Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File:                     Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier:          mqDJt8UZZf7enS+CsI6U8i34Jj6/+V84H+qBPbdIijw=
Subject key identifier:   E0:E2:07:83:1A:4C:80:6B:F7:53:CB:94:E1:9F:28:4E:83:75:E2:DC
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer:       /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial:       01A0BD9E56EAC14FEA74746A41930C4CC492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number:          05B9
Signing time:             Sun 20 Sep 2026 07:01:05 +0000
Manifest this update:     Sun 20 Sep 2026 07:01:05 +0000
Manifest next update:     Mon 21 Sep 2026 07:01:05 +0000
Files and hashes:         1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: 90TBj1B1BkHrFB5wMj8/dnJFnw+z34At6Rrya3NWWnQ=)
                          2: vRM_LGbWv2w9cKQdXqOHlRePDQI.asa (hash: ORLNjodyCGoSATuVjwDrx01Z8NUV9ta4Ef/5NzIWEY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:9e:56:ea:c1:4f:ea:74:74:6a:41:93:0c:4c:c4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
        Validity
            Not Before: Sep 20 07:01:05 2026 GMT
            Not After : Sep 21 07:01:05 2026 GMT
        Subject: CN=e0e207831a4c806bf753cb94e19f284e8375e2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:75:60:d7:83:56:5d:fb:e8:4e:e7:9f:5e:
                    f4:4f:8b:f8:a2:ac:ac:c4:e9:51:34:28:bd:5f:c2:
                    0b:f0:ce:33:ee:b8:18:84:3b:4a:f5:3e:d8:3d:66:
                    66:97:9a:02:b5:0c:e3:96:80:8f:9c:ac:64:87:ce:
                    3e:1f:f7:80:78:2d:3e:6d:4f:a4:3f:c2:69:fd:90:
                    27:39:aa:87:0a:13:21:79:6f:b7:ea:f7:c7:69:03:
                    07:d2:c8:78:f6:4c:9f:84:45:d2:41:14:61:05:f4:
                    f0:f4:09:98:e7:c0:be:69:d5:e2:c0:9f:df:31:42:
                    56:4b:45:01:36:77:f1:44:df:a2:54:84:f2:81:cc:
                    c7:7f:8a:f2:40:ab:60:03:b3:7d:85:cc:59:b1:48:
                    20:34:9f:c0:cc:f8:45:61:72:8d:74:8e:4d:c3:90:
                    25:13:76:9f:7d:a1:2f:bc:37:28:b3:d0:bf:83:8f:
                    fc:75:fa:dc:b1:64:99:2a:99:c2:26:40:b0:80:d7:
                    95:31:23:dd:89:c0:13:3b:25:b4:9e:42:ae:42:23:
                    81:93:36:8c:c0:e0:8f:92:f2:be:c2:42:4d:e5:d1:
                    3a:7e:a2:74:86:8f:84:a1:ef:45:5d:03:36:63:e9:
                    99:b0:b0:97:2d:f9:4d:a5:c1:5e:a1:1c:0b:7e:0a:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E2:07:83:1A:4C:80:6B:F7:53:CB:94:E1:9F:28:4E:83:75:E2:DC
            X509v3 Authority Key Identifier:
                keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:73:e3:43:6f:aa:c1:c9:6d:e4:07:ef:01:cf:95:d2:70:e1:
         2a:34:5e:6c:8c:cb:01:7b:31:9f:49:6d:ef:a0:1a:2e:a3:3e:
         13:56:e8:6c:90:89:3c:dc:36:01:48:f1:1d:07:59:ca:0a:af:
         11:aa:0a:a4:56:6f:88:74:14:63:e2:c0:a6:99:42:76:3c:86:
         f5:07:f1:9c:5e:00:46:84:78:af:7b:e7:23:13:90:09:7a:c4:
         e8:2b:53:b4:f6:b1:2d:a3:32:df:74:da:fd:81:ba:33:15:57:
         2e:38:a8:77:f1:e0:13:d3:1a:66:2c:3e:e7:06:11:f1:30:f5:
         81:ac:04:35:c0:8c:2f:81:ed:72:9b:35:51:6c:ee:67:bf:d0:
         3f:c9:5f:99:76:b1:21:04:c8:51:fa:86:c2:d9:eb:ef:d6:00:
         1f:44:71:38:cf:fc:98:e8:c6:8d:a6:b0:96:70:97:c4:ce:a0:
         eb:c7:98:16:19:0a:27:59:45:a2:33:96:51:73:8e:80:df:15:
         db:09:ce:cf:d7:5d:ab:7d:b1:39:08:06:0a:f6:c7:7b:24:cf:
         84:9c:89:12:b2:78:8d:f7:cb:9d:1c:d1:07:27:fb:97:b8:75:
         85:82:51:6b:12:42:e8:e7:7c:13:55:a1:c6:e4:23:08:f2:55:
         80:61:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:44:02 2026 by rpki-client