Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File:                     zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier:          e7BtgSHxP4XZzKCHR3r+luVXTXhQ8cJu0tfmqKllSVc=
Subject key identifier:   72:23:4F:F0:27:66:E8:01:F6:CE:B6:25:51:1A:63:F5:20:71:BC:B9
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer:       /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial:       01A0D760D4A53B0D5542BC389AEA98F2EF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number:          1A76
Signing time:             Fri 25 Sep 2026 07:04:02 +0000
Manifest this update:     Fri 25 Sep 2026 07:04:02 +0000
Manifest next update:     Sat 26 Sep 2026 07:04:02 +0000
Files and hashes:         1: 2Zg_-dpcqfmzuDStyGzldA-iv1s.roa (hash: rO88dw5SEIUE2fPQKc2On6kad3jKSdwxG+JqeHFebNY=)
                          2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: Bgw6wck97M/dmxE2JNIma7vtLc46e2ToGAlSRJ/ZmZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:60:d4:a5:3b:0d:55:42:bc:38:9a:ea:98:f2:ef:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
        Validity
            Not Before: Sep 25 07:04:02 2026 GMT
            Not After : Sep 26 07:04:02 2026 GMT
        Subject: CN=72234ff02766e801f6ceb625511a63f52071bcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:27:d9:0f:fb:57:0a:20:e2:e2:39:69:6e:
                    f3:21:a9:36:ae:b3:2c:f2:65:ed:1f:c9:45:0a:52:
                    65:ee:34:24:79:f0:a9:80:12:a1:f1:b7:99:4a:9c:
                    66:9f:14:d3:04:a1:8c:85:1e:0f:3a:fd:25:ee:1a:
                    d6:89:c5:13:5f:c8:2a:a7:16:94:07:f7:bf:c3:bd:
                    1c:cd:88:89:fe:1a:a2:da:7e:c0:f7:d6:77:82:63:
                    e2:af:98:a8:65:fa:69:00:f3:a3:f1:e4:b3:cc:38:
                    76:df:65:fe:21:be:a2:79:fc:ca:b4:f3:d6:a8:d1:
                    fe:81:89:42:13:6b:6a:c7:22:93:90:07:5d:8e:38:
                    4b:aa:c8:51:2e:81:2f:1d:31:5b:f6:b4:c3:72:69:
                    d8:d5:7f:7b:51:78:f2:83:9a:19:a2:9a:2e:21:83:
                    17:4f:b4:9b:fd:2d:c7:ce:09:1d:3c:ec:ee:3b:ac:
                    62:0a:97:a7:2a:7e:45:2b:75:5d:94:e5:93:b8:41:
                    2a:17:dd:b0:8c:c5:04:1f:7f:c4:9d:78:f3:0d:09:
                    ce:34:c7:0c:b7:2e:a9:32:3d:65:86:fa:ab:55:9c:
                    bf:19:d7:3c:a1:25:08:9e:9b:47:c4:a8:ad:65:15:
                    1a:37:ee:10:2b:96:d1:73:c9:d9:f9:d5:61:d9:ec:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:23:4F:F0:27:66:E8:01:F6:CE:B6:25:51:1A:63:F5:20:71:BC:B9
            X509v3 Authority Key Identifier:
                keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:41:48:fb:d3:b2:da:9c:2f:c9:00:6b:e9:53:82:a2:4a:93:
         76:ff:e8:c4:15:d7:4b:ff:71:97:c9:64:56:e5:2f:f4:ea:94:
         90:fc:4e:9d:55:45:65:73:b3:a9:5c:a6:f9:ff:15:11:c3:05:
         19:b0:59:f2:7e:8c:ca:12:3b:ee:b2:cb:89:23:89:88:72:8d:
         30:f9:24:f4:e3:73:38:c0:58:01:b0:6d:bf:5f:22:6e:b3:68:
         f4:77:ab:12:b3:0c:6a:6c:e1:11:41:b9:65:b4:21:00:35:b3:
         af:fc:16:30:59:61:0a:15:dc:a3:e4:c2:1e:dc:34:1a:44:b7:
         c7:8e:de:b1:58:9b:f6:54:fc:91:cd:28:ca:64:09:1d:e2:65:
         ef:3d:a0:c7:78:14:9e:2b:93:a9:41:5a:7f:d6:b7:1a:2d:0a:
         aa:b7:bd:ec:3a:6d:86:86:ba:e2:6c:ef:c5:49:d4:1c:9f:b7:
         0f:59:2f:70:a0:e4:99:43:cc:30:f5:27:46:6c:ba:4c:75:c6:
         fe:c2:94:e1:38:02:c4:aa:93:73:a1:89:04:b4:cd:93:bf:9d:
         d0:13:0b:be:ed:cf:72:06:d8:ff:f8:87:fd:f7:62:06:ad:f3:
         cb:2f:67:16:fe:55:1d:2a:08:a3:83:79:40:19:06:c3:f1:81:
         73:ab:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:20:08 2026 by rpki-client