Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File:                     z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier:          4X7Dwmawkb2e0rJJBrwx5UWhQ6htq0XTY/kowL0Yjpw=
Subject key identifier:   D4:29:89:BD:E1:35:E0:2E:CC:D6:79:86:C5:04:07:66:CA:76:74:69
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer:       /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial:       01A0C8214D0C59D1D099C290E7AB81C1706F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number:          0833
Signing time:             Tue 22 Sep 2026 08:00:20 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:20 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:20 +0000
Files and hashes:         1: 0S-ozMaRAyvvdMvSJW3g5Kk4iVo.roa (hash: OQHH+g7JmAcn53oHjDt/GSfgh8qJfjfcS42p09F0WtU=)
                          2: DfeDYFEhcGiOVGd2HiXYX5Rn1XA.roa (hash: QNfPUzw4gyDIHgNy4UB5ZpKhS1ImNQM4IAovYnRUp5o=)
                          3: NQIBAohX75IaNOk07YtqfQi_l2Q.roa (hash: FDra3udXguGsI5fh/D9xyGvlXRNRLrQbxmcagtWhiYA=)
                          4: OX-WFn34m-JD1PE0u9eYZk4qKCk.roa (hash: I9b174DioYRAA7Dm+6Il6PksgXPNmVtiUo8IS77/Rvc=)
                          5: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (hash: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4=)
                          6: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: 7xQqACCUscpqX5ylCxI7vlZ5LLpuxn8ey00FHaNDmyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:4d:0c:59:d1:d0:99:c2:90:e7:ab:81:c1:70:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
        Validity
            Not Before: Sep 22 08:00:20 2026 GMT
            Not After : Sep 23 08:00:20 2026 GMT
        Subject: CN=d42989bde135e02eccd67986c5040766ca767469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:73:f0:dd:5e:85:66:f6:9d:3f:b2:58:3b:
                    60:25:5e:9d:65:10:e5:1d:84:90:f9:26:50:3e:c3:
                    13:2a:45:fe:36:b4:0c:a6:bd:64:2f:b6:88:5e:47:
                    48:80:fd:04:96:45:88:99:21:6d:20:c8:42:08:77:
                    68:e7:8f:c1:52:f3:b3:8b:71:8c:13:5b:45:77:8f:
                    84:0e:90:f6:31:a7:1a:dc:c3:ef:f3:2e:cf:f9:27:
                    4c:e0:a4:c2:69:eb:23:62:a4:f0:e3:47:30:d4:e6:
                    e7:65:4f:ec:29:23:6e:74:bd:44:0e:ef:bc:1a:30:
                    bd:b7:ce:57:c1:b5:15:b7:7a:e9:fe:33:d3:e9:32:
                    6b:14:79:51:34:4c:8d:00:8c:00:02:3f:4d:bb:6d:
                    d8:79:ff:fc:e3:95:41:0e:87:32:35:ba:1f:30:a8:
                    2e:44:66:bb:e7:59:5f:e1:54:84:ff:52:0c:76:48:
                    2e:2c:14:03:27:d4:46:ec:1f:c4:0f:d6:90:d6:17:
                    2e:6b:28:fa:f7:6a:4e:54:0a:d3:f0:67:71:22:19:
                    a6:79:ee:f5:be:38:05:46:5a:5d:e9:81:c6:87:9a:
                    1d:1f:5f:00:e6:79:03:40:7e:37:13:5a:a6:5b:e9:
                    04:dc:5d:e4:cf:fe:2f:23:2a:fe:23:e5:a3:85:ed:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:29:89:BD:E1:35:E0:2E:CC:D6:79:86:C5:04:07:66:CA:76:74:69
            X509v3 Authority Key Identifier:
                keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:dd:1b:0d:2a:92:fe:88:47:2c:91:c3:67:e2:58:b5:a4:25:
         ef:f1:62:b3:24:f8:8d:ab:7c:75:a7:99:12:7a:6f:01:3a:8e:
         be:10:10:04:80:92:31:1b:e1:c4:37:08:c0:71:32:fd:ba:e1:
         3f:04:d4:2f:b2:9e:e2:c0:f8:3a:d0:30:b3:9f:81:bd:b6:6b:
         eb:9f:23:4e:20:89:31:02:6b:62:b3:e2:3e:b1:a2:4a:52:92:
         64:06:7f:fb:5a:79:1b:d2:86:38:55:be:98:d6:3e:b7:8f:e4:
         ae:2f:70:49:f3:6c:4c:f3:e8:21:5f:25:92:a2:66:82:10:f2:
         c8:10:56:33:06:f9:b9:b4:fd:7e:40:35:c2:ff:5c:0f:78:f6:
         e7:6b:eb:e6:b2:e6:b1:b6:16:dd:8e:fd:89:d3:d8:ab:74:81:
         85:b8:ab:4d:d9:82:02:cf:66:03:d7:fe:94:0d:01:23:b9:5d:
         a5:3c:c0:6d:c2:d2:4c:1a:fd:1e:75:e6:c6:03:68:3c:2e:25:
         1e:74:c6:3c:23:db:1e:08:2a:2c:68:34:5d:ab:f8:f9:27:4f:
         c3:06:f2:2f:17:df:dd:76:c9:ea:ff:07:28:9d:46:e7:f6:77:
         3f:a6:05:28:e6:b3:06:dc:6a:cd:8b:bc:d7:a4:7d:eb:84:68:
         23:67:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:39:13 2026 by rpki-client