Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File:                     1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier:          ztGxykmcwE/MVZddMPjNUju7XotigH4nHMGN+r1bIXY=
Subject key identifier:   7C:E1:38:80:3D:D6:2B:03:52:16:ED:C6:31:EF:5C:85:15:67:20:43
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer:       /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial:       01A0C40DF082BA7E00B88D09AB644BEDFDDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number:          115C
Signing time:             Mon 21 Sep 2026 13:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:42 +0000
Files and hashes:         1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: rIhkoeRWJag2EXcJzYN2euORVUx3mCo18IJYg7kviOs=)
                          2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:f0:82:ba:7e:00:b8:8d:09:ab:64:4b:ed:fd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
        Validity
            Not Before: Sep 21 13:00:42 2026 GMT
            Not After : Sep 22 13:00:42 2026 GMT
        Subject: CN=7ce138803dd62b035216edc631ef5c8515672043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:6e:d1:5a:7c:7e:b3:ef:cb:8c:20:db:93:
                    6c:1d:46:7a:9a:95:d7:54:bf:da:9e:79:c0:e5:ec:
                    2e:ee:fd:de:70:3d:63:1a:bc:4f:9b:ca:6d:53:f4:
                    f4:6c:b5:89:93:e3:ca:5c:d9:c3:9d:6b:cf:f3:dc:
                    41:93:b2:e3:00:cb:b3:f9:a9:d7:73:04:49:94:86:
                    b1:e8:a3:2b:3b:a6:41:a0:04:f9:a8:d3:43:69:bf:
                    8e:78:1a:2b:fc:8d:ca:5f:44:2a:9d:f3:0b:76:cf:
                    39:10:e9:42:5d:d5:c9:5d:f7:bc:7b:b2:31:b0:36:
                    46:04:56:a9:40:60:0d:1b:c8:46:06:b3:39:f8:2a:
                    bf:9b:24:2e:26:ac:b8:3d:16:70:35:e9:fe:35:15:
                    57:fc:c4:aa:f5:70:85:e1:8b:6d:20:0e:f7:25:c5:
                    ae:86:58:60:c7:6f:6b:72:ad:53:9e:2d:34:ba:3b:
                    3b:e1:2b:bc:ea:4b:e3:87:96:c6:d7:0a:9b:91:ab:
                    f9:42:d6:79:0f:4e:9f:65:39:70:a7:4c:29:3d:ac:
                    ab:79:5f:12:d0:a7:a8:3c:86:44:84:83:65:eb:43:
                    ed:20:77:58:a8:4a:5e:9e:ad:9f:c8:60:e6:22:dc:
                    b0:c1:ac:31:0b:e0:d9:60:65:3f:c0:90:03:6a:48:
                    01:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E1:38:80:3D:D6:2B:03:52:16:ED:C6:31:EF:5C:85:15:67:20:43
            X509v3 Authority Key Identifier:
                keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:82:d9:f8:8b:8f:0e:2d:6c:99:fc:6c:12:f9:08:d3:b1:
         f6:b6:27:b1:1a:ef:58:0e:5c:d9:79:c6:64:d2:c2:bc:f1:9c:
         f5:fd:e9:1c:df:d4:39:bb:1e:b6:2e:58:ad:95:36:01:d0:3b:
         0c:e1:f4:48:37:18:35:58:69:7c:59:f2:2c:fe:07:1e:e6:74:
         56:42:a9:7b:18:a8:d8:45:fa:b3:70:da:cc:c5:44:a8:c5:8a:
         c6:69:45:90:ad:cc:b7:f4:76:95:93:e3:00:fb:94:68:7e:45:
         84:ea:1a:53:e9:1f:50:ce:eb:30:3a:ca:52:4b:a6:e2:16:a2:
         32:ce:29:c8:aa:dd:e9:b7:f5:0a:e3:e9:10:92:cd:3d:27:88:
         de:80:ba:31:68:85:d3:7e:1d:1a:5b:d5:62:a2:f3:3f:3d:7c:
         59:88:8b:86:62:bd:7d:49:e0:78:36:04:4c:96:32:ad:93:4c:
         4c:ae:d8:5d:24:fd:df:3b:47:86:3e:e5:e1:ad:c4:e5:ec:fb:
         0c:d9:87:cb:9d:02:c8:b1:34:46:c7:4c:97:ad:0a:39:72:a2:
         e6:b9:b6:2f:4b:9f:c0:64:4b:f5:c2:93:e1:47:23:b0:a8:62:
         4c:aa:a9:08:c3:11:df:3d:27:d5:7a:4d:1a:f2:1e:78:ad:52:
         d2:74:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:58:36 2026 by rpki-client