Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          4lPIP9LRYyAbkq8+xc1kEhr9ICiDmjuqDv3geHpQKp4=
Subject key identifier:   C5:46:DE:A1:FD:CB:08:73:EA:F2:CB:5F:82:88:15:AB:70:8B:D8:1A
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       01A0FD5927A3C1A1386DBDA007E1332C30C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          15A2
Signing time:             Fri 02 Oct 2026 16:01:13 +0000
Manifest this update:     Fri 02 Oct 2026 16:01:13 +0000
Manifest next update:     Sat 03 Oct 2026 16:01:13 +0000
Files and hashes:         1: QiwWH1RtFqoFlh8ODhTHxGES8wo.roa (hash: HZ1hGzr6d7Gz+vsrN9BoASQoL9FuMmrP2dJvc65ilDk=)
                          2: QqUbGPbWnb6gjhCMOqT2grVMHLc.roa (hash: Nr3sSa3uJP0epmv5crHEIzFx3Y5ip1SyFjThlCVINnw=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: lplGyFsadsF7jFpBHINX/dfNl3HQ3oiHIT0uZBRilj8=)
                          4: yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa (hash: DACPJnZscxbHEOmbZYNR1bRZKHxl5ev0RDcNgFEGAgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:59:27:a3:c1:a1:38:6d:bd:a0:07:e1:33:2c:30:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Oct  2 16:01:13 2026 GMT
            Not After : Oct  3 16:01:13 2026 GMT
        Subject: CN=c546dea1fdcb0873eaf2cb5f828815ab708bd81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:d3:48:1e:b8:6f:72:c6:26:d5:d0:9b:9d:
                    df:da:60:dc:d6:75:91:80:8a:30:20:4f:22:22:02:
                    2c:53:82:eb:35:c2:3f:d8:a0:25:f1:9c:d3:d4:dc:
                    3f:17:5a:8f:4c:00:50:24:2b:9f:14:52:8c:1d:bc:
                    2b:1d:53:9b:4b:1b:19:5b:2a:1f:15:7c:d3:e1:c2:
                    e3:79:2c:5d:ca:86:96:a1:92:d0:f1:84:10:6a:11:
                    d2:de:ee:f8:c9:c8:ed:f6:b7:c1:85:98:cb:eb:dd:
                    94:22:7e:3e:cf:12:87:88:11:63:ab:b2:58:5c:46:
                    6d:b6:44:63:16:8b:01:04:d1:07:10:30:56:22:ab:
                    5d:25:99:8c:c9:22:06:c1:6e:26:1a:f1:e9:96:30:
                    bb:48:f1:6f:43:76:de:24:e7:b0:84:99:b7:80:15:
                    af:73:a0:68:d5:6e:cd:30:27:ef:0c:31:c3:15:ec:
                    01:d9:22:35:03:9e:74:d7:0e:92:1f:ca:8c:33:ed:
                    e2:d2:35:41:6b:cb:09:e6:0f:59:71:5a:1f:02:56:
                    48:49:d4:ad:60:00:59:8f:4e:b6:51:f3:12:08:9e:
                    11:e5:9e:16:ff:b5:64:48:fe:93:d5:2f:ad:47:aa:
                    ec:69:f9:ef:5d:db:69:cf:98:c0:03:a8:2e:76:79:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:46:DE:A1:FD:CB:08:73:EA:F2:CB:5F:82:88:15:AB:70:8B:D8:1A
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:2b:56:f1:80:ce:b1:5f:1c:4f:19:aa:27:57:46:96:fc:70:
         05:91:76:b6:63:93:1e:5a:1c:73:ea:fc:df:9b:b8:cc:36:0b:
         84:af:93:23:f4:c3:f0:90:b2:92:ae:99:b5:4e:3b:53:4f:88:
         a0:a8:14:b4:00:55:a0:5f:2a:97:15:8f:d8:cf:0a:8d:da:44:
         39:93:21:0e:76:ae:a9:84:26:b5:7d:dc:bc:82:ec:f4:75:dd:
         09:59:13:10:63:b8:2b:a7:78:7b:bd:d0:c1:d7:5d:ee:dc:6f:
         e4:a6:c4:55:4e:8d:6c:96:dd:d5:14:c6:29:50:be:d7:33:b1:
         8c:3f:b5:46:d4:7d:34:13:a1:58:c9:8a:26:b2:d4:e3:26:23:
         73:b1:1a:d4:f3:49:e7:c1:04:99:80:18:af:47:cc:1f:5c:e0:
         25:3b:33:69:53:05:0d:74:f9:7d:60:de:57:d7:95:79:db:22:
         c5:77:4e:1c:8b:97:99:7b:7a:e2:46:2a:b7:60:0a:3a:cf:c5:
         83:c4:48:92:12:3b:62:2f:c8:e0:e7:65:0e:77:45:16:ee:e1:
         a7:fe:e5:d2:70:cd:03:6d:fb:87:bf:14:67:9a:7a:d0:d3:e4:
         27:27:c1:f1:56:ea:f1:b9:07:8e:2e:42:26:10:14:24:f1:9b:
         26:2c:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:53:15 2026 by rpki-client