Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File:                     0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier:          T0YTJR55SRd+wSid2ZsQ8j5Y/MjkcLTcDMH+2MpsTNg=
Subject key identifier:   2A:C3:DB:EE:A1:F7:39:07:25:66:95:5C:81:40:EE:ED:C6:50:94:D4
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer:       /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial:       01A0C4E9AC38B126C2457A1CE493C5B4FC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number:          1053
Signing time:             Mon 21 Sep 2026 17:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:43 +0000
Files and hashes:         1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: q9jbvRPkfgomGbt1UlGiTo0Wc39S1CKfxWqBwXtxHXs=)
                          2: 30fBF43nNMXHw1Tgh2dLtFk3R6M.roa (hash: PgUDjgwNU/uw7qs9K31DsvhoYHzlo8cAS/N8Ut5gSaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:ac:38:b1:26:c2:45:7a:1c:e4:93:c5:b4:fc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
        Validity
            Not Before: Sep 21 17:00:43 2026 GMT
            Not After : Sep 22 17:00:43 2026 GMT
        Subject: CN=2ac3dbeea1f739072566955c8140eeedc65094d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:dc:cb:aa:b0:b0:b4:26:e7:24:7b:13:4c:
                    53:5c:d2:d8:ae:80:7d:e5:db:78:8f:64:13:00:98:
                    28:3a:d0:76:bb:8f:a1:1a:50:80:39:75:a1:9e:cf:
                    28:92:c7:42:aa:98:97:a0:d6:8b:12:d4:1c:35:c4:
                    63:bd:b1:8d:be:ba:8b:ae:6f:12:05:4f:17:e6:25:
                    7a:db:a4:46:8e:8f:36:47:af:20:78:db:18:a4:8e:
                    b3:f6:7f:db:fc:4f:8f:ab:c1:03:84:b2:0d:b3:77:
                    31:68:b5:06:ed:6a:1c:e9:47:c6:5e:97:ff:04:94:
                    9c:ba:19:fa:af:ba:80:e0:7b:25:a6:e9:ed:f9:2f:
                    a9:43:dc:ba:6f:40:db:82:8d:75:a6:d6:45:0d:c1:
                    65:fb:ba:51:b0:0a:d4:18:c0:c1:24:8b:d6:87:a1:
                    5e:27:01:7b:b6:dc:a9:e3:10:50:c9:98:01:05:ca:
                    88:e4:ed:3c:9e:61:e1:e1:40:c9:f6:23:56:30:26:
                    57:06:64:32:68:c1:4c:72:bb:a7:47:52:e3:29:42:
                    fe:07:da:af:60:16:fb:7e:26:b5:19:dc:df:70:03:
                    00:96:0a:ce:02:ad:7e:fc:e6:aa:90:99:9c:54:b0:
                    22:c3:34:d4:8e:6d:e8:b5:2e:82:49:fc:3a:14:ba:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C3:DB:EE:A1:F7:39:07:25:66:95:5C:81:40:EE:ED:C6:50:94:D4
            X509v3 Authority Key Identifier:
                keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:e8:76:d4:cb:25:e9:34:79:bf:45:99:5e:27:6a:33:a6:
         89:20:b7:c2:8b:3d:5a:9c:ed:09:09:d8:b5:23:17:1b:b3:6c:
         9e:9e:0f:4c:bb:90:aa:70:3f:ed:c1:01:16:4b:3f:c6:1f:af:
         33:08:47:f2:a0:ad:78:ef:4f:4c:55:7d:1e:ce:9d:fb:01:66:
         11:04:2a:a2:db:50:6e:ec:95:32:dd:41:91:26:78:15:aa:b8:
         0f:7a:43:68:a3:70:74:c2:a0:42:18:27:f3:44:5d:a4:3a:b1:
         ad:9c:c7:81:6f:ca:07:9f:b9:3d:3a:72:6b:50:30:88:ca:f8:
         40:7d:c9:5a:90:f5:47:c1:88:e8:c0:d8:dd:58:7b:74:53:58:
         96:ac:43:e5:cf:ee:05:43:65:2a:77:4e:3c:fb:37:2d:14:bf:
         ec:65:15:53:59:8a:22:0a:fb:29:a8:ec:5c:58:65:1b:45:7e:
         4e:59:09:74:90:a7:b7:a1:00:0a:90:00:b8:7e:67:5e:83:ff:
         38:ec:29:af:23:bf:b9:86:9b:5d:59:38:f6:56:36:16:e6:88:
         98:b0:af:54:06:b0:b3:1a:5b:94:c5:88:7c:e6:02:84:98:bc:
         02:9b:78:8f:e2:8e:14:76:a4:3d:ec:37:c2:8a:d5:3e:a9:30:
         7e:5d:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:40:12 2026 by rpki-client