Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File:                     zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier:          02oXEL5+ddYMgaz448hfrGIGhan58xHmljMNFQvMxjA=
Subject key identifier:   3C:2D:48:83:59:97:A2:DF:BC:AF:77:95:BD:9C:6B:70:50:29:12:AA
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer:       /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial:       01A1280CB648B85A746FC4D27A3DECCCEE4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number:          06EC
Signing time:             Sat 10 Oct 2026 23:01:23 +0000
Manifest this update:     Sat 10 Oct 2026 23:01:23 +0000
Manifest next update:     Sun 11 Oct 2026 23:01:23 +0000
Files and hashes:         1: IAA66PvhbnZNq6DYqFa4jxHq9Mg.roa (hash: CI2b/MsfzBD//bruekgU/jIDPxItVVrUl8xZ4Kyd7+M=)
                          2: P0v6mR3smcBt5UiE9QMtEljH-o0.roa (hash: 1OZZCNxK0pEOgMba5af7rR5wKnFTBqdHQ6QRRxIRAJU=)
                          3: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
                          4: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
                          5: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: yr/HbqQlZdTTKaBW5mr2em0wLdMI9Lv7j4MkCvzy9cQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:0c:b6:48:b8:5a:74:6f:c4:d2:7a:3d:ec:cc:ee:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
        Validity
            Not Before: Oct 10 23:01:23 2026 GMT
            Not After : Oct 11 23:01:23 2026 GMT
        Subject: CN=3c2d48835997a2dfbcaf7795bd9c6b70502912aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:e8:9d:d0:c3:83:99:66:63:d8:bf:b9:22:
                    a3:12:03:2d:66:f7:96:5b:1f:ed:98:39:7f:ff:7e:
                    78:14:0d:89:d2:88:e7:82:c6:2e:1e:8f:87:95:4b:
                    d5:61:4a:c8:c9:13:e8:d4:bb:7d:ef:04:9f:48:9d:
                    2e:73:3d:0e:a5:91:e4:43:77:91:d7:f6:da:f4:9a:
                    fb:29:df:47:9a:dd:49:fd:d0:e7:4f:99:48:ae:e0:
                    43:27:cd:06:3e:f2:20:c0:ee:f9:99:b1:68:21:66:
                    54:ff:79:df:be:de:8c:8d:26:9f:7e:8f:9d:3d:d8:
                    24:64:a3:82:b7:7f:89:e1:ce:ec:fe:27:39:2f:5a:
                    dc:72:01:33:e6:92:40:8d:4e:2e:84:e5:72:a6:8a:
                    10:45:a0:82:51:dc:b4:72:01:03:e6:49:20:72:ef:
                    fa:f9:81:22:e3:63:17:17:a5:58:bf:35:d6:00:4b:
                    85:4c:3b:6b:96:87:b8:3f:cc:26:6f:26:00:1d:4b:
                    06:60:29:84:29:b1:d3:fc:b2:73:69:d6:7e:07:24:
                    7e:6e:6f:4a:9b:e8:b1:3a:69:cc:fd:12:03:05:90:
                    8c:02:52:52:23:89:65:d9:53:dd:d6:5a:14:7f:e4:
                    85:6f:60:01:4b:2a:05:bb:ac:7f:a0:72:5f:23:b1:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2D:48:83:59:97:A2:DF:BC:AF:77:95:BD:9C:6B:70:50:29:12:AA
            X509v3 Authority Key Identifier:
                keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:5b:32:43:9d:bb:4e:83:bb:17:66:9e:d5:45:d2:48:46:
         73:1e:d3:bc:b9:8b:dd:91:16:af:8b:09:09:29:c2:1e:08:64:
         65:15:55:34:5a:23:09:dd:79:55:91:e4:58:ad:e8:fe:e8:e8:
         9b:0e:37:0f:18:8b:e0:04:c2:04:89:30:8f:e9:f4:ff:7c:e2:
         9c:1f:96:95:3d:d0:15:ea:e9:c4:ee:31:69:26:de:33:53:11:
         f8:6e:6e:b6:c2:d9:a1:67:50:d5:02:c2:e0:bb:49:40:77:ed:
         98:00:e1:ce:86:da:b0:83:a0:5c:db:b1:3d:f4:d6:1d:05:c9:
         1f:32:d8:f0:ba:1c:1d:d9:16:cf:0b:0f:8e:57:29:7c:66:2f:
         be:bd:0f:84:18:02:95:6d:c2:a0:56:80:63:02:14:fe:df:ba:
         9e:01:86:d8:b3:94:9e:b4:b2:3e:8e:3e:fb:17:db:11:a3:ba:
         1b:59:f5:ac:75:7b:d6:e8:cf:33:2b:ae:b2:ad:76:cd:ec:1d:
         bb:a7:0e:d8:4e:c1:e9:14:f7:5e:b0:d0:9c:2c:21:98:17:67:
         f5:80:05:73:f5:79:58:b9:c3:6b:f7:11:63:25:3f:ae:8b:b0:
         fb:d5:91:44:26:84:8a:81:b1:83:0a:06:4d:3f:f1:60:1e:51:
         44:60:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:05:26 2026 by rpki-client