Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File:                     Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier:          q9VmEIq8HsUXmLpB4Ybby1+vMx8MTQTFv3xwwlVUnvQ=
Subject key identifier:   93:66:F4:7C:6B:82:22:3E:98:12:E9:9F:7A:4E:B1:C8:EF:72:C9:A9
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer:       /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial:       01A13DB8705B603EB01C76663E1F5C18127B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number:          099F
Signing time:             Thu 15 Oct 2026 04:00:59 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:59 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:59 +0000
Files and hashes:         1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
                          2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: SjS9OhG/2X01sscUwjF5IusEaiCkKDeqjzFLqYYCrIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:70:5b:60:3e:b0:1c:76:66:3e:1f:5c:18:12:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
        Validity
            Not Before: Oct 15 04:00:59 2026 GMT
            Not After : Oct 16 04:00:59 2026 GMT
        Subject: CN=9366f47c6b82223e9812e99f7a4eb1c8ef72c9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:a5:61:d7:61:9d:7b:05:19:6d:c6:8c:9b:
                    20:9c:bf:42:77:91:13:00:d1:a1:75:56:05:d6:bd:
                    04:1c:9d:60:3a:0b:a9:a8:8c:0d:e6:18:bf:e5:22:
                    90:70:6e:cb:63:d0:43:f2:ab:7c:c0:20:9f:8d:06:
                    f2:c5:b4:53:4b:5a:97:7e:26:38:f4:37:d7:5c:15:
                    90:d6:fd:9f:4f:80:c8:d6:3c:06:91:40:dd:a2:c6:
                    dc:95:59:53:1c:87:8f:ce:1b:52:08:cf:b9:b3:35:
                    82:39:75:7b:a1:98:42:bf:48:b2:d6:4a:61:7d:bc:
                    d8:84:c4:a9:26:06:48:48:bf:ab:6e:c4:da:a5:aa:
                    a2:88:bd:bd:65:a6:7a:cf:1a:5e:c8:86:78:ab:92:
                    6a:12:be:ac:b4:fd:56:e0:7d:3e:6f:d5:e8:38:84:
                    db:6d:9f:e8:62:13:5e:9a:85:d4:87:aa:84:55:a6:
                    c3:e0:88:91:d7:0e:e7:e4:8d:52:14:06:13:2c:b7:
                    97:48:0a:ea:53:f0:a5:92:09:e7:ce:a9:f1:e3:14:
                    4b:9f:68:4b:7f:8c:b0:e7:30:21:a4:4f:63:9f:5b:
                    4c:6a:44:7e:78:26:19:8a:e1:f7:b7:22:40:92:f1:
                    10:f7:21:60:e9:e9:51:d4:4c:7a:18:f5:85:00:09:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:66:F4:7C:6B:82:22:3E:98:12:E9:9F:7A:4E:B1:C8:EF:72:C9:A9
            X509v3 Authority Key Identifier:
                keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:d0:f5:87:4b:59:89:89:16:36:09:d6:87:3b:b4:4f:94:
         ba:5e:81:aa:e3:29:10:9c:2e:f8:7c:c8:7f:ad:6e:62:09:e2:
         d7:b5:c1:c0:c8:57:3d:a0:0c:1f:e2:0a:ff:34:01:d6:1f:fc:
         fd:b1:3f:a0:37:ea:50:81:83:74:21:98:89:6c:5f:3c:59:0b:
         db:80:b0:68:8f:83:2b:6f:29:02:38:70:10:1a:5e:bd:a4:5c:
         37:bf:dd:db:b5:1a:36:8a:7b:6f:ad:95:b9:f2:4c:43:ee:54:
         e4:ab:39:b8:3c:1c:6e:69:87:ca:16:3e:fe:73:18:a0:42:3c:
         d9:d2:ab:26:7b:fe:7e:5b:e6:fc:19:9b:30:c0:b9:a5:08:a5:
         6f:8f:67:0e:ec:ba:82:97:4c:d0:8d:39:c2:8e:9f:cc:c3:a0:
         d1:0e:7d:1a:22:57:d3:aa:d3:1b:d9:b4:38:06:5a:0b:0f:54:
         9d:0c:7e:04:02:05:b0:ac:d5:a6:9c:88:ea:7e:c2:08:35:d9:
         42:41:ef:aa:82:ae:9f:7e:b4:f9:df:7e:5f:6d:ce:32:8a:54:
         ee:a4:70:03:92:a0:41:6b:f9:23:37:1b:9d:6c:56:cb:9e:34:
         da:6b:69:d2:ae:60:15:66:cb:1c:c6:d4:a5:d9:1f:dc:87:c1:
         6c:97:00:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:02:13 2026 by rpki-client