Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File:                     zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier:          XzujYym960AYQTHXxDYjAaBkAYyi6Mrd4fwdtHW8Q1c=
Subject key identifier:   2C:DE:14:25:B1:8F:D7:0B:E3:12:B3:29:EB:52:1A:7D:62:41:E4:DE
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer:       /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial:       01A17514B9A261185BB56888F443EAB57392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number:          1AC5
Signing time:             Sun 25 Oct 2026 22:00:54 +0000
Manifest this update:     Sun 25 Oct 2026 22:00:54 +0000
Manifest next update:     Mon 26 Oct 2026 22:00:54 +0000
Files and hashes:         1: 5qgROKxHOicoj6aXRRzKoWhQEys.roa (hash: cbdLbf/a0AVWeV/g7UhTY6JncYkBe68DrZLAHz3ibQE=)
                          2: D0wGS-yddeO0xfMmRUxbHkj9wmQ.roa (hash: 1GkR1ZZ4k8rO+nd6oDot6saKoU0S85i7RRYtoQ2NVC8=)
                          3: OoheSSCa5I7EwzgFEnlfY2jnBjs.roa (hash: 4TrMNV+CUPEbrPuDX+5VWadJ22cCDdcCYltr8Dnb3+w=)
                          4: SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa (hash: uIUOOzCmCZIfAItCkWriSRWvWy1Wi25C++tLdPRufDc=)
                          5: hXDlG2G0xbowy6t6EZnHJ70Ehao.roa (hash: 3IDUKM+58lF7xSd9cxW6Agkn2PnQGt/z8nVFt8JreYU=)
                          6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: 0V1ybROGTtkDr7Id1c7VajojOjLHnuiW8ziEgnY1gLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:14:b9:a2:61:18:5b:b5:68:88:f4:43:ea:b5:73:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
        Validity
            Not Before: Oct 25 22:00:54 2026 GMT
            Not After : Oct 26 22:00:54 2026 GMT
        Subject: CN=2cde1425b18fd70be312b329eb521a7d6241e4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:0d:a7:6c:01:d6:92:41:51:b9:ee:d2:77:
                    08:e8:f7:2b:bf:10:b3:57:5e:3f:d6:f4:42:bf:6c:
                    a2:42:96:1c:c2:58:0d:d8:91:ce:ab:0b:b4:38:4b:
                    c9:59:f4:de:48:40:48:8a:7c:79:04:bc:8a:04:e3:
                    2a:2f:3f:00:d1:03:4a:68:bd:e1:d6:49:40:e7:d3:
                    fd:7a:1f:a3:29:23:38:9d:32:15:68:59:d5:1e:20:
                    b5:23:97:08:be:f2:d0:44:9c:0f:50:96:6e:34:0f:
                    8e:31:74:e7:f6:d7:97:fa:e1:e8:eb:09:b8:c2:ae:
                    fa:e0:d4:e1:a4:e1:88:50:23:54:0d:bc:1b:e5:43:
                    db:af:1e:bc:ff:ff:23:71:1b:8c:ed:f4:cb:39:76:
                    be:49:c1:93:07:1e:a9:6c:d1:be:6f:5d:08:b2:00:
                    1a:f2:04:4e:89:cf:0b:99:63:69:13:d7:21:31:cf:
                    7b:8c:2c:c0:5b:0e:9f:83:56:e0:cf:b8:82:80:bc:
                    73:8c:72:f9:6b:78:76:fa:c4:fd:bd:59:e2:f7:0f:
                    6a:cb:1a:e6:42:37:23:27:7b:64:60:17:a6:5b:58:
                    7e:49:ed:93:ab:e7:5e:16:67:91:75:08:24:e6:2d:
                    1e:2d:0f:36:e7:8a:e8:a9:b6:8a:a4:6b:8b:35:25:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DE:14:25:B1:8F:D7:0B:E3:12:B3:29:EB:52:1A:7D:62:41:E4:DE
            X509v3 Authority Key Identifier:
                keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a0:16:2c:99:33:56:1f:10:38:04:80:b4:61:ab:03:ef:b2:
         dd:6f:0d:f1:8b:b1:5f:b6:3e:4c:6f:86:1b:f7:af:89:4d:d1:
         ec:0a:a2:d6:fa:04:00:e3:cd:fc:14:d6:8c:f2:a1:32:0e:21:
         fc:37:2f:18:ff:fa:3e:c9:09:51:76:24:9c:42:b0:71:41:3c:
         9f:5f:31:24:64:ca:7b:8a:3a:11:f4:7a:bb:d8:77:eb:48:dc:
         7d:f0:de:3c:a1:29:c3:0b:4a:9f:a2:d8:6d:9a:0e:87:58:2e:
         9c:57:8c:26:66:6d:d3:35:2f:cb:19:73:c8:d6:cb:8a:11:f8:
         cf:89:96:01:25:90:fe:32:de:1e:ab:b5:69:ea:0e:80:15:c5:
         2c:8d:2a:59:c3:54:d1:fa:36:f0:86:b2:32:96:de:72:fe:60:
         69:a9:3b:38:0a:15:4d:e0:70:c0:bc:cb:ac:57:ab:08:ee:32:
         a1:b2:92:f0:f1:43:7d:b1:a6:7f:f5:0e:37:1b:1f:e0:bd:08:
         7c:c1:82:bb:ad:e1:ce:5c:27:50:e3:c5:31:36:4b:e0:c3:40:
         a9:eb:2b:4b:1d:22:4f:21:ea:76:f1:31:45:d8:0c:be:f0:f3:
         26:06:7c:a7:20:0d:aa:68:44:1d:2d:ce:cd:4a:a2:6f:26:09:
         13:01:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:28:47 2026 by rpki-client