Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          oR8L+STWhj7zmmaN9tEs6eabgSxwpVEfOrlZju+kKq0=
Subject key identifier:   E3:F7:3C:A5:4E:66:40:49:C0:36:43:F3:4A:62:10:CA:D5:C6:F0:2D
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       01A0D5A6A224E97638F09B58EED92275B336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 23:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:02 +0000
Files and hashes:         1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
                          2: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
                          3: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
                          4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
                          5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: FzVkVlNjtRUXrYK2263WCKGTWtqgGHkUUdP6jQzuhd4=)
                          6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
                          7: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (hash: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:a2:24:e9:76:38:f0:9b:58:ee:d9:22:75:b3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Sep 24 23:01:02 2026 GMT
            Not After : Sep 25 23:01:02 2026 GMT
        Subject: CN=e3f73ca54e664049c03643f34a6210cad5c6f02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:f8:4e:92:1f:9f:29:f4:80:f7:e7:da:5e:
                    b0:32:a9:cc:23:de:45:58:2b:72:d5:22:9e:ba:c6:
                    bd:cd:f1:88:3d:a6:5f:4d:da:71:b4:7b:1d:3e:9e:
                    8b:b1:bd:a4:e9:ec:e2:46:32:03:6d:59:6c:2f:91:
                    8d:58:26:ef:6d:2a:5d:97:64:b8:a5:2e:cb:8d:aa:
                    80:c7:f8:41:c2:c1:25:74:7e:5a:d9:bf:80:09:b4:
                    78:99:e6:f7:99:44:54:f3:80:8a:7f:5e:36:72:b1:
                    48:92:2e:e5:c7:f9:38:0d:14:ca:b7:26:17:b6:b8:
                    91:79:43:ae:1c:9f:68:bf:bc:58:92:83:24:b5:80:
                    5a:ea:27:8b:6d:15:71:50:55:34:fd:87:d1:e7:6a:
                    69:a3:fc:fb:13:20:4f:10:09:95:f2:ac:fe:1f:5a:
                    5d:c6:67:3a:6d:30:b5:61:01:a1:4d:62:a7:33:87:
                    e3:28:d6:99:8b:28:23:8f:e4:e6:91:28:2c:58:60:
                    01:ce:7e:bc:ac:b8:87:c9:f1:09:54:3e:9b:bf:fa:
                    9e:3a:da:f9:13:d0:c2:55:af:92:68:5b:7c:ba:32:
                    51:2d:1d:62:28:16:13:4a:6d:e3:70:fc:fd:f9:d7:
                    8f:57:8b:7d:79:0e:8e:6a:54:70:0b:78:36:9a:aa:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F7:3C:A5:4E:66:40:49:C0:36:43:F3:4A:62:10:CA:D5:C6:F0:2D
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:63:cf:f7:92:3d:77:4f:7f:c1:fb:42:02:24:bd:68:6e:f5:
         1f:87:52:9d:36:24:c0:2b:19:73:58:4e:f9:a7:f3:1d:c1:a7:
         37:8d:06:74:bd:9d:27:bb:5a:fa:e1:06:79:e9:d1:24:3e:bb:
         5f:78:86:69:7c:37:78:f7:28:4b:d1:05:31:d3:42:e9:5f:84:
         16:b5:32:61:3c:34:5f:56:0b:eb:cd:77:d8:79:03:3d:b2:80:
         31:f8:7a:90:b0:19:ba:95:bf:e3:b3:aa:fb:b6:90:d2:e8:1f:
         0c:90:bd:0c:03:29:01:d8:36:04:94:be:91:5b:79:23:c0:fe:
         97:9d:0a:41:be:e9:cb:67:a5:c7:60:7f:33:17:08:47:8e:d1:
         e7:22:9e:53:24:8d:20:7e:bb:ab:32:f7:a7:3e:f9:79:c1:42:
         4a:5e:04:ec:b4:49:eb:55:d5:f1:c4:7f:37:d5:6f:77:51:c0:
         e7:cd:9d:a5:7d:14:b5:87:2d:78:51:9f:f1:db:40:60:23:77:
         5e:36:90:a2:2f:5c:c8:d5:b0:d2:f4:26:eb:f5:02:b0:d1:2d:
         30:3c:91:44:86:ce:32:c7:06:37:3f:57:42:d2:8a:52:71:56:
         ac:d7:32:dc:96:7c:bf:1e:80:27:31:4d:c2:8b:05:6a:2c:af:
         5e:d6:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:03:39 2026 by rpki-client