Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File:                     ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier:          tA8sYsBn9RuPJR7JwhKKOmVTj26LiYRcsQpJPD7PpFs=
Subject key identifier:   33:84:4A:B8:BA:32:75:0B:B8:49:AD:21:B9:35:F6:D2:99:FF:47:6E
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       01A089B0E1BC213C885541DEA72EDCB6E122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number:          099C
Signing time:             Thu 10 Sep 2026 05:01:05 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:05 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:05 +0000
Files and hashes:         1: 1-VTEI5G4kCmQT76xZQjyIcQlAaM.asa (hash: YjmQWpo1Vj2DeYc0L6vhCmBbWUl+dZ4VXmRFMzNh9Os=)
                          2: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
                          3: 7kdDh-pEj2k42422BoX6JBW3_Ms.roa (hash: 84QvPY+D41j3++xe4cxLcvuMi2We/Q8cDVLZ9oZiJC8=)
                          4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
                          5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: hJP5zbKQZ9f4BCgnoLQbU2CPqf+wfE7KhXuAn/wg4VU=)
                          6: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
                          7: ivskltFte33VewLgfli-wfOqjjY.roa (hash: o3M7ZlkH3ONuXIb7njuGbLpQCaz2xbQRxNHYLNLRYh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b0:e1:bc:21:3c:88:55:41:de:a7:2e:dc:b6:e1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Sep 10 05:01:05 2026 GMT
            Not After : Sep 11 05:01:05 2026 GMT
        Subject: CN=33844ab8ba32750bb849ad21b935f6d299ff476e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:2c:c2:8b:c1:c6:1b:65:ec:72:0a:6c:79:
                    3f:54:78:5c:3d:ef:af:18:df:72:77:77:6e:56:50:
                    42:47:0c:54:5b:a2:df:5a:23:f7:91:f8:1e:bf:8e:
                    81:b0:3f:ca:f1:4b:1c:1f:e2:66:1f:58:64:1e:d0:
                    5d:f9:01:dd:8a:45:62:ca:12:62:dc:33:5c:ad:d3:
                    cf:24:41:63:8c:57:64:9f:23:29:cc:21:70:aa:3a:
                    25:a0:23:9d:df:6a:bc:b4:a6:87:77:cf:e8:6d:8d:
                    4b:08:c4:5d:31:22:9e:89:09:9f:cd:5c:ca:fe:19:
                    5d:67:47:bc:1d:49:9e:7a:28:9d:ab:fc:01:95:07:
                    39:10:bd:f2:37:05:eb:3d:a5:f8:82:ab:b0:d0:f3:
                    b7:f4:6c:9c:cf:86:db:bd:ec:0c:12:11:5c:0d:57:
                    31:63:ec:5b:7d:87:03:dc:cc:6d:84:fc:d8:3d:01:
                    94:f1:6e:ee:b8:eb:d5:96:b7:89:50:da:97:9a:dd:
                    72:da:d3:ac:27:d9:68:50:3e:f5:75:09:da:5d:13:
                    7b:fb:62:ce:e6:f9:1f:cb:49:46:c4:ed:0d:4c:c1:
                    4b:03:3d:f8:f9:5f:43:48:45:9f:1a:9e:37:d9:4f:
                    9c:42:80:29:fa:e7:bb:eb:ef:42:e3:91:f6:f9:2b:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:84:4A:B8:BA:32:75:0B:B8:49:AD:21:B9:35:F6:D2:99:FF:47:6E
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:05:4e:3e:c7:b5:7a:ba:61:40:24:09:11:ff:ee:72:c9:da:
         5c:cc:3d:7a:5e:1b:c5:24:65:18:da:a4:f4:e0:3d:22:b2:42:
         d3:c9:22:74:31:cd:81:57:70:e3:81:79:da:41:ab:bb:f9:ac:
         72:d2:ed:09:68:f0:d9:2c:46:e7:3d:d3:a0:7f:18:3f:99:94:
         b2:fd:f6:d4:34:fb:d0:c7:8e:29:01:bf:28:a3:6e:cd:1a:18:
         fc:76:08:ad:cc:c2:f6:95:ed:86:c0:24:a2:9b:dd:94:13:e8:
         c8:28:c2:4e:c1:d9:0a:55:64:27:32:1a:43:43:09:db:97:90:
         cd:8a:9c:d2:48:5e:c6:ff:85:1f:f7:da:b1:83:f9:b3:64:4d:
         9f:a6:30:e6:d5:93:b0:1b:54:01:d8:68:47:50:37:85:23:1c:
         ef:35:cc:16:79:38:dd:92:7e:c4:39:b4:83:53:21:e8:0e:9f:
         38:25:1d:ae:0f:82:7c:c5:32:1b:44:36:af:7f:0a:c7:fd:f3:
         51:ac:ce:e3:f7:68:0b:ee:e3:aa:eb:25:7e:ef:a6:cc:73:2e:
         05:27:c9:aa:d9:c6:f8:bb:5f:ad:21:b2:4d:3f:fe:7c:3f:e7:
         2a:fc:61:e2:b2:21:61:f9:e4:25:f1:41:ad:00:5a:c8:96:9f:
         94:7d:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:16:26 2026 by rpki-client