Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File:                     zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier:          FRJaCT3jabU5M2hnEXV1vvwjiQmdixRJxYCUj8B12cI=
Subject key identifier:   57:9B:7D:3E:B7:1A:41:10:F4:18:0D:48:EB:F8:05:0C:6B:5B:20:BC
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer:       /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial:       01A032C91F54ECB547FDE2C6FEC94D6AFCB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number:          05CF
Signing time:             Mon 24 Aug 2026 08:00:36 +0000
Manifest this update:     Mon 24 Aug 2026 08:00:36 +0000
Manifest next update:     Tue 25 Aug 2026 08:00:36 +0000
Files and hashes:         1: 8hUTE1rNYy5U_ZEAjeKyMjN64k0.asa (hash: WUMeLZ4dr9HFfgEPPRc+l/n2HJv4KBfKC27gniFGLbQ=)
                          2: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (hash: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0=)
                          3: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: sIdMh96nEqGDzvyWyZnixtAO3fwhyiYIy/yk5ZQybYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Aug 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:32:c9:1f:54:ec:b5:47:fd:e2:c6:fe:c9:4d:6a:fc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
        Validity
            Not Before: Aug 24 08:00:36 2026 GMT
            Not After : Aug 25 08:00:36 2026 GMT
        Subject: CN=579b7d3eb71a4110f4180d48ebf8050c6b5b20bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:cb:e3:7b:9a:93:40:36:94:76:06:00:54:
                    d1:f9:2f:74:ed:96:e6:ea:95:cb:ae:fc:a4:ea:74:
                    7a:22:42:f6:65:7a:23:5c:d8:1e:00:4e:96:3f:d9:
                    ff:38:c5:05:2f:00:dd:a4:d6:56:bc:f2:cb:b3:89:
                    c3:25:2f:af:1f:72:54:1c:4c:a6:2e:57:79:44:f5:
                    30:f2:b6:24:03:c6:db:cb:94:98:90:c7:0e:9e:55:
                    c1:a3:bc:95:52:fd:da:04:e2:ab:ed:0e:a9:4c:3b:
                    8c:f6:87:88:9c:ec:49:0d:a3:7e:a1:39:5d:fb:05:
                    47:9b:a9:ca:96:d4:5b:6a:40:16:04:d8:88:95:d2:
                    a9:7b:ce:bb:ec:16:d1:bb:86:35:dd:c6:26:b1:74:
                    60:b1:4b:cd:85:5e:e5:04:36:02:2b:3f:65:c2:4a:
                    cd:57:08:d6:48:09:9d:e5:4f:6f:12:56:8f:5a:b6:
                    b0:a3:94:e9:34:f4:b9:46:1b:02:b2:73:b7:09:ff:
                    8d:d2:90:2b:03:2a:90:80:64:88:f3:76:24:a4:9b:
                    c5:f2:11:b4:2e:dc:05:e9:99:c5:f5:ae:5d:95:b2:
                    60:84:a5:5a:0a:35:2a:e4:69:32:ea:40:9d:ad:bb:
                    c8:30:d8:7e:c0:30:98:69:38:a3:ef:2c:b7:3a:55:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9B:7D:3E:B7:1A:41:10:F4:18:0D:48:EB:F8:05:0C:6B:5B:20:BC
            X509v3 Authority Key Identifier:
                keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:91:be:d8:22:24:1c:c0:d3:49:76:20:12:d3:e3:15:c7:
         34:c9:10:a9:63:9a:43:a4:9f:c6:2e:5c:94:fe:b7:14:ae:36:
         86:14:ab:8b:34:26:b0:fe:ce:8d:1d:08:8a:32:ec:9c:88:26:
         0c:d4:88:02:dd:ff:89:3c:a1:28:23:2e:06:1f:c0:a9:a8:37:
         b1:3e:95:44:60:12:1a:4f:6a:f5:8c:3f:5c:01:5c:6c:62:8e:
         35:65:e6:bb:10:3e:c7:a8:40:4d:e3:4d:22:35:75:66:87:be:
         1b:3b:04:d3:c2:63:30:49:7c:4d:49:eb:f5:bd:dd:4a:1e:8b:
         c1:7f:d3:af:9b:31:45:93:f6:4a:df:ac:b2:ec:5d:18:26:11:
         b7:96:ac:0f:03:a7:13:2a:a7:c8:9b:e3:51:25:b5:8f:8c:b3:
         ca:18:7b:65:32:22:8f:06:2a:a2:4f:42:1a:bf:ae:e9:39:51:
         c3:e0:12:ac:85:e6:63:4b:82:c6:9a:2c:4b:81:a7:53:8c:74:
         88:cf:1e:a8:28:d2:51:00:4a:aa:f1:95:ba:d9:eb:eb:98:bc:
         35:a2:38:da:e5:5d:5a:90:ae:c7:c3:0b:46:4c:62:8e:b6:1e:
         b4:93:1f:81:aa:36:a0:e0:b7:80:b8:29:27:8e:dd:7d:37:74:
         28:b0:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:56:37 2026 by rpki-client