Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File:                     zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier:          HmcjhcPuRI6dyDEfWYw2sx0xsxSGRzv1+/s59cMpZR0=
Subject key identifier:   5C:94:64:80:E2:24:B0:50:DA:80:7E:B9:E4:1A:8D:BE:0D:79:9D:41
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer:       /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial:       01A0043907CBB7044A77059E08A0F61C87AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number:          0BFF
Signing time:             Sat 15 Aug 2026 07:00:41 +0000
Manifest this update:     Sat 15 Aug 2026 07:00:41 +0000
Manifest next update:     Sun 16 Aug 2026 07:00:41 +0000
Files and hashes:         1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
                          2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: RZO2o/ole1fMYpPSidhvFJFm7ghZa8FV3vS/xcr9Fes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:39:07:cb:b7:04:4a:77:05:9e:08:a0:f6:1c:87:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
        Validity
            Not Before: Aug 15 07:00:41 2026 GMT
            Not After : Aug 16 07:00:41 2026 GMT
        Subject: CN=5c946480e224b050da807eb9e41a8dbe0d799d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:be:fb:78:9e:ee:9f:01:f8:8e:08:d7:08:
                    9a:e7:13:05:35:4e:71:77:d4:91:5a:ea:43:ec:be:
                    27:15:c8:61:32:ec:11:c9:fb:f5:83:68:1f:e5:fd:
                    db:7c:0f:7b:c6:e6:f9:37:3e:dd:c9:2a:70:0f:e2:
                    36:cd:78:73:99:32:f2:6e:3c:ec:4a:ef:c2:64:91:
                    3f:7b:ae:2c:98:32:65:3f:7a:50:d7:3b:63:22:53:
                    f8:8e:08:e4:cc:85:ce:1e:e8:a1:a3:08:8e:4d:6f:
                    f6:4a:d4:71:62:39:ee:f9:10:ca:2e:11:a0:5c:40:
                    a6:2d:0c:09:8e:c6:b2:86:0d:7e:a8:72:c9:43:cb:
                    03:35:d6:4d:6b:41:c9:f0:a1:4e:e5:a2:d7:41:e0:
                    62:38:28:c3:97:24:ca:66:d5:41:47:a8:d7:2a:98:
                    07:e1:90:2b:e2:30:c8:2b:2d:65:f5:95:51:63:4b:
                    c0:59:1e:2c:9f:33:cd:90:0c:f2:10:a1:d1:41:2f:
                    4d:b8:d3:ab:54:ac:d6:92:e9:58:1e:2a:f6:df:b3:
                    b3:2b:85:1c:fb:a4:67:1d:4d:01:03:66:30:16:30:
                    58:da:8f:78:c1:ac:31:f2:09:b2:5a:e3:5f:8d:da:
                    4e:20:f1:ef:ad:54:fc:b9:c1:e8:d7:1a:aa:53:45:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:94:64:80:E2:24:B0:50:DA:80:7E:B9:E4:1A:8D:BE:0D:79:9D:41
            X509v3 Authority Key Identifier:
                keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:09:b7:33:cc:49:18:a6:bf:dd:08:73:e6:1b:ca:a8:db:
         51:00:23:9b:66:56:9d:6c:7a:98:42:60:ee:f8:e4:d9:aa:25:
         04:c4:ce:f5:12:5a:b7:a4:eb:9f:84:82:3b:ba:cc:bc:57:f9:
         5e:96:fd:dc:0f:26:fa:38:ad:7a:48:ac:75:61:75:5b:03:0c:
         15:35:e6:f9:ce:ef:e1:cf:c9:dd:14:94:2b:dd:1e:58:53:1d:
         5a:e1:26:d1:2f:cf:f0:e4:65:8e:b4:07:fa:f0:41:f7:b6:2f:
         ba:a9:e1:42:18:10:35:45:84:24:b2:c4:af:0f:1a:8d:cc:75:
         e2:28:70:44:c9:a4:c3:12:64:77:8b:65:75:b3:68:02:fa:44:
         c6:20:86:2e:a9:e7:d7:95:5b:d5:18:a1:06:d9:a7:88:61:27:
         e9:f5:ef:e6:61:59:72:ae:29:86:62:7c:be:ee:5e:78:f3:2f:
         f5:68:4d:f2:f3:7d:aa:14:cf:86:97:c2:4f:ac:75:f0:ef:15:
         2c:76:fd:14:9c:31:a7:37:0f:ed:99:a3:6f:12:41:e6:6b:fa:
         c9:18:ee:94:4c:6c:af:29:60:e0:7b:92:a4:e7:11:db:2f:40:
         cb:2d:ca:74:62:95:9c:8d:4f:54:a8:c4:5f:56:54:20:75:bd:
         0d:eb:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:41:42 2026 by rpki-client