Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File:                     ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier:          DruVMrNvMM6s0941sIu6VMsL79V09MplxJ8vBclFlvQ=
Subject key identifier:   E3:02:EF:9F:64:1A:6F:7A:BE:A4:F8:76:09:2A:40:83:80:7A:29:0C
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer:       /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial:       01A13B5BBE9836AD8EB8E2D4312BD586C048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number:          18F1
Signing time:             Wed 14 Oct 2026 17:00:30 +0000
Manifest this update:     Wed 14 Oct 2026 17:00:30 +0000
Manifest next update:     Thu 15 Oct 2026 17:00:30 +0000
Files and hashes:         1: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: OxbJo64jhykK4wnKqsj8X96Cp3SpRRSHcpve+KmbJNg=)
                          2: c0zEfFDSZZWFy-vBS9NWpwPjwoE.roa (hash: Degy9LDZTNrQEBY/nXvirHbXKz42WXh/PcwFt1G3pj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:5b:be:98:36:ad:8e:b8:e2:d4:31:2b:d5:86:c0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
        Validity
            Not Before: Oct 14 17:00:30 2026 GMT
            Not After : Oct 15 17:00:30 2026 GMT
        Subject: CN=e302ef9f641a6f7abea4f876092a4083807a290c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:06:2d:6e:70:34:7d:11:06:d2:07:f0:2a:
                    21:62:f9:83:93:19:44:c7:7b:0b:09:30:e9:32:51:
                    be:3d:f0:93:aa:c3:19:d2:6e:f9:6d:66:6d:ea:cb:
                    0e:36:0e:da:6c:68:97:09:91:77:c9:d2:a3:0b:7c:
                    6b:c2:0b:ad:fc:07:7f:78:a6:62:4b:48:0c:6b:9d:
                    b2:3d:3b:cf:a6:27:bd:30:9e:c8:cd:f4:21:aa:90:
                    62:77:52:9c:6d:6e:37:4b:72:45:5a:8a:56:dd:d0:
                    32:58:e6:5d:06:43:d5:b8:a3:2a:d6:bc:75:1a:87:
                    68:d0:bc:8b:90:fc:f6:e4:62:f5:d3:e1:c3:1c:17:
                    53:b0:08:9e:69:a2:cc:ad:f8:0e:fc:fc:6a:e0:cb:
                    11:0a:a3:d6:64:f6:54:c2:90:c0:c1:1e:80:7f:3b:
                    1e:63:ba:24:38:d1:df:c3:ae:45:6c:ed:58:f6:76:
                    29:e7:7c:e4:a4:5d:f1:fb:8f:fb:37:f3:04:6a:5a:
                    31:be:0a:67:8d:8f:7c:82:4d:ba:67:c3:04:e7:e5:
                    a1:fd:74:c8:df:57:23:82:9a:ad:21:81:2a:0f:32:
                    3e:43:48:7e:00:84:f4:ad:60:15:7a:43:47:51:34:
                    a0:c8:ab:85:9c:ee:69:b6:f0:f0:79:d7:2c:a1:7a:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:EF:9F:64:1A:6F:7A:BE:A4:F8:76:09:2A:40:83:80:7A:29:0C
            X509v3 Authority Key Identifier:
                keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:91:4c:c3:9d:8e:0b:5a:2a:40:36:e8:4b:4e:c2:ca:fb:
         a9:f0:f5:a2:9f:76:76:10:25:75:ce:8d:58:f5:44:17:20:54:
         2c:07:13:92:3b:b2:94:77:59:1d:35:1c:b5:e6:1a:17:40:3d:
         da:03:08:4f:76:97:87:6a:ab:4c:0b:61:ff:5c:04:74:13:ad:
         1e:65:be:78:ad:91:b8:c7:1e:74:a9:a8:e3:2e:df:9b:8f:98:
         99:dd:bb:15:3a:fa:66:d5:55:00:07:fc:b1:c5:9b:33:12:93:
         df:b4:74:48:d7:00:27:63:2e:fd:6e:87:c5:f3:b1:bd:9d:4e:
         ca:b5:f2:5a:a3:62:23:a2:5e:e8:21:00:40:3b:88:22:4f:32:
         29:7b:02:d9:71:f6:26:35:82:65:1b:0d:4b:f0:13:dc:07:72:
         55:7c:ef:8d:82:53:f4:03:d2:2b:ce:d9:30:4c:ab:aa:ed:62:
         af:cb:19:ac:2d:ee:61:a5:fb:af:81:fc:d8:05:1d:5e:e2:b5:
         88:b5:ff:a0:1d:35:fe:fc:e2:07:23:82:03:da:45:76:a6:4b:
         33:90:8a:4e:ea:49:ad:0f:c9:a6:d4:60:ea:00:06:c3:41:05:
         40:0b:d0:7b:53:96:a9:e9:28:14:ad:e2:13:24:76:6c:9f:8f:
         59:e5:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:04:58 2026 by rpki-client