Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File:                     ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier:          GdCembMkJZbq9w6v/B2otuFKH0Umq2REjfnSaxjVo0Q=
Subject key identifier:   B5:56:53:38:C8:BA:E7:C1:B7:19:E5:65:5D:03:6B:F7:0A:0D:D0:A5
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer:       /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial:       01A03DF2282907C38615BF3E53FE6B89CC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number:          1189
Signing time:             Wed 26 Aug 2026 12:01:15 +0000
Manifest this update:     Wed 26 Aug 2026 12:01:15 +0000
Manifest next update:     Thu 27 Aug 2026 12:01:15 +0000
Files and hashes:         1: 2LmzHT0ZIbdBKtvls7SHR70OMro.roa (hash: tbuaZMJ3bR1Rnp3JGF/Y5/b7H89NRs10IqAGEmMX3hw=)
                          2: Wd51v5bh6CVZd6bJidGHZJXb2us.asa (hash: 7OczW/y3GKch9e1XpUdfbwi9oN+4AbqKJfslhUFyQQo=)
                          3: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: oFbYHIq5d7LxQyf86wLU91Cw2hXUDe7LjJ8mE6nvaJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:f2:28:29:07:c3:86:15:bf:3e:53:fe:6b:89:cc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
        Validity
            Not Before: Aug 26 12:01:15 2026 GMT
            Not After : Aug 27 12:01:15 2026 GMT
        Subject: CN=b5565338c8bae7c1b719e5655d036bf70a0dd0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:bb:27:66:e8:f9:b4:06:12:8d:62:f1:be:
                    63:8c:f0:86:9a:43:06:2f:85:3b:bd:42:8c:17:a7:
                    f7:38:73:0c:a1:02:6b:84:34:cc:ba:a2:cd:3f:dc:
                    e4:b3:14:05:00:7a:97:e6:c0:0d:c4:65:42:b2:66:
                    e6:db:21:2d:ba:da:5a:8f:42:ac:1f:64:fb:6a:18:
                    3c:98:a2:02:58:94:50:47:bf:19:99:77:c0:f2:93:
                    cf:c9:0e:6d:11:52:29:0b:26:d2:6e:d7:62:74:3f:
                    c2:cb:3c:db:ab:f6:5f:5a:ed:e3:cb:5a:a9:46:78:
                    93:23:c7:0d:a2:25:bc:af:03:03:b6:df:cd:02:7e:
                    8f:4a:7e:e4:36:90:aa:a0:a8:c3:7c:be:10:53:14:
                    e5:69:e5:6c:19:31:bc:c1:66:b2:e4:b9:1b:63:5c:
                    99:7e:11:64:91:a0:8c:43:59:be:eb:27:4d:c1:6c:
                    b8:04:b4:e3:18:cb:04:7e:f2:ba:1b:aa:3a:5d:18:
                    5f:fe:c8:03:bc:a8:4e:2b:1b:54:44:a4:37:e8:96:
                    7f:a6:f1:ae:3b:d9:d8:a7:9a:14:30:ad:19:d2:02:
                    3f:31:e8:82:fa:81:a2:06:08:71:a3:90:87:bc:29:
                    1d:85:4c:13:f9:d4:46:76:1b:f4:46:04:8c:35:d4:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:56:53:38:C8:BA:E7:C1:B7:19:E5:65:5D:03:6B:F7:0A:0D:D0:A5
            X509v3 Authority Key Identifier:
                keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:9b:bd:69:50:55:41:e1:a6:0c:d6:fd:16:c5:c0:2c:7b:
         67:67:6c:e5:76:e1:75:52:21:eb:fb:c0:1d:10:4e:47:98:dc:
         9d:49:d4:c7:d8:f5:1b:10:34:93:55:1c:7d:28:7f:28:65:e1:
         4e:53:b0:97:7f:14:2f:33:0a:69:d7:ee:dc:fc:b5:b6:aa:a8:
         90:89:9c:5a:f0:73:43:39:56:88:9d:e0:e6:8e:22:3b:18:e2:
         1e:9a:13:d9:9d:23:bf:7c:0c:d8:22:01:43:23:e6:99:ec:26:
         97:de:8d:7f:3b:c2:e6:3f:66:a9:e6:3d:57:1d:41:2c:97:00:
         52:c9:ae:54:3a:ad:11:e1:41:e9:e9:f0:49:db:ad:fe:bc:46:
         8d:71:86:0f:25:69:26:8c:7f:f1:31:65:fa:5d:3a:ba:4f:92:
         d2:d4:43:b2:0f:c3:b2:59:e1:2a:9e:98:9c:7b:ea:20:17:6e:
         4f:0d:ca:a2:7f:6e:d7:4d:27:20:56:83:32:c2:06:d2:4b:97:
         6a:6d:1a:1a:eb:da:f4:dd:43:fa:73:f1:20:89:e5:52:40:bc:
         79:4e:bc:de:31:a0:b5:76:bd:26:3c:79:5c:5a:30:a1:89:fb:
         02:4e:ba:1f:92:3d:18:72:db:55:02:73:3d:24:83:92:06:52:
         75:b7:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:17:32 2026 by rpki-client