Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          GWtHpxZac6iveS5z4LN76xXHaKafETWBK9SvAHCqOfQ=
Subject key identifier:   EE:12:45:ED:5D:E6:8B:CB:67:87:D4:77:E3:C8:FA:3A:7D:4D:5D:FC
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       01A1AABA051A6D4CF84B86E213D973E79C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          162F
Signing time:             Thu 05 Nov 2026 08:01:20 +0000
Manifest this update:     Thu 05 Nov 2026 08:01:20 +0000
Manifest next update:     Fri 06 Nov 2026 08:01:20 +0000
Files and hashes:         1: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (hash: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E=)
                          2: 143uR_Opu7Zeu7uxf8rhyVqs6pA.roa (hash: gnOcz10DzYsdv7a3eo6ReHVx6t0LmKA4aY2SFi+8K5g=)
                          3: 5GRL2xTwlhtB45CKu5VYBHVeCs8.roa (hash: xHs3aoTc2u94fp2p4GMEh09FXKLHJU4FJ23Xwrl2mb8=)
                          4: LImeWPjRU0bTYqqH-HKe4xkFuc0.roa (hash: zqLkD7GL5OBQzT/9VJg9wwwTHEy5OhmPX5ktJW+mT7A=)
                          5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: KqAAF9S386nEffFf8j3Z0MvHIcHyH47ztRJ1guGnr2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:ba:05:1a:6d:4c:f8:4b:86:e2:13:d9:73:e7:9c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: Nov  5 08:01:20 2026 GMT
            Not After : Nov  6 08:01:20 2026 GMT
        Subject: CN=ee1245ed5de68bcb6787d477e3c8fa3a7d4d5dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:64:71:1d:9d:e5:e2:65:ac:f3:22:75:48:
                    11:bf:ec:3e:45:7d:01:b9:6e:0a:a4:b7:68:1a:9a:
                    84:86:ab:35:80:ff:35:45:e9:9f:c2:4d:59:44:d4:
                    36:97:44:cf:f2:16:c8:b7:11:3e:c7:9b:07:aa:65:
                    b7:4c:f7:43:4b:58:fd:ea:1f:4c:eb:da:da:61:22:
                    35:6f:02:2d:09:b1:9d:2a:fc:5d:5c:22:c9:11:20:
                    c3:ff:41:4e:74:43:d6:1a:87:18:6f:c1:32:20:6b:
                    32:b4:3d:b7:fe:d0:eb:b9:a2:b9:79:79:47:c7:10:
                    51:8a:bc:36:35:a2:7a:5c:57:49:11:f0:15:6d:94:
                    ef:75:6e:ac:84:e8:3d:0b:7b:82:29:6d:c8:d8:9f:
                    d4:aa:81:b9:c2:5a:fc:3d:eb:55:2b:b4:c9:25:7c:
                    53:b6:c0:90:24:d2:4a:25:96:36:a5:ce:dd:03:9d:
                    06:42:ac:81:87:f1:b7:dd:c3:11:22:66:93:4f:7d:
                    f2:89:b1:cd:4f:2a:9a:7c:83:94:cf:cf:38:5a:20:
                    a5:05:1f:81:f8:82:00:f7:38:63:c4:1f:2b:81:8b:
                    c0:04:b4:0c:f2:dc:27:9e:aa:63:85:0b:e6:60:cb:
                    a9:ae:7d:af:c8:ae:4b:29:00:44:1b:23:11:5b:b6:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:45:ED:5D:E6:8B:CB:67:87:D4:77:E3:C8:FA:3A:7D:4D:5D:FC
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:dc:9c:c8:aa:ea:08:6e:82:7e:37:59:c5:b5:9c:0c:ae:
         f5:cf:15:73:14:24:ca:a1:41:b5:cf:7e:fe:9d:26:98:8b:93:
         9b:39:ce:a9:48:e0:91:bd:d5:4e:d1:09:e5:8a:a5:bb:bb:fd:
         7a:4c:cd:94:24:97:30:0c:65:ec:f6:34:d8:00:dd:11:43:b2:
         44:55:ed:1e:aa:a6:83:d7:29:be:a6:25:b9:db:12:a1:ad:f3:
         4d:8b:16:bc:28:6c:41:e7:37:58:25:42:94:c5:d7:a6:87:ec:
         4c:60:87:55:1f:a3:cc:e1:42:eb:8d:60:ff:84:38:ac:d1:ba:
         c8:dd:77:66:09:29:ea:77:0a:a8:39:9a:f7:8f:9b:81:3a:53:
         ce:51:89:34:12:ef:57:58:fe:a8:17:83:fd:9f:08:80:e3:70:
         ef:52:bb:dc:2b:38:99:79:5f:4f:17:9b:6e:af:a9:81:83:6f:
         72:5c:5a:76:ed:ca:e1:32:02:bf:14:31:05:55:50:e3:98:ec:
         c5:46:d3:95:45:ab:54:5d:cc:37:67:10:68:af:93:0e:a3:bf:
         e6:33:72:f2:c1:c0:70:a7:68:f7:9e:00:65:d9:e8:ce:8e:a3:
         84:cb:95:fd:b9:43:f4:b3:7f:aa:8e:86:9e:a5:c9:29:12:db:
         dd:cd:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:49:43 2026 by rpki-client