Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          60M01bb2xDulA73xoOzg0SKFljMtfArQs4fcmrpCU6U=
Subject key identifier:   F6:7E:70:64:96:95:5B:FF:B1:14:90:F9:EB:57:8B:46:95:7E:E1:04
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       01A0C1434D4D08F488E286B5E0E1A1704996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          1A66
Signing time:             Mon 21 Sep 2026 00:00:08 +0000
Manifest this update:     Mon 21 Sep 2026 00:00:08 +0000
Manifest next update:     Tue 22 Sep 2026 00:00:08 +0000
Files and hashes:         1: 6xuNTY_iWkHPPmX8ImnPUwpIICw.roa (hash: rki5JF3Dn8KF0wiQ0pOA5KuyYBjrNPOOlyoFXsz/Nw4=)
                          2: Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa (hash: /UOlw8R9RHBXRNf2pHB5ILY2/31tspmHrZEY8rczLws=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: /BYOozsavbpjJulPPPZue4xbRfQHYe/dpezK+BkK5q8=)
                          4: l6fGw5x0kwKbWm6qlO4Cb8mnozw.roa (hash: qIO5x+8uTr9xwt8GJiCJP0qK55Dhutv/sFwU3VkQhb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:43:4d:4d:08:f4:88:e2:86:b5:e0:e1:a1:70:49:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Sep 21 00:00:08 2026 GMT
            Not After : Sep 22 00:00:08 2026 GMT
        Subject: CN=f67e706496955bffb11490f9eb578b46957ee104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:9d:06:7a:e1:a6:1c:50:a4:61:5e:85:6e:
                    8f:c8:9d:f9:5a:30:8b:a8:47:d8:38:2b:70:8e:f2:
                    20:0c:90:da:27:1b:5a:b6:64:dd:d5:b0:57:7c:77:
                    bc:83:8c:71:92:81:cd:1c:41:de:a1:96:86:cb:bf:
                    00:89:18:0f:2d:e9:5c:e7:59:ab:a3:32:36:13:87:
                    51:0f:6a:c9:e5:d7:7b:56:bd:bf:ff:5f:88:c5:50:
                    18:a8:b3:4c:52:b6:d7:dd:1f:45:38:db:a3:7c:e2:
                    84:46:80:5c:c0:42:94:b7:c5:5a:e1:08:36:76:cc:
                    bd:98:a6:83:4a:25:39:71:8c:4d:62:e0:5b:34:0f:
                    63:93:cb:09:6d:ea:69:4e:ed:2e:24:43:c5:0b:b1:
                    59:de:09:ad:8f:a9:96:cb:95:24:07:69:59:24:51:
                    7c:a1:79:61:e1:e6:50:24:63:ac:aa:80:21:45:98:
                    f1:8a:60:e2:c3:0e:68:be:a6:de:de:33:a0:85:eb:
                    d1:aa:69:01:c3:96:60:11:d5:81:8c:5c:0a:c9:56:
                    38:a0:3e:12:06:ea:85:5b:24:a0:08:20:80:41:42:
                    95:d1:68:60:ae:bb:9e:80:49:64:a3:af:79:32:d1:
                    5b:74:8b:29:99:86:fe:fa:b4:d1:4f:f6:ad:de:1b:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7E:70:64:96:95:5B:FF:B1:14:90:F9:EB:57:8B:46:95:7E:E1:04
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:d3:56:b8:64:4a:a1:0b:df:9e:bb:2d:33:5e:6a:4b:1d:
         b5:9c:17:91:b3:38:9c:5f:4f:6f:ad:25:2d:09:0f:12:87:23:
         a3:e2:de:40:c7:e4:0e:9f:ab:7b:3e:97:8e:90:b9:e6:0b:33:
         7c:44:1c:4b:05:df:09:79:97:91:80:3a:b0:03:b3:b0:a1:93:
         b8:8b:a1:e4:b2:c9:df:f3:23:d4:94:cc:eb:79:d2:1a:58:d5:
         81:10:ad:2d:43:f7:da:60:f1:36:74:f8:02:f7:59:0a:94:47:
         50:9e:05:b7:45:a5:99:96:7b:b8:0a:25:1d:05:19:ed:67:42:
         37:34:2c:ff:df:b0:e2:c4:16:5f:91:7f:b3:c7:c9:a7:5a:4d:
         0c:60:d2:b8:57:da:db:03:37:93:5b:24:b2:be:45:38:f3:9c:
         b9:b5:76:42:90:18:92:d4:67:94:b6:a8:71:d1:67:03:7b:05:
         b6:a6:5b:79:a1:f8:84:5c:25:82:f3:08:37:0c:4c:99:b2:25:
         4f:f0:8d:94:94:0b:61:21:bf:4e:61:b7:54:54:8e:56:0a:7d:
         df:d5:33:6e:13:9d:30:bf:41:1b:bf:d4:c7:cd:1f:ed:de:8c:
         46:94:87:64:53:fa:2e:50:3a:28:60:dd:08:dc:79:0a:e9:71:
         9b:40:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:04 2026 by rpki-client