Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File:                     1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier:          9Xy2WUYPxvH7Wl/n/rhgU8jTlDyznT6nFVIvCxZNqMw=
Subject key identifier:   04:6B:4E:B2:5D:63:BC:21:3C:45:EA:8A:F6:40:DE:E2:03:C1:E2:F0
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer:       /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial:       01A1366DB108F3C6672F2E607E61398EA43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number:          011A
Signing time:             Tue 13 Oct 2026 18:02:00 +0000
Manifest this update:     Tue 13 Oct 2026 18:02:00 +0000
Manifest next update:     Wed 14 Oct 2026 18:02:00 +0000
Files and hashes:         1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: dlTTV83eyHos5tQ67hb1vesCkpoH4/MR40ug3QbfcRk=)
                          2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:6d:b1:08:f3:c6:67:2f:2e:60:7e:61:39:8e:a4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
        Validity
            Not Before: Oct 13 18:02:00 2026 GMT
            Not After : Oct 14 18:02:00 2026 GMT
        Subject: CN=046b4eb25d63bc213c45ea8af640dee203c1e2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:f2:d0:5b:36:cd:94:fa:12:91:67:13:18:
                    e1:88:fd:7a:e2:91:b1:9c:53:b7:64:b7:81:bc:c0:
                    00:5d:ba:c4:01:b6:6a:89:86:2d:16:89:c3:d2:3d:
                    47:1d:16:53:82:6c:f0:dc:72:4e:8e:6f:87:ff:6b:
                    e0:d8:62:ff:cb:b4:56:37:2b:ec:c8:c2:6c:0b:28:
                    2d:19:7b:55:3c:f0:f2:7b:d2:cb:cb:10:cb:70:83:
                    1e:32:e1:7c:86:3e:2f:81:56:24:91:c6:33:83:38:
                    ee:59:39:e6:9b:e6:21:ed:94:45:c5:8d:04:e6:30:
                    cc:62:8b:8e:23:68:1c:52:12:9a:0d:52:32:bd:9b:
                    fb:e6:81:8a:0c:bc:f9:23:44:13:92:83:13:e5:25:
                    77:f0:7a:2d:16:cd:90:a1:8f:e5:d6:8f:f9:44:e9:
                    1c:38:33:4c:23:22:fd:34:7f:87:5b:30:4d:33:70:
                    84:b8:f8:2c:98:0a:0f:3d:42:41:0e:e5:b6:33:71:
                    1f:8c:62:b7:67:ba:e0:27:33:0f:60:eb:53:d2:57:
                    8a:c9:f5:65:68:ab:8b:bc:59:15:6a:99:a7:3a:94:
                    b2:02:07:0d:29:de:cb:30:b0:dd:8a:57:68:43:42:
                    16:8c:98:f6:25:0e:33:3f:e9:a0:0c:78:4c:c3:3a:
                    91:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6B:4E:B2:5D:63:BC:21:3C:45:EA:8A:F6:40:DE:E2:03:C1:E2:F0
            X509v3 Authority Key Identifier:
                keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e5:b8:0f:52:a5:93:a1:52:02:20:76:1f:f9:26:a9:a7:1b:
         4b:ac:bf:17:93:ab:ee:5b:96:fd:27:20:11:fc:c3:30:8e:80:
         26:c4:d5:be:f8:4a:da:63:7b:05:73:9e:81:31:1a:74:70:eb:
         d2:57:6b:13:35:c3:29:7b:71:dd:4f:1a:21:d4:f6:19:9b:0f:
         fd:39:20:22:21:25:fc:63:6d:fc:03:18:28:bf:a7:fb:dc:02:
         e2:ea:44:0f:73:a5:00:c4:38:94:c3:7f:24:26:5a:09:e3:f9:
         75:8c:89:c5:97:2e:37:b2:76:89:60:f5:0b:56:e1:6b:fd:ab:
         ed:06:fa:8e:38:76:d1:0d:7d:c7:36:8f:55:a0:bb:08:4e:3c:
         5b:e7:10:fa:dd:fc:e4:2d:60:5f:22:12:66:97:92:62:8e:ed:
         7f:8b:ee:13:1b:8b:cb:6f:50:4e:7c:66:af:82:6b:9b:cb:ae:
         d2:70:61:2b:28:c5:dd:54:17:f9:cd:16:45:fe:58:ee:c9:14:
         bb:9e:50:81:8a:bb:2f:c6:52:4b:8c:48:a7:96:12:71:60:48:
         ce:a6:96:31:24:e0:10:8e:87:0f:f9:2d:db:29:7d:86:ec:47:
         7e:48:62:66:13:61:d0:a5:d3:c3:12:13:67:fc:71:3a:7d:9b:
         d8:87:98:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:48:04 2026 by rpki-client