Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File:                     zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier:          /X4CKeL5ky+gEUFRFIlvTnOfucg7yC+M/K7Nq87tC6k=
Subject key identifier:   3A:70:D0:15:49:BD:4A:F4:84:9A:A5:73:CF:D1:F9:27:0B:1A:92:E2
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer:       /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial:       01A0E7E402987D822F1ED30553734C7EB482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number:          0594
Signing time:             Mon 28 Sep 2026 12:01:14 +0000
Manifest this update:     Mon 28 Sep 2026 12:01:14 +0000
Manifest next update:     Tue 29 Sep 2026 12:01:14 +0000
Files and hashes:         1: 3WBgzyeX1uLGrZJBfUCmtAri3yo.roa (hash: YH496ZA6V5oD8citQskcrgnfmvtB3C49x/dIJaTBFS8=)
                          2: 46AOUfQolDshFKPEXQ1TmfsCBaE.roa (hash: 9KDbaABD/AWMnTzxrxma8b60bW9b3hzOwcJWn4VEz7M=)
                          3: eLtqqzfmHaENjrYjDWaZNiVaiNM.asa (hash: 3qdH7YILG+mohvpaVfJujhp0nSwMuCtR0l4DOroE8fE=)
                          4: lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa (hash: xyC0OirskdCSUadmtCeoUwblgPmS4gYDwVr6k8DHX9w=)
                          5: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: QG9RzM8GfkMqmaqjEtkirtN8GSBsyXeJFojYOU9HmQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e4:02:98:7d:82:2f:1e:d3:05:53:73:4c:7e:b4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
        Validity
            Not Before: Sep 28 12:01:14 2026 GMT
            Not After : Sep 29 12:01:14 2026 GMT
        Subject: CN=3a70d01549bd4af4849aa573cfd1f9270b1a92e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:25:ee:eb:8a:ad:cf:23:a5:9e:90:7a:9e:
                    0f:05:34:1b:ca:de:35:54:98:a3:51:9a:d4:1f:ea:
                    bd:73:1a:9b:07:d1:b1:84:d1:54:63:81:07:6d:0a:
                    ba:97:85:69:da:33:17:09:53:8c:1a:a6:43:35:b8:
                    71:48:a1:d7:96:37:c2:78:32:ed:15:94:e4:b6:ac:
                    9c:ac:ec:17:17:da:4e:c1:98:b0:55:56:df:84:85:
                    20:51:7e:be:0e:9c:3c:4c:0a:6f:54:db:2e:5a:a9:
                    26:6e:26:63:44:27:d6:3b:57:48:c6:56:4f:fa:a9:
                    01:f5:72:eb:1a:b1:00:15:29:83:77:12:25:d8:3f:
                    1f:a0:f9:d4:d5:51:13:2d:47:0b:ea:72:ba:5d:21:
                    9e:1b:5e:e8:88:b3:75:b2:4c:78:d1:c2:d0:7e:1e:
                    d4:cc:13:b8:f2:53:40:2c:ad:8a:cf:ed:d3:79:cc:
                    6a:3b:98:4c:5d:83:0d:39:a5:7e:0a:1a:39:62:60:
                    df:35:23:1a:90:c1:91:39:c5:6f:3f:1e:9b:4a:4c:
                    a8:8d:73:db:4d:fb:8a:18:b0:13:45:64:00:8a:c6:
                    a8:9e:65:f1:24:7a:b7:7e:32:9b:ec:13:6c:0e:64:
                    d1:6f:1f:ce:fd:99:7b:99:42:ad:8c:21:18:e6:c8:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:D0:15:49:BD:4A:F4:84:9A:A5:73:CF:D1:F9:27:0B:1A:92:E2
            X509v3 Authority Key Identifier:
                keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:65:83:b3:cc:01:c1:e6:ad:6b:97:f6:31:2b:67:92:29:8f:
         c3:11:76:43:90:27:2d:f4:cf:ce:a6:36:21:08:44:88:fe:f8:
         c7:38:9f:07:4e:15:07:ef:16:b7:19:45:cd:72:e6:38:ba:20:
         98:61:94:49:5a:c7:64:bd:c2:96:75:85:ac:c7:72:ba:da:ae:
         86:1b:20:5f:10:e1:bb:53:0d:78:45:68:84:b4:e6:53:8d:16:
         d2:97:c1:c4:36:2d:8e:08:bb:7f:ff:38:ff:c1:fa:44:d1:40:
         6c:02:71:6c:32:15:d4:aa:0e:d2:73:99:57:71:88:9c:7c:e5:
         f7:7b:9c:4a:a7:f5:a2:a2:f2:a2:55:5f:66:2a:47:e8:21:2a:
         21:7a:d0:46:be:f9:2c:b1:f0:12:7a:f8:76:89:5b:e7:f1:98:
         6f:16:ad:a1:91:2c:aa:12:e1:b6:ab:da:a4:f3:34:1d:06:97:
         a5:e8:0b:9c:72:7f:96:aa:74:1d:c7:41:ae:99:62:ff:69:ae:
         e2:7c:41:49:b5:09:f3:fe:b1:51:c9:b0:fc:3e:c0:26:99:c9:
         06:40:c2:21:d2:02:76:3d:b8:ee:55:e5:90:a1:51:bf:f3:72:
         40:b6:fd:cc:62:c8:63:45:17:27:21:09:4c:2e:f9:e2:d5:48:
         6f:be:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:27:14 2026 by rpki-client