Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          gxepaKbVsUONfia6YotRlIxjUHp9AZ8yFVO1AkymeSg=
Subject key identifier:   7A:F0:49:12:77:FC:B4:48:57:F5:E7:CF:B6:77:4C:4F:46:99:15:2A
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       01A10994624D006F6EF2C1E73064F6D59FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          1A94
Signing time:             Mon 05 Oct 2026 01:01:21 +0000
Manifest this update:     Mon 05 Oct 2026 01:01:21 +0000
Manifest next update:     Tue 06 Oct 2026 01:01:21 +0000
Files and hashes:         1: 3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa (hash: ni3uO/fhFfgK3uTopvt+sNnEoUiIwxpRI4kiwz3P0Q4=)
                          2: C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa (hash: 6ft+Zt4xMqD8pufWleBqsqUW7RgXeGTKhk+GP4M0q7Q=)
                          3: b4x9At5aHU384b0djamWkOwy0Gk.roa (hash: kQ+bOS8CQlnm4PmXuVXiGK4SgaDFMpdC3HI9bBKlvtQ=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: 8jvH/GtANyS+8rS+XyL4o/qceioMpCY6B0zja0/f6Iw=)
                          5: neuJz_FFH4XdHU8HzbzBQH85s2A.roa (hash: t5wM4uL3F6waQnSw3Rd8IGx2KT+faUYUfAm9Ktsa6Yw=)
                          6: vEZLnR5almH1CGYItYBwVOGJqYY.asa (hash: Q9dmdkbTJa12zCUuc9rAzbHv2trspyTh+XDW4FOxvK4=)
                          7: yu-i2x-62u9GgIqkbHtrB0flg3s.roa (hash: DBRnQF75P0UT8wiwqTpnRrbuWAWKmmICP891u/zUXI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:94:62:4d:00:6f:6e:f2:c1:e7:30:64:f6:d5:9f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Oct  5 01:01:21 2026 GMT
            Not After : Oct  6 01:01:21 2026 GMT
        Subject: CN=7af0491277fcb44857f5e7cfb6774c4f4699152a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:78:58:82:1a:fb:14:9e:83:53:eb:9c:c3:
                    a8:05:51:54:f5:20:86:5e:ec:40:46:76:62:9a:de:
                    1a:5a:ca:ff:a7:a1:7b:e9:ef:31:c9:3b:1c:bd:0f:
                    bf:d0:6c:1f:e0:fa:fb:1f:c4:f8:21:29:b1:80:8b:
                    e2:3a:84:07:b8:5a:6f:09:46:e1:4a:81:29:39:de:
                    14:a3:08:75:0e:36:af:dd:b8:bd:d2:8b:61:a1:07:
                    5d:07:72:46:48:96:89:11:db:9b:4c:79:16:95:49:
                    ae:1d:58:61:63:96:0a:c9:f0:89:71:35:b7:37:af:
                    23:f6:9c:29:07:fb:78:57:29:c2:6a:f0:2b:9b:c1:
                    af:48:ca:e9:a8:98:4b:41:41:04:17:20:f6:c6:cf:
                    3e:9b:44:b4:1a:b1:aa:7e:8f:89:92:7d:ba:ed:2c:
                    43:73:d8:39:2e:5e:4f:96:1b:fc:c3:95:ba:c0:3f:
                    6c:1d:e8:77:78:af:84:7f:83:00:32:50:b8:91:ce:
                    c0:6b:c3:40:70:9b:8c:03:a7:77:f8:85:e9:44:23:
                    16:05:72:7c:4c:4d:c4:01:2f:91:6e:a3:f6:59:f5:
                    52:3f:d4:1e:4a:c5:20:fd:78:d6:0f:1d:00:a9:ee:
                    8f:f1:03:64:55:0f:8a:92:3a:ab:73:5c:34:c0:50:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F0:49:12:77:FC:B4:48:57:F5:E7:CF:B6:77:4C:4F:46:99:15:2A
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:a9:dd:55:ca:d0:eb:08:d7:96:85:90:e3:5e:f5:0b:5a:
         63:2c:dd:cf:97:24:4c:73:c0:00:3a:99:42:d3:57:ca:37:ad:
         a1:c4:63:b7:94:6d:13:6f:77:2f:df:80:7e:a6:8c:a5:1f:86:
         a7:ed:57:fd:1a:14:d6:78:c2:69:ca:82:1b:20:5c:ee:4c:11:
         1e:c1:d8:bd:88:a8:d3:15:7c:44:88:1b:36:c8:c8:c4:36:53:
         bb:1c:58:4d:14:74:a4:7f:c3:f4:ac:9f:a4:d5:bd:20:cb:32:
         bd:23:6e:7c:b0:ee:da:c1:a2:21:dd:a2:de:b3:61:47:7c:38:
         7e:57:64:5c:80:7f:2b:0a:0c:86:ec:ba:0a:01:07:ab:8f:50:
         b3:02:91:56:95:bb:de:e7:0c:be:84:01:3d:26:4a:91:6d:4a:
         8e:a0:e9:dc:db:d9:fb:03:1d:3b:fa:10:7f:9a:74:42:5a:be:
         32:f5:82:11:bb:6b:65:5b:a0:d4:d5:62:af:36:56:6d:50:68:
         0a:50:96:15:9b:a5:a4:53:d7:37:ef:dc:20:fa:80:51:b0:29:
         d4:46:14:2f:9a:50:5f:01:4c:0b:43:71:19:e8:01:41:81:9b:
         69:43:a8:c5:85:b6:35:3c:ba:cb:44:b6:c1:0f:e0:12:d1:27:
         f4:2d:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:43:06 2026 by rpki-client