Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File:                     z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier:          phMI0IPptKph2Go3LW9hKgR0/MzbwmYwHD9VOPF+eCg=
Subject key identifier:   27:7F:7C:93:38:F8:8D:4E:67:01:AD:D4:0C:33:61:B1:78:4C:E8:0E
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer:       /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial:       01A0BDD50CAF39AED0A73A7A4540750557CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number:          0963
Signing time:             Sun 20 Sep 2026 08:00:51 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:51 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:51 +0000
Files and hashes:         1: ARREJkvwymf2JqV3QtYgcvvvBYk.asa (hash: IdgT4jYwa51CjWUlreSvK7wpG/o174TADgIlc+b9O+c=)
                          2: pchuRg1QLyIFpwfwBa8mUvFC7YI.roa (hash: mgPigocKfj7ADfA3gO1GOzZIymW9WRZZ/OqjW5DV1fM=)
                          3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: tpTEA7CJvFw5SLUcjFWEuJixFIFQZjvfRpzEwUn2Ki8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d5:0c:af:39:ae:d0:a7:3a:7a:45:40:75:05:57:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
        Validity
            Not Before: Sep 20 08:00:51 2026 GMT
            Not After : Sep 21 08:00:51 2026 GMT
        Subject: CN=277f7c9338f88d4e6701add40c3361b1784ce80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:61:15:cd:65:5c:6f:10:35:b9:70:a4:3a:
                    0a:10:1f:05:b2:86:3b:b5:a6:15:b0:6c:59:74:3e:
                    f4:90:db:ea:55:ac:4b:03:ad:3f:85:4a:84:9c:7c:
                    3e:f5:6e:7b:48:d1:49:16:3d:c9:53:7a:d5:eb:8a:
                    43:37:24:da:81:3c:17:68:4b:ed:5b:a7:8d:1e:72:
                    c3:cb:a5:12:17:91:c6:a9:92:95:36:aa:5d:48:f9:
                    f9:1f:e0:a9:f5:9d:94:69:29:51:f1:d6:a2:c5:3e:
                    09:04:87:9c:f1:8e:7b:95:85:04:5e:61:62:e7:6c:
                    f4:76:17:16:3c:31:f9:dc:4e:07:7b:7f:d2:29:11:
                    7a:3e:54:f6:c7:c9:14:88:7f:a1:dc:1a:3a:55:97:
                    7c:f6:29:b5:06:3e:f8:2c:74:60:e2:d0:e3:a0:4c:
                    c5:ca:77:4e:0a:4b:88:9a:bc:7a:f0:57:5f:ee:66:
                    7b:aa:12:a8:72:fe:ac:1b:8f:bd:e1:f6:77:c1:22:
                    9f:a7:61:08:f3:d5:36:9d:ee:5b:9b:ac:7d:cd:7f:
                    0c:a7:84:dd:db:21:db:84:80:33:c4:dc:e4:07:c2:
                    ad:af:fa:8d:a9:cd:3a:b6:44:bc:9c:ba:b7:33:c9:
                    4c:2e:59:0b:46:61:16:b0:f3:9c:63:3a:d2:07:a1:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:7C:93:38:F8:8D:4E:67:01:AD:D4:0C:33:61:B1:78:4C:E8:0E
            X509v3 Authority Key Identifier:
                keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:48:71:97:85:03:03:94:a3:8d:70:80:78:82:c6:55:de:19:
         c0:ef:af:55:23:0e:64:66:63:41:b8:33:c9:ed:3d:ea:ee:ed:
         cd:78:ea:ad:fe:f3:d2:1e:6a:db:11:41:aa:5b:bf:77:75:70:
         e2:72:47:af:91:39:0f:f6:01:b6:f0:fd:b3:fe:98:d7:6e:79:
         3f:cd:36:49:b7:dc:b3:3c:91:92:74:94:79:87:c8:d5:46:75:
         22:2a:35:8b:53:72:d7:2c:d3:2d:a8:7f:3a:96:0d:94:9b:38:
         6c:05:74:02:e7:68:36:63:83:2f:0b:e3:47:89:ad:99:11:2d:
         a0:05:de:42:02:4f:3e:77:be:18:74:ba:da:1f:b7:38:48:eb:
         8c:9a:6e:c8:b4:ca:53:46:ec:90:15:c7:c5:c8:1c:3f:7d:dd:
         52:14:2d:1e:4b:d2:3f:3e:ab:e1:03:69:7e:43:44:24:2d:dc:
         87:48:69:7d:f0:f5:f1:64:be:5f:c4:8c:06:df:4d:ff:8f:2c:
         38:db:90:44:48:74:cd:9b:40:c4:cf:ea:d7:31:34:ea:1b:bb:
         24:25:a4:8c:99:54:a5:7f:51:0b:b8:0c:62:70:99:18:27:4c:
         7c:2d:1e:0f:20:09:38:45:9c:bb:7b:09:89:3d:df:f7:4f:b3:
         90:05:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:58:13 2026 by rpki-client