb:7d:72:
         f1:91:08:90:62:b3:73:48:58:3f:50:b8:0a:03:87:e3:d8:c3:
         c0:1e:7a:cd:c0:b6:b5:f6:b8:55:36:cc:27:34:6f:d7:e9:a6:
         40:05:66:1b:26:a6:55:a5:fe:fb:98:c2:f1:d7:61:25:a3:ad:
         f1:14:1c:37:1b:25:df:ff:68:b2:8e:87:44:6e:6f:7d:aa:34:
         e3:e7:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:05 2026 by rpki-client