Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          CaXXCVq+pPZp+65156WRG/TYQvzJTCl2t8EAdeY45hU=
Subject key identifier:   62:D0:DF:60:2F:56:2B:82:90:3D:18:D7:6D:C2:3F:FD:C5:5B:14:D3
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       01A1249E1B7224AC34AFCB698430C371767E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          1A98
Signing time:             Sat 10 Oct 2026 07:01:43 +0000
Manifest this update:     Sat 10 Oct 2026 07:01:43 +0000
Manifest next update:     Sun 11 Oct 2026 07:01:43 +0000
Files and hashes:         1: dyIfoHvYEfN77rehdk6Hr_OLRAE.roa (hash: xcmHvUmEQ2Xk7WqYhP6N4oZ9W7Pc6AjsjVYgGRTZexw=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: kd4S8CN+ihTJbqM6wlLB6+uo0M4y0mC24F2h3CnO/ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 07:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:9e:1b:72:24:ac:34:af:cb:69:84:30:c3:71:76:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: Oct 10 07:01:43 2026 GMT
            Not After : Oct 11 07:01:43 2026 GMT
        Subject: CN=62d0df602f562b82903d18d76dc23ffdc55b14d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:b0:c0:48:e7:90:c6:c2:af:87:ff:43:2f:
                    0c:9d:5a:e0:80:41:4d:7e:19:68:56:16:e2:8f:c1:
                    86:83:db:3b:a9:aa:ca:52:47:7d:75:33:7d:8b:ef:
                    5c:e0:f5:c7:ad:e2:c2:75:0c:71:2e:a5:d6:90:a4:
                    0f:1e:b0:bf:40:47:3d:76:d2:5a:35:bb:4c:17:6f:
                    25:af:5b:f8:ed:80:44:e5:fd:56:b7:8f:ae:c7:ec:
                    46:ce:42:86:68:68:cc:a2:df:cc:1b:9e:09:55:86:
                    11:a2:1d:5b:9f:bd:24:32:4d:9c:f9:e3:05:1b:13:
                    35:4c:42:13:80:dd:93:e5:7c:12:35:ed:6e:e0:83:
                    6a:a3:f9:78:82:da:58:3b:bd:e0:a0:96:ba:ef:12:
                    b2:0a:3b:f5:07:e2:f8:48:bb:59:69:3f:d5:c5:18:
                    40:2e:fc:78:4f:65:78:c9:38:43:ed:ca:59:58:ce:
                    8e:44:22:d9:30:5b:ab:49:e0:69:fb:6c:ac:bb:d9:
                    ef:30:bd:64:ac:34:41:ea:1d:28:94:ff:c0:a1:b9:
                    dc:35:77:e0:d3:6c:2b:22:14:66:95:a8:23:b2:f7:
                    1f:04:72:d8:1a:2e:df:5c:6d:bf:12:d4:01:7f:c6:
                    3c:85:e6:0e:70:a6:8f:5f:74:8f:8a:23:67:d0:5c:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D0:DF:60:2F:56:2B:82:90:3D:18:D7:6D:C2:3F:FD:C5:5B:14:D3
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:65:f1:63:9d:15:01:19:97:fe:6e:b9:84:18:e5:63:f7:d0:
         ee:f5:52:da:5f:2b:a2:af:19:c9:b0:e8:19:05:8f:c6:96:24:
         8b:60:61:f0:ab:3e:77:45:0d:ad:63:7c:ab:72:e3:f9:9c:57:
         be:87:44:f3:ab:05:f7:36:1b:b8:b0:74:cc:41:da:90:2b:66:
         55:d2:16:20:85:fd:3e:b3:6f:50:be:5a:68:19:d9:4b:02:6e:
         14:8d:61:50:89:4e:42:24:a1:77:f5:20:7b:89:50:98:6c:b4:
         12:c1:5b:2f:05:64:be:4b:c5:0d:d8:40:6f:d2:10:7e:35:63:
         60:2b:30:c0:ec:2d:ca:78:02:d8:25:1a:d0:27:69:98:c0:69:
         2a:5f:26:ee:e3:e7:46:8b:a5:72:7e:8a:6a:c1:63:05:e8:ef:
         1d:52:12:e4:4a:6b:04:63:f7:b3:59:cb:76:39:f0:91:a3:8f:
         ea:9c:01:e2:db:08:81:93:39:51:00:99:ec:7b:c4:b6:78:63:
         63:da:af:89:d0:ab:f7:28:20:5a:5c:d4:be:f2:19:e4:96:dc:
         e0:4f:79:15:0a:49:31:7e:8f:22:34:9a:5b:e2:2d:15:b4:33:
         69:fb:6f:b1:7d:0f:aa:57:44:28:ba:6b:c6:00:54:5f:37:43:
         18:bf:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:45:58 2026 by rpki-client