Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File:                     ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier:          u3QyNuHBFBHbEg+1Hnnw3HjCUA+i0BEs+v9ulcPBM3Q=
Subject key identifier:   2A:2C:66:25:9A:C9:EA:E0:7F:41:C9:82:81:E7:37:18:6E:DC:62:0B
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer:       /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial:       01A11A86E9ABC876737F14006965DBDC860F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number:          1A94
Signing time:             Thu 08 Oct 2026 08:00:11 +0000
Manifest this update:     Thu 08 Oct 2026 08:00:11 +0000
Manifest next update:     Fri 09 Oct 2026 08:00:11 +0000
Files and hashes:         1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=)
                          2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=)
                          3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: 8RAuuguKAtM3D6zuW1TGsl5fmeZbyuAMyKd7SKCXZ1M=)
                          4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:86:e9:ab:c8:76:73:7f:14:00:69:65:db:dc:86:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
        Validity
            Not Before: Oct  8 08:00:11 2026 GMT
            Not After : Oct  9 08:00:11 2026 GMT
        Subject: CN=2a2c66259ac9eae07f41c98281e737186edc620b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:84:9f:6a:15:3a:02:9d:57:68:79:e4:3f:
                    e1:3c:09:74:16:91:3f:f4:ad:ec:c0:85:36:4e:eb:
                    ab:b0:17:ae:a7:ac:78:5b:3a:78:6d:f1:8f:3a:1c:
                    04:43:90:a7:77:b4:b0:87:09:c4:10:23:c5:4d:a3:
                    b5:25:7f:2f:e9:c3:e7:94:cb:29:f1:57:19:1b:21:
                    d2:28:3b:30:30:3f:bb:4c:3b:85:64:31:a3:30:14:
                    a7:6c:d5:a6:d0:89:66:fd:35:ae:e6:c1:d9:bb:f3:
                    61:c7:00:90:83:67:53:c2:f6:08:ff:2e:a7:0b:3c:
                    da:75:71:6d:61:98:98:fa:f9:73:72:c8:97:e0:1a:
                    38:a8:e2:fb:ea:2b:10:f7:d1:37:34:2b:ee:1d:c9:
                    45:71:f3:c9:02:4f:47:69:b6:1e:d6:a8:8b:b9:b3:
                    10:f7:ee:ba:42:6d:3a:d0:0b:58:11:dc:e0:d5:a5:
                    9a:f1:f1:37:99:86:2b:71:00:bf:d4:95:c5:54:91:
                    e2:4e:f9:8d:48:c3:55:17:9f:b5:4a:70:f3:47:bc:
                    60:99:0e:80:b6:9c:a9:93:1b:8f:f8:62:48:06:e9:
                    26:d9:d0:3c:c4:67:11:c6:d5:57:66:dc:ba:1e:0e:
                    e5:7d:c6:da:e0:48:ae:ba:21:aa:b7:e2:8c:0f:dc:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2C:66:25:9A:C9:EA:E0:7F:41:C9:82:81:E7:37:18:6E:DC:62:0B
            X509v3 Authority Key Identifier:
                keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:dc:12:06:ba:11:c4:0f:43:07:89:41:54:e2:5d:4c:16:
         41:ee:d2:80:d7:ee:02:30:d6:54:42:9a:a3:96:92:0f:98:bd:
         a3:06:ee:0a:e1:68:4c:b2:05:77:a7:7f:ee:ad:6d:50:84:e4:
         44:95:93:d7:79:d3:a5:58:1c:f6:b8:64:d4:eb:61:ec:e9:f9:
         48:97:73:ce:85:d0:7f:a4:08:a8:ba:5b:33:5f:33:d9:d2:ed:
         07:dc:2d:00:2b:9f:18:65:5a:50:8e:72:cd:1b:f8:fb:7f:52:
         7b:03:64:86:6b:22:16:85:14:0b:4f:cd:13:e8:d2:39:cf:da:
         2f:12:a8:ec:2e:c4:df:9a:bb:2d:fc:a7:63:ee:c9:27:70:a1:
         a4:e9:e7:7d:cb:70:02:9b:48:77:cd:36:a9:9d:2d:1a:b8:f1:
         ac:0e:64:1b:f0:64:3f:c7:69:9c:49:ac:b7:f4:cc:98:e2:22:
         a2:fe:4a:26:8e:09:5e:63:b0:f6:b7:2f:15:d6:8e:b9:9d:be:
         52:61:7b:65:ca:58:90:9e:f0:4f:75:43:37:3d:b9:34:0c:04:
         82:66:a3:1d:0a:a4:e5:2b:60:80:66:96:21:9f:98:03:06:61:
         ca:20:9f:20:91:7b:da:98:ca:88:1c:c9:5d:7f:bf:d2:3b:55:
         88:7b:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:15:17 2026 by rpki-client