Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File:                     0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier:          8SxA6zFrQYVsmhgTOG8712Q+3+se2DsU99gIyjfQ93c=
Subject key identifier:   B3:4A:10:7A:71:08:81:00:D7:01:AE:09:D5:8F:22:16:C6:FE:57:2B
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer:       /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial:       01A0C40E0161E30747A4CD6FAFA69151AD02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number:          15A8
Signing time:             Mon 21 Sep 2026 13:00:47 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:47 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:47 +0000
Files and hashes:         1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: 7Sl0edZYhfU0Ds2SJSMXEz0jbi24WOr1ENQfwzcorAk=)
                          2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:01:61:e3:07:47:a4:cd:6f:af:a6:91:51:ad:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
        Validity
            Not Before: Sep 21 13:00:47 2026 GMT
            Not After : Sep 22 13:00:47 2026 GMT
        Subject: CN=b34a107a71088100d701ae09d58f2216c6fe572b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:1d:06:fa:28:00:25:b8:07:12:f8:b3:ab:
                    7a:ea:05:be:4c:73:e6:5d:a3:08:e1:d5:46:03:7b:
                    02:68:98:7f:c0:53:43:65:60:fa:34:5d:fa:c6:52:
                    e9:36:8f:6e:0d:3d:94:a5:2b:6e:85:64:c9:bd:1b:
                    e6:e6:d8:5a:12:38:c2:b8:b3:d4:07:7c:71:56:8c:
                    1e:28:9d:3d:4b:43:7b:35:53:d6:28:3d:ee:99:70:
                    96:52:99:81:ca:a2:26:f9:2d:a8:14:c0:e5:4c:50:
                    5c:44:2c:b5:77:27:f9:b9:38:9e:a0:a2:e3:92:ff:
                    5f:04:cf:0f:40:6b:b9:63:07:68:d1:d9:58:32:75:
                    b2:2f:00:0a:b4:c5:b3:8e:14:45:c7:03:19:06:3e:
                    88:5d:34:61:53:c6:a7:c8:d6:c8:66:8b:ae:52:1d:
                    b2:bc:6d:66:c0:f7:5b:96:ad:55:ca:49:40:39:f9:
                    77:12:ca:92:90:4f:86:3e:d1:00:23:46:00:6e:bd:
                    80:2f:db:af:c8:a5:18:85:af:5c:2c:cb:b8:d4:10:
                    3f:ba:57:70:05:72:45:07:6b:2c:57:a8:3b:f4:cf:
                    0b:18:f8:58:b8:f6:0d:57:3f:64:fb:77:21:0c:9e:
                    da:60:c7:fc:eb:68:85:af:06:b4:27:e4:0a:2e:b0:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4A:10:7A:71:08:81:00:D7:01:AE:09:D5:8F:22:16:C6:FE:57:2B
            X509v3 Authority Key Identifier:
                keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:26:97:00:d4:90:db:ce:70:0c:ec:25:2b:2d:42:f5:e0:
         3b:bd:ea:6e:9b:d4:ed:29:e5:90:a5:2e:2c:3d:6a:fd:9f:47:
         34:c0:6b:6e:e2:0e:4a:14:33:d7:3b:c7:cb:d7:6d:8f:21:d4:
         d1:59:c4:1e:c4:c8:2e:1e:ff:4f:c3:17:48:e2:b5:6f:ef:5f:
         de:07:e3:96:fb:8c:a5:99:89:07:db:b3:c6:e2:3a:01:1f:3c:
         14:51:8a:cc:aa:3b:c5:5e:c0:95:0c:b6:e2:2e:0e:bd:30:64:
         12:05:54:5b:ba:bd:1c:eb:fa:4a:3d:4e:fe:82:6d:bc:f6:4e:
         cc:22:c3:17:64:fa:63:11:34:84:a3:f0:71:1c:29:d6:87:90:
         1a:22:d4:33:bc:26:9f:99:9b:4b:32:34:2b:d8:ee:c9:4c:e7:
         4e:eb:ac:6a:e6:03:ce:c0:3e:da:2e:17:2b:cd:3a:81:05:b3:
         0a:15:e6:11:82:fb:b8:48:d5:86:61:a9:97:ec:df:f7:c9:9c:
         bc:cd:99:42:e0:eb:db:27:1d:2e:0f:ea:2c:14:cd:7d:c2:58:
         5c:e6:be:9a:e1:ac:22:e5:d6:e3:b7:95:7d:1a:19:e7:ec:cd:
         f1:fb:da:fb:e7:01:84:e1:e1:21:58:92:cb:f9:d1:3b:b6:a7:
         28:89:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:41:02 2026 by rpki-client