Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File:                     zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier:          V232wN1SNrNQ/CRyVzRrKyIU2kNWzYo8RRwlxKyaPx8=
Subject key identifier:   E4:5D:2C:E8:AF:A4:7A:AE:C4:9A:19:7B:2A:04:87:B7:A6:40:76:73
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer:       /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial:       01A06DCC25DC2D1DB51D868E0BA4C8117B8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number:          1746
Signing time:             Fri 04 Sep 2026 19:01:30 +0000
Manifest this update:     Fri 04 Sep 2026 19:01:30 +0000
Manifest next update:     Sat 05 Sep 2026 19:01:30 +0000
Files and hashes:         1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
                          2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: w4mvmd2j1TR+NlpBEdkzNF2dz2CJqNNEkoYux3tOmK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cc:25:dc:2d:1d:b5:1d:86:8e:0b:a4:c8:11:7b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
        Validity
            Not Before: Sep  4 19:01:30 2026 GMT
            Not After : Sep  5 19:01:30 2026 GMT
        Subject: CN=e45d2ce8afa47aaec49a197b2a0487b7a6407673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:58:07:3d:93:d7:64:44:6b:47:e2:74:44:
                    71:ae:24:9e:9f:ae:96:ae:7b:4a:84:0e:48:6f:05:
                    09:e8:da:f5:e5:cf:be:78:0f:13:7f:05:77:7b:51:
                    76:39:ac:3c:6f:41:74:04:e5:83:5c:ef:90:b9:d1:
                    ce:5c:a9:b3:85:a2:1e:6b:d3:4f:9b:c3:3c:11:30:
                    9f:e4:0a:1d:62:43:2a:39:63:6f:c6:a6:0a:e5:a7:
                    76:5e:c9:8a:d4:29:4e:96:ba:1c:b0:8d:67:f0:b8:
                    3a:d3:84:4a:26:ab:6b:0b:08:f0:74:1c:5d:09:da:
                    03:eb:c1:67:f8:4e:b4:9b:46:f4:d2:a5:cb:00:c6:
                    ab:28:67:1e:5c:5b:d1:5c:e9:22:0d:9f:a8:8e:60:
                    71:f8:c1:c0:21:d6:b5:df:44:6d:85:8c:84:40:96:
                    94:02:9e:4c:66:ab:7b:de:e8:bb:c5:61:ae:70:d3:
                    7b:fb:7e:d7:b0:df:6a:a3:26:9b:56:5d:3f:09:f3:
                    59:5e:08:b3:9e:d6:04:ef:5b:09:ef:11:39:09:8b:
                    c1:b4:48:98:7d:21:e3:df:b1:04:72:81:47:4d:a9:
                    ee:92:da:1c:7d:e1:89:1d:59:2c:d6:59:98:85:c2:
                    50:50:c0:fe:be:01:c8:7f:36:4b:c5:71:a7:0a:b5:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:2C:E8:AF:A4:7A:AE:C4:9A:19:7B:2A:04:87:B7:A6:40:76:73
            X509v3 Authority Key Identifier:
                keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:f0:ca:8a:6d:79:16:c5:17:44:7c:1b:09:18:74:79:28:
         07:cc:bb:c8:7a:c1:c0:2b:33:14:89:08:44:48:9f:c0:c0:e6:
         33:01:60:4f:f9:e8:8e:5a:2b:9c:bb:57:42:66:03:73:33:4d:
         a4:a8:a8:73:0e:fb:3b:9e:ac:84:36:e3:1a:de:30:c8:2e:b8:
         47:e1:cd:ea:bd:1a:46:48:2d:15:a0:2a:b0:e6:95:98:29:4c:
         2c:8a:93:bc:ec:13:81:8c:c2:6e:d6:aa:11:70:25:8e:6d:1d:
         6f:4f:49:97:30:94:31:52:5a:ac:93:3f:9a:db:aa:af:75:09:
         b7:eb:97:41:7c:5c:c8:70:db:1c:b2:3c:67:68:a2:e0:af:91:
         04:ea:6a:d1:79:0f:7d:cb:e2:ec:08:b3:4a:f0:84:45:6a:03:
         8d:43:30:b7:9e:3d:5b:e1:e1:03:33:fe:89:9c:d0:85:3b:b4:
         e0:55:28:13:6f:48:51:b2:62:68:2b:96:e2:c4:fb:b3:b9:15:
         95:35:6f:d0:f4:e4:70:e8:df:12:e5:a7:d0:6d:4e:74:cc:be:
         ee:bd:bf:c0:ae:4f:cd:04:c8:ad:30:1c:36:f0:c4:67:ba:7d:
         e5:c0:15:fa:e8:5b:bb:88:21:31:79:b1:a9:e5:b4:db:05:cf:
         6f:a4:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:43:56 2026 by rpki-client