Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File:                     Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier:          4OPYf8eBRDhsWIQqLKQWJVDa2kf4xMDCZq6jUYNKzo4=
Subject key identifier:   CA:AC:E6:93:71:50:A4:C3:7B:83:DB:0E:AB:A4:76:01:B8:6A:72:BF
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer:       /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial:       01A1250C10086A993B11170B1B72203DC1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number:          1A9B
Signing time:             Sat 10 Oct 2026 09:01:49 +0000
Manifest this update:     Sat 10 Oct 2026 09:01:49 +0000
Manifest next update:     Sun 11 Oct 2026 09:01:49 +0000
Files and hashes:         1: Z7YKoT2uZ4toIphTGHeS29211HY.roa (hash: IVtzdq6W6e4HPrHbXyquHCQIRite7QNBD3zP/ThGue4=)
                          2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: 8CqX0ezLBebqjljL9MKQjwIitV9wgX5sELnCUrCfIik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 09:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0c:10:08:6a:99:3b:11:17:0b:1b:72:20:3d:c1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
        Validity
            Not Before: Oct 10 09:01:49 2026 GMT
            Not After : Oct 11 09:01:49 2026 GMT
        Subject: CN=caace6937150a4c37b83db0eaba47601b86a72bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:c9:0f:6c:9d:2d:89:be:80:6d:0b:b9:3a:
                    43:ba:85:a2:a1:f0:8b:79:53:c9:7e:cf:70:43:37:
                    3e:73:fe:0b:10:95:7b:1d:d6:77:59:5f:06:d4:99:
                    c2:67:2a:f1:f2:b8:97:74:6c:b1:68:1a:4c:2b:a6:
                    d6:c5:09:20:ef:a3:6b:c8:73:ed:0a:ac:82:68:eb:
                    72:24:5b:fb:a6:8d:af:b4:62:8b:3b:d4:08:5b:8d:
                    fa:e9:d3:4c:16:3e:0d:e9:af:fe:7d:0b:57:ed:84:
                    86:e6:eb:b6:3e:7d:46:ca:fd:88:91:30:cd:4e:09:
                    ff:03:a9:ea:ef:71:1b:b5:a5:59:cc:a1:8b:2c:b1:
                    b6:4c:23:c5:00:5b:46:be:88:94:57:95:48:70:80:
                    75:56:31:f5:cd:b9:3e:09:10:34:96:e3:f3:da:06:
                    05:d8:d4:8f:66:6d:93:d5:13:6e:d3:4f:aa:6f:d8:
                    12:ac:b5:7e:aa:3c:f0:08:ae:c3:0f:b8:4f:b8:81:
                    90:1e:30:61:44:31:38:98:c5:18:93:0d:e9:af:f5:
                    54:4d:8d:21:ef:12:9f:e9:8d:99:1c:7c:d2:30:a1:
                    39:70:05:28:b5:7c:ae:cb:cc:26:ae:67:fb:62:d8:
                    a0:f8:df:89:70:66:26:5b:32:34:cf:b6:37:99:e3:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:E6:93:71:50:A4:C3:7B:83:DB:0E:AB:A4:76:01:B8:6A:72:BF
            X509v3 Authority Key Identifier:
                keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f2:f2:ef:f3:6a:7b:35:54:39:63:92:8e:1f:9d:53:7e:b2:
         3c:d5:33:44:2b:68:c5:d5:3b:45:08:c6:7a:3b:d4:c3:f2:53:
         46:d6:36:55:c2:91:4d:32:36:5d:8d:4d:0c:7f:a7:03:a6:6d:
         2f:6b:c9:08:8f:50:69:0c:2e:9b:43:29:ab:25:f1:e4:32:af:
         47:63:6a:6f:5a:9b:21:f2:5f:c6:d0:fa:17:5c:16:ba:ce:39:
         53:bf:7a:d7:3a:20:bb:4d:cb:b0:1d:7a:ca:a5:33:ba:c7:8d:
         67:d3:7c:3d:fb:3f:9d:b5:32:50:d9:85:75:bf:cf:b8:c5:0b:
         3e:27:6f:9c:53:fd:80:92:4d:19:f9:33:f7:d4:38:94:21:3a:
         ad:89:65:da:38:59:5c:9f:b0:43:8b:e4:06:08:24:73:e2:7b:
         22:28:b7:d3:be:59:2f:51:d7:cc:ad:c0:23:5f:ba:3e:f5:93:
         f5:b6:7e:9a:79:ec:04:84:a4:1b:85:0d:30:b8:80:3b:c6:4e:
         90:bf:ef:c1:0d:c9:f0:4c:bd:75:dd:91:6f:b8:8d:6b:64:a1:
         04:59:fe:64:ed:17:ce:e4:b0:c2:59:c3:ff:02:55:b7:a7:45:
         7f:d1:32:d7:30:a5:a5:57:6b:c9:5f:d6:85:cc:f6:ac:3f:1a:
         ae:9e:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:01:06 2026 by rpki-client