Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          NpTVQu5IArT00wZOMH9Or3zi6R43wZJ1WvEPfK4ykmw=
Subject key identifier:   2D:EB:42:FB:91:55:7A:24:35:8E:9B:94:7F:57:A7:94:35:F9:5E:9B
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       01A17A7218FF642E30FDA6C6EE65DDA45DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          1AC6
Signing time:             Mon 26 Oct 2026 23:01:00 +0000
Manifest this update:     Mon 26 Oct 2026 23:01:00 +0000
Manifest next update:     Tue 27 Oct 2026 23:01:00 +0000
Files and hashes:         1: GJZwZ1mhnOH65Nouqdeal3NahIo.asa (hash: nsKksxN8E+XqWBRESNIPZeDToWlex4siuJfC0nnT4wg=)
                          2: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: 0pj4b1z9e1YEBEyvXZqu5sCmnv43z/vmTNe2vhyeBj0=)
                          3: grSCYxr48GkiiLbXBFVvfPRGYDo.roa (hash: ORzXiCXEzDF1CBNSnKaHZkAM6lGFJh0djBj0NrfV6eg=)
                          4: mzEPgdHmNv6bVe96qDtXIbjnZeI.roa (hash: tpqt79V0TYHF3bsLDiHBBd9SAjg/wnNF2aCiJu5NIss=)
                          5: nqWceW59cc5C0IxxcTrydFGb1mM.roa (hash: Mg96y0myQny6t5nbNgLVhCKgERm7JW8N5FpEDhGxjoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:72:18:ff:64:2e:30:fd:a6:c6:ee:65:dd:a4:5d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Oct 26 23:01:00 2026 GMT
            Not After : Oct 27 23:01:00 2026 GMT
        Subject: CN=2deb42fb91557a24358e9b947f57a79435f95e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:d7:4e:7a:5b:ba:f3:48:5a:69:5e:24:66:
                    9f:34:4b:b7:a8:e4:87:e7:d6:35:e9:36:79:e6:dc:
                    ab:55:81:ba:51:ec:2e:48:ab:7f:db:87:4c:90:50:
                    3b:89:8c:e9:87:99:85:85:09:7c:57:80:e8:90:0b:
                    b8:33:1b:5f:30:68:cf:33:a7:94:dc:c4:de:f9:97:
                    e0:0c:77:03:e1:2d:14:c4:46:5c:c6:53:9b:48:2a:
                    c3:33:bf:6f:e3:0b:c4:a0:83:64:a2:9e:e0:83:7d:
                    09:dd:26:51:d1:34:7b:cc:14:eb:16:60:14:86:b4:
                    33:6a:86:cf:89:30:21:f5:f1:95:76:2b:03:31:25:
                    0e:77:56:2c:a7:73:70:5f:c5:2b:bf:65:ab:66:d0:
                    64:a4:3d:6f:85:ee:8d:d6:83:0b:d3:bf:0c:10:e5:
                    ab:a3:a6:97:66:48:17:af:b6:f4:56:47:60:7b:79:
                    1f:b4:86:27:3d:69:4b:4c:f5:69:25:36:7a:9e:21:
                    31:dd:61:f0:13:27:f7:14:0a:fe:c4:a4:71:8f:1d:
                    09:1e:e2:f5:33:7a:c6:1f:47:48:4a:c4:44:0a:fe:
                    2d:f3:f2:57:4d:a0:9d:77:10:b4:89:a2:8f:85:33:
                    6b:1a:16:db:5f:6a:d5:1b:de:0f:b5:37:04:2e:7a:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EB:42:FB:91:55:7A:24:35:8E:9B:94:7F:57:A7:94:35:F9:5E:9B
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f9:fb:64:af:e6:06:b2:09:16:dd:41:93:5d:6a:17:9a:f3:
         7f:09:e5:e8:56:5e:4a:7e:a3:f4:f8:8e:4c:90:bd:b4:0b:d3:
         fc:a7:5e:2a:b3:76:2c:05:80:55:7b:b7:2a:cd:04:29:e5:24:
         d8:ab:85:bf:10:8d:80:32:b6:39:26:d7:3b:79:37:d9:81:8c:
         e0:fd:9d:5b:77:25:79:8b:3d:9c:03:3f:af:f6:3f:8a:73:a0:
         50:7d:49:d8:8f:60:99:3d:60:87:76:48:2c:80:00:f1:8d:77:
         07:f4:bd:1a:60:5f:e0:6b:20:e1:58:26:5c:31:8d:8a:17:d1:
         9f:14:0f:c5:c3:c2:a0:41:47:fc:75:4c:54:20:2f:86:4b:5d:
         39:9e:d7:8c:07:fb:35:d7:30:6a:b9:33:46:5a:ff:1e:11:9a:
         06:5b:a3:20:2f:24:54:1d:d5:61:cc:ee:0f:b8:d1:e2:14:7e:
         ff:2b:03:37:3b:92:fa:34:44:bc:9c:95:92:4d:7f:ce:a0:f1:
         f1:07:2d:d1:73:59:08:5d:9d:ae:01:cd:38:ba:46:9b:bb:7a:
         c4:7f:70:ed:66:df:75:ea:f0:0f:e4:22:57:26:43:ea:1e:d4:
         ed:ce:43:39:73:db:c7:46:9f:ca:3e:1b:f5:5c:a6:f8:cc:53:
         69:b8:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:38:33 2026 by rpki-client