Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          +pQQlJBiGAhj2Cqd0DEFUsH6L980HwpVcXpJwWtmVOg=
Subject key identifier:   EC:36:B1:A8:15:15:BC:39:AF:A3:91:61:5D:F4:66:8B:62:38:36:FE
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       01A10F5F5178C055D1EBBFB00B25FE732177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          14F5
Signing time:             Tue 06 Oct 2026 04:01:07 +0000
Manifest this update:     Tue 06 Oct 2026 04:01:07 +0000
Manifest next update:     Wed 07 Oct 2026 04:01:07 +0000
Files and hashes:         1: aq4p8HsGl9pKO4noCxxMdLO1S3k.roa (hash: WnMcucTbt4CWLUco8Rw4MOO6knRkLOBVBAUuHlupSc8=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: fRfgDCYw99xjQMLTg7sKPqOFmOPkES7TcvyPQbMVQjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:5f:51:78:c0:55:d1:eb:bf:b0:0b:25:fe:73:21:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Oct  6 04:01:07 2026 GMT
            Not After : Oct  7 04:01:07 2026 GMT
        Subject: CN=ec36b1a81515bc39afa391615df4668b623836fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:66:e5:ba:08:2d:ee:0a:10:2f:ea:1c:c6:
                    f4:cd:61:b6:75:a8:48:f5:54:c0:ad:9d:fa:b4:27:
                    ec:d8:66:d2:85:31:5c:ec:40:61:1e:db:d3:6e:10:
                    0d:14:9a:48:6e:03:76:10:dd:74:ec:ee:d1:1d:02:
                    59:29:c0:36:ac:17:b3:ef:18:67:d0:b9:69:9f:ea:
                    b1:a0:8a:e6:2e:01:28:4d:78:e5:6a:71:3f:69:3a:
                    7a:45:96:12:3c:e0:f4:1a:41:ad:b5:5d:02:d5:4f:
                    9d:cd:ae:c6:26:2e:14:e8:9a:4b:80:4b:6d:c9:fe:
                    f7:53:a9:ee:ea:8a:c3:0f:17:b5:b8:b1:ca:31:e3:
                    10:da:ce:77:b9:11:df:f1:ac:5e:6b:68:ec:21:79:
                    37:78:ee:78:6b:59:d0:67:b7:26:d5:f8:82:c2:6c:
                    5f:5c:99:dc:2a:ea:58:11:bb:49:2e:30:2a:ea:e0:
                    15:32:5b:2f:8e:20:93:54:ab:0a:1c:6f:14:9e:de:
                    5d:c7:a9:a1:7b:09:08:28:6c:50:e8:31:b0:68:c2:
                    3e:cc:78:1b:0d:a5:1c:a2:f4:5a:36:56:e1:48:20:
                    78:6f:dd:53:6a:6e:20:86:e3:d5:ff:46:b5:12:6f:
                    c5:81:1d:79:f3:89:bc:3b:09:e9:e5:d2:ea:b5:de:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:36:B1:A8:15:15:BC:39:AF:A3:91:61:5D:F4:66:8B:62:38:36:FE
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:12:a4:e3:cf:42:18:dc:44:6c:ab:ae:a9:68:b4:18:aa:51:
         09:de:54:22:0b:69:16:49:48:fc:46:14:fe:0b:f3:0e:17:13:
         53:9f:03:f7:42:84:ff:9a:fe:b0:20:5c:c1:bf:3c:c1:c5:a6:
         d5:47:0e:7e:2d:81:a7:c4:8d:b6:a7:ce:9c:60:08:6d:de:b1:
         95:b2:69:e7:cc:0f:65:6e:c1:85:f4:24:66:ec:50:20:61:24:
         72:f0:4d:ac:71:e8:e1:61:22:fb:a1:45:eb:d3:10:65:ed:f4:
         fa:f5:56:1b:87:01:f2:de:c5:14:9c:3e:42:bd:8b:77:98:47:
         40:be:1e:bd:2f:cb:40:b5:5e:0d:44:45:50:7d:95:d2:19:a6:
         3b:9b:c8:5c:d9:99:6e:74:a9:d2:98:f0:1d:87:a6:37:78:d5:
         00:78:03:5b:e5:15:3b:87:d3:03:2a:2a:78:9a:bc:f3:3c:c0:
         14:bb:2e:71:c2:19:93:4d:da:54:fa:2b:ce:be:2a:92:69:f9:
         71:6a:18:df:4c:14:a7:89:57:20:8b:b7:1c:b7:9d:c5:91:36:
         81:82:dc:08:b6:f2:b0:67:69:d8:f5:72:9d:d1:43:39:48:84:
         74:6f:5a:35:fb:fa:e3:f4:63:7e:b5:cf:4d:4e:fb:f1:4c:ca:
         54:30:46:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:04:35 2026 by rpki-client