Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File:                     ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier:          NSdQYFDSqJVlooSOHZVlFAE16uIqrQmj/3zMeUFrGao=
Subject key identifier:   95:26:81:3C:85:68:58:57:88:63:AC:99:5B:F9:3C:14:F2:19:D3:EF
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer:       /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial:       01A13F700255EB5C3AB60F0A279EDE0C6B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number:          0BC5
Signing time:             Thu 15 Oct 2026 12:01:07 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:07 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:07 +0000
Files and hashes:         1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=)
                          2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: WJxgfMvLS3natWaRjR+Hum0LBjStH2ahHKQ0VYx4B3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:02:55:eb:5c:3a:b6:0f:0a:27:9e:de:0c:6b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
        Validity
            Not Before: Oct 15 12:01:07 2026 GMT
            Not After : Oct 16 12:01:07 2026 GMT
        Subject: CN=9526813c856858578863ac995bf93c14f219d3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:d6:03:fd:a7:d4:59:68:8b:fc:8a:43:92:
                    1d:87:12:21:fc:25:6d:28:d6:7c:9b:b5:56:aa:6e:
                    15:9a:85:45:df:34:a0:90:3a:4a:d8:81:8b:63:d4:
                    63:06:f5:81:1c:35:9f:72:97:5b:c7:3c:6c:d5:a8:
                    a1:eb:2a:c2:6d:7d:fb:de:19:a5:39:71:0e:b4:d8:
                    76:38:ea:2d:e8:eb:5c:37:bc:d4:7d:4b:6f:15:db:
                    ef:0e:22:05:b9:a4:45:a3:af:a8:8f:81:8b:44:db:
                    52:0a:c1:b8:40:57:88:aa:9c:af:d6:f3:c9:42:91:
                    a8:26:18:b6:91:6a:5b:77:22:05:49:7a:58:3b:89:
                    03:51:6b:8c:de:0a:46:5a:0c:af:fd:5c:1e:78:2f:
                    55:ab:9e:a9:f9:a2:c5:b5:58:4e:47:63:fd:6b:d9:
                    4f:ef:37:f5:42:53:0a:2c:08:ed:b7:a5:70:9b:3b:
                    08:fc:f5:cb:86:18:94:75:fd:73:11:f3:be:1d:63:
                    45:8f:8e:59:68:23:67:6c:5a:0f:e5:7c:48:82:6f:
                    cd:f0:b2:d3:ca:56:41:21:65:b0:df:1f:08:56:93:
                    d1:d8:39:9a:d2:ef:e3:9d:71:b2:87:e9:41:32:06:
                    53:11:ed:f2:b0:49:51:43:01:44:62:87:bb:a7:d2:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:26:81:3C:85:68:58:57:88:63:AC:99:5B:F9:3C:14:F2:19:D3:EF
            X509v3 Authority Key Identifier:
                keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:2d:15:c2:6b:ab:9d:35:fc:c4:6f:4f:2b:95:40:8e:dc:
         8e:d5:33:37:22:8a:05:eb:32:6b:a1:aa:bf:4c:b1:6f:24:d3:
         0c:d1:fe:48:a4:23:e8:0c:c2:3f:3d:54:c6:2f:cc:3b:8f:3c:
         75:df:83:03:2a:70:95:b0:d6:ce:b9:61:7f:3c:19:16:7f:08:
         62:e1:47:31:a7:b3:50:ec:bb:bb:f3:4d:49:18:72:31:09:9d:
         bd:2e:e4:32:ad:19:b1:1c:be:c1:1a:8e:ff:7f:ba:c9:71:0c:
         fe:94:4c:75:76:54:77:69:12:24:be:c6:e1:d3:d4:d4:55:94:
         3f:0b:5e:65:e6:36:44:bd:06:bc:f6:8f:f7:3a:43:3f:5f:c3:
         ac:61:a4:09:29:84:9b:49:09:7e:29:e6:8f:fb:33:30:b5:4b:
         b3:51:0c:7e:07:95:22:c7:7f:e6:81:0a:9e:13:ed:f4:3d:f6:
         48:49:d1:5a:76:ae:ce:c7:40:0b:57:29:41:3f:18:5b:ef:e0:
         0f:b0:be:77:65:0c:d2:b3:cc:20:13:c4:5b:de:d8:24:51:dc:
         fc:c0:04:5d:d3:7c:ac:7a:73:1c:cc:da:f2:43:42:00:fb:b6:
         42:4c:67:49:13:fa:90:62:a0:e5:1d:81:86:fb:70:5d:3b:e3:
         23:dc:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:54:33 2026 by rpki-client