Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File:                     dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier:          8Wty/yqBSTufLHG8SdOUcBzkaScop3ATuRokHLeYCws=
Subject key identifier:   C5:62:E9:59:EC:1B:79:5C:5F:2E:1C:44:06:38:54:F2:9C:3C:9B:65
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer:       /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial:       01A0BE7948EEDF997045C3967C9A0E668158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number:          0B9B
Signing time:             Sun 20 Sep 2026 11:00:14 +0000
Manifest this update:     Sun 20 Sep 2026 11:00:14 +0000
Manifest next update:     Mon 21 Sep 2026 11:00:14 +0000
Files and hashes:         1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
                          2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
                          3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: tuGVfWE9HYasKnssJA1Au2VsQCzXKFYlKZpp+BfcAyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:79:48:ee:df:99:70:45:c3:96:7c:9a:0e:66:81:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
        Validity
            Not Before: Sep 20 11:00:14 2026 GMT
            Not After : Sep 21 11:00:14 2026 GMT
        Subject: CN=c562e959ec1b795c5f2e1c44063854f29c3c9b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:45:9e:a0:76:b7:8d:0d:15:46:d7:e2:92:
                    27:5a:e7:7e:17:fc:b1:5e:80:1f:a9:80:e5:58:0d:
                    5f:9c:d3:a9:49:92:b1:43:e4:7a:f5:9b:c7:da:dd:
                    ef:44:5b:45:c9:eb:4e:ee:b3:29:44:38:b5:02:05:
                    56:ba:97:01:47:9a:98:c6:4f:3e:c5:c6:86:ef:75:
                    b3:1e:32:d6:d2:3d:f6:50:44:9d:2b:c9:01:5d:3a:
                    b0:a8:56:25:06:b4:72:51:dc:ac:b2:ca:39:12:e2:
                    61:70:19:fb:74:c9:7c:dd:cb:b6:ad:15:54:f3:af:
                    5b:71:b0:dc:55:f1:40:56:2c:46:70:71:42:da:1b:
                    5d:dc:2f:28:86:b4:e2:28:33:3a:e4:37:5f:6b:e0:
                    46:2f:0d:77:f0:a7:52:f6:78:e5:bf:ba:e5:f3:a6:
                    95:fa:6a:af:bd:1c:51:0a:0a:5f:a6:c6:e0:c4:f3:
                    91:94:92:f9:7d:f2:6a:95:62:15:3c:97:25:07:81:
                    e6:ec:c0:a7:71:88:84:94:e7:41:44:bd:07:65:24:
                    35:17:53:89:22:ac:3d:fc:df:9a:53:fc:43:8d:15:
                    6d:d3:0a:b5:dd:45:95:5d:86:68:74:12:d5:a9:7a:
                    2d:0e:45:e1:b9:d8:e6:eb:70:87:2f:bf:c4:92:18:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:62:E9:59:EC:1B:79:5C:5F:2E:1C:44:06:38:54:F2:9C:3C:9B:65
            X509v3 Authority Key Identifier:
                keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:11:d9:a8:ea:41:c4:be:60:52:1e:7e:9e:a5:2c:57:fd:83:
         f6:50:fc:f1:57:3b:1d:7b:b9:b1:73:d5:f9:a9:69:c9:8e:a9:
         ec:97:5a:48:c8:ec:9f:18:2c:b4:b4:cb:35:62:80:e5:c7:be:
         e6:d5:7a:1f:5a:f3:2e:9d:e3:a7:a2:72:77:f5:4e:ae:7a:42:
         e4:fe:6d:82:9b:6e:ce:6a:9f:2e:82:f5:91:30:11:6b:8e:e4:
         e9:7a:2a:95:dd:34:e7:3a:38:0d:d6:d5:73:e0:4c:b0:bb:0a:
         23:dd:36:6e:89:d9:d0:42:e7:b0:42:ea:ef:19:ff:8c:1a:73:
         22:d5:ad:67:df:7c:3b:58:1b:34:64:df:79:3b:ca:79:cd:32:
         e0:9b:d1:4a:44:7e:a9:fa:02:f8:e7:15:fe:5c:91:9e:f0:3c:
         36:eb:60:0b:e7:42:0d:bc:f0:9e:39:9e:56:15:9f:42:99:9e:
         06:f2:9d:25:a9:12:a2:d5:ee:de:91:1d:7f:8a:a1:41:2e:c0:
         34:9a:34:02:c7:0a:71:5b:3b:48:3d:9e:c1:f6:e3:04:68:20:
         92:75:21:cc:e8:46:ec:ec:4e:8f:41:70:4d:f9:12:eb:d1:c0:
         b1:70:5f:4f:6d:c3:3a:44:10:a8:db:52:7b:ba:7a:6d:6d:2b:
         43:2d:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:21:56 2026 by rpki-client