Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File:                     Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier:          nwkyFeF3Bba3UXyNs9QT/4uf9e1ztDkADFuDTbXR91w=
Subject key identifier:   FB:33:64:BE:D7:05:81:6A:15:95:33:92:12:44:E5:85:9B:2A:EE:7B
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer:       /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial:       01A185636DB5F818AA29A2485CA9142E0159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number:          0588
Signing time:             Thu 29 Oct 2026 02:00:48 +0000
Manifest this update:     Thu 29 Oct 2026 02:00:48 +0000
Manifest next update:     Fri 30 Oct 2026 02:00:48 +0000
Files and hashes:         1: 7eUHBGs5-5ccLiuJle7ggH6TQjE.asa (hash: Bnt40cDgGP9nDvETNeaVD27iCk/Fc7R7LcRjaxb8Cnw=)
                          2: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: ZyfG0jokq0Cu9kXI3C7pqPGMOVGFcdsa1Pg0azAD5Zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:63:6d:b5:f8:18:aa:29:a2:48:5c:a9:14:2e:01:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
        Validity
            Not Before: Oct 29 02:00:48 2026 GMT
            Not After : Oct 30 02:00:48 2026 GMT
        Subject: CN=fb3364bed705816a159533921244e5859b2aee7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:39:75:29:a1:f4:84:5f:10:9b:a8:17:bd:
                    04:cf:34:16:09:01:3d:e3:90:21:2b:13:b1:f9:1c:
                    d2:ae:05:f9:e1:43:bf:c5:90:d1:c7:58:64:f0:84:
                    2c:8b:35:bd:34:cc:e8:46:40:fb:a8:60:62:04:66:
                    30:0e:e1:ac:25:ac:f2:b6:21:c8:cf:73:08:d7:1b:
                    c4:62:20:55:59:db:ef:5a:7c:57:8a:d6:9d:b9:2f:
                    4f:03:85:33:cb:01:ef:98:9d:ba:13:38:9c:96:53:
                    24:fe:8d:08:fe:25:4c:b1:92:65:aa:25:bd:c3:3e:
                    3d:e0:f8:b8:68:4d:db:b5:48:12:02:c6:ad:e6:ae:
                    9b:1e:bb:04:29:3d:4e:d1:df:3b:fc:6c:f5:2f:c2:
                    9c:48:8a:c6:6e:c0:94:22:e4:ce:2d:e2:2f:5f:43:
                    96:6b:ab:da:17:17:7f:30:71:62:b6:a0:90:e8:04:
                    88:46:6a:64:97:84:06:3a:a0:87:75:e3:85:89:0d:
                    55:fe:27:ee:37:84:0e:65:47:56:6a:8c:91:4d:47:
                    f2:1f:12:be:4d:63:fe:e3:1b:a1:5b:bd:34:f7:b5:
                    69:d3:8f:a1:00:ff:35:be:10:3e:84:e8:29:b2:78:
                    1a:23:93:5b:f3:0d:8d:d6:d7:2b:28:0c:28:4d:16:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:33:64:BE:D7:05:81:6A:15:95:33:92:12:44:E5:85:9B:2A:EE:7B
            X509v3 Authority Key Identifier:
                keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:85:ec:a2:bb:4d:61:5c:05:14:c8:18:c4:9a:49:cc:7e:00:
         2e:52:f7:65:d8:b2:1e:18:b9:55:32:52:fe:65:c7:73:28:3b:
         18:59:82:52:b5:e4:2b:4b:77:73:e6:23:d4:39:c3:57:aa:ed:
         7f:59:a6:c6:cc:c0:f0:49:97:e3:c8:f3:5f:60:49:e4:1d:be:
         35:f1:9f:00:1f:3e:78:ae:b6:98:75:36:0d:ef:fb:73:30:59:
         38:19:00:e8:81:bd:42:ed:fd:57:8a:71:fe:8e:9e:96:6b:c4:
         cd:ae:6b:43:38:18:5c:32:b0:e8:d7:75:8b:b0:be:bf:a2:87:
         9c:67:2c:6f:36:0c:06:3a:44:1f:b1:8f:54:ea:98:18:39:74:
         60:3a:57:82:6e:4d:d9:ed:a6:e8:cd:bf:45:33:17:b7:2a:d8:
         87:0f:99:89:26:7f:f2:36:f6:c4:45:42:73:04:5a:50:bb:f4:
         a0:48:02:07:9b:32:79:10:ca:17:a3:c5:c7:04:77:0d:23:1b:
         e6:b0:8d:ef:51:da:10:a8:a9:b2:64:74:6f:fd:48:fb:8f:91:
         70:3e:9e:f7:b3:ee:e8:20:3e:37:d9:62:0b:63:3f:56:54:1a:
         e2:2b:c0:57:24:d5:a2:81:26:1a:1a:e7:4c:37:b1:ba:87:f2:
         61:99:e9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFY221+BiqKaJIXKkULgFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTZhOGViYjAxMTExOWIyZjY5NTMyN2ZiMTZlNTFmODg3
MDQ0NzkwHhcNMjYxMDI5MDIwMDQ4WhcNMjYxMDMwMDIwMDQ4WjAzMTEwLwYDVQQD
EyhmYjMzNjRiZWQ3MDU4MTZhMTU5NTMzOTIxMjQ0ZTU4NTliMmFlZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNc5dSmh9IRfEJuoF70EzzQWCQE9
45AhKxOx+RzSrgX54UO/xZDRx1hk8IQsizW9NMzoRkD7qGBiBGYwDuGsJazytiHI
z3MI1xvEYiBVWdvvWnxXitaduS9PA4UzywHvmJ26EzicllMk/o0I/iVMsZJlqiW9
wz494Pi4aE3btUgSAsat5q6bHrsEKT1O0d87/Gz1L8KcSIrGbsCUIuTOLeIvX0OW
a6vaFxd/MHFitqCQ6ASIRmpkl4QGOqCHdeOFiQ1V/ifuN4QOZUdWaoyRTUfyHxK+
TWP+4xuhW70097Vp04+hAP81vhA+hOgpsngaI5Nb8w2N1tcrKAwoTRZX4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPszZL7XBYFqFZUzkhJE5YWbKu57MB8GA1UdIwQY
MBaAFGYWqOuwERGbL2lTJ/sW5R+IcER5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEt
ZWQzZDI3MDU1MDIwLzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEtZWQzZDI3MDU1MDIw
LzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4XsortN
YVwFFMgYxJpJzH4ALlL3ZdiyHhi5VTJS/mXHcyg7GFmCUrXkK0t3c+Yj1DnDV6rt
f1mmxszA8EmX48jzX2BJ5B2+NfGfAB8+eK62mHU2De/7czBZOBkA6IG9Qu39V4px
/o6elmvEza5rQzgYXDKw6Nd1i7C+v6KHnGcsbzYMBjpEH7GPVOqYGDl0YDpXgm5N
2e2m6M2/RTMXtyrYhw+ZiSZ/8jb2xEVCcwRaULv0oEgCB5syeRDKF6PFxwR3DSMb
5rCN71HaEKipsmR0b/1I+4+RcD6e97Pu6CA+N9liC2M/VlQa4ivAVyTVooEmGhrn
TDexuofyYZnpxw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 07:38:47 2026 by rpki-client