Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File:                     z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier:          QSpU0LdnZlkizZJSsm0+Z+ZQ9rsCUoeAArj0FG8/7tk=
Subject key identifier:   4F:76:96:57:34:B6:C8:02:2A:44:2E:2A:52:E9:9D:E0:9D:C4:76:D0
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer:       /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial:       01A12240F2A2B53CEAE5FFEF6258FC612BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number:          1A9B
Signing time:             Fri 09 Oct 2026 20:00:44 +0000
Manifest this update:     Fri 09 Oct 2026 20:00:44 +0000
Manifest next update:     Sat 10 Oct 2026 20:00:44 +0000
Files and hashes:         1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
                          2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: P3OAWl6W4+xkELOT07s0IN3jeatIBLNVmjaal9as/uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:40:f2:a2:b5:3c:ea:e5:ff:ef:62:58:fc:61:2b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
        Validity
            Not Before: Oct  9 20:00:44 2026 GMT
            Not After : Oct 10 20:00:44 2026 GMT
        Subject: CN=4f76965734b6c8022a442e2a52e99de09dc476d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:31:4e:5a:d8:73:db:2f:a6:2f:8b:9b:f2:
                    68:48:91:57:09:d3:50:ae:03:1c:fc:57:d5:b6:28:
                    78:14:a0:47:d2:8c:60:d7:bf:f6:68:56:e1:fe:f6:
                    10:ab:d8:7e:ab:97:a4:bd:26:9f:19:a9:12:de:9d:
                    da:ea:db:51:d9:a7:3b:90:51:96:1a:c1:1a:63:82:
                    45:80:1d:6c:47:c9:d5:8c:b3:e4:8e:0b:f4:4e:76:
                    29:5b:c3:31:55:00:63:92:81:07:cd:4f:80:13:2a:
                    67:01:b3:b1:41:32:8f:7c:2a:95:10:d6:59:69:2e:
                    fd:dd:86:17:21:4d:48:c5:d7:be:6e:e6:4f:72:0f:
                    10:46:60:63:91:32:77:61:3b:22:38:64:2c:db:ff:
                    6b:0f:85:1b:b1:1c:f2:4a:2f:fc:b4:98:b5:ae:3f:
                    4c:79:a4:57:66:e6:38:e2:4c:40:06:88:fc:bd:13:
                    8b:c1:6d:fc:5e:a1:8d:be:12:dc:19:17:b2:4e:6f:
                    e1:99:a5:c0:1a:e9:59:91:a9:e9:91:4a:66:a7:eb:
                    3e:34:18:8e:5a:ac:9e:bd:ec:06:f5:f2:7a:55:af:
                    f8:50:c4:aa:9a:96:1d:b3:f0:14:5e:21:99:48:62:
                    02:f9:a7:94:e9:9f:18:41:b7:e9:5c:69:cc:9e:91:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:76:96:57:34:B6:C8:02:2A:44:2E:2A:52:E9:9D:E0:9D:C4:76:D0
            X509v3 Authority Key Identifier:
                keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:cb:98:fa:54:ec:de:44:b0:b0:22:72:e3:38:88:5f:64:
         28:9b:6c:56:29:ac:73:2a:1c:33:16:c0:90:1a:24:50:f1:21:
         8a:5d:80:9c:58:1b:0a:eb:a6:9f:2a:c5:bd:5f:a3:77:2e:dd:
         49:e6:08:11:51:fc:8f:06:1d:9b:d4:29:05:b3:58:45:bf:93:
         29:26:13:a9:6a:2f:b9:06:5a:a3:ff:ac:e0:a8:a6:fb:6f:b5:
         54:c4:89:b3:0c:14:a3:c8:c8:32:3e:16:dd:63:a5:d9:8e:9e:
         3d:98:52:ff:ac:72:a8:82:c1:97:4e:15:2e:b6:22:19:7d:c9:
         99:26:36:0c:8d:41:fe:5a:17:f4:3b:74:5b:cc:81:f2:b8:af:
         7b:71:a1:fe:75:f3:66:c5:77:6f:92:33:dd:5b:27:d1:1c:ba:
         ae:21:28:87:41:1a:0c:59:94:98:42:19:d8:05:ef:f5:0c:42:
         3b:aa:1f:46:e6:55:7f:e0:1b:43:90:7d:2a:6d:92:91:a5:3a:
         f1:2b:7e:6d:df:bc:6a:7a:87:44:c6:57:91:41:ea:bd:2e:0a:
         54:5d:41:66:df:57:22:01:59:91:e4:f0:f3:82:ec:cf:3e:fb:
         17:1a:55:37:7e:ee:56:83:32:a7:a6:0f:75:12:f7:72:15:85:
         92:2c:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:43:57 2026 by rpki-client