Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File:                     Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier:          UBjqJD9lEsClJp1Lw21puNvKaB3gYJxAiTbGwGrifjs=
Subject key identifier:   87:12:95:E4:35:3E:C4:8F:92:44:39:36:FE:E4:89:11:5F:C5:22:81
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer:       /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial:       01A1818721F943B5B9C570A1ADB6BFAA4365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number:          1AC8
Signing time:             Wed 28 Oct 2026 08:01:19 +0000
Manifest this update:     Wed 28 Oct 2026 08:01:19 +0000
Manifest next update:     Thu 29 Oct 2026 08:01:19 +0000
Files and hashes:         1: 1yqrC5cFVqno3yUjEb2JEevt8hU.roa (hash: ALDcP7GRoyghMSXeDYW2VCy+XpgGkyrbpJ7hv982jsc=)
                          2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: 6DiSnbjOLO2t8qJxxzfZyggpEikcPzrxHEaCk/yG0Ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:87:21:f9:43:b5:b9:c5:70:a1:ad:b6:bf:aa:43:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
        Validity
            Not Before: Oct 28 08:01:19 2026 GMT
            Not After : Oct 29 08:01:19 2026 GMT
        Subject: CN=871295e4353ec48f92443936fee489115fc52281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:28:5a:4b:07:29:b4:dd:b6:a4:90:21:5b:
                    02:bf:a6:bb:95:a6:9e:c4:af:bd:d6:8d:8b:9b:be:
                    e6:23:ce:28:22:c3:66:da:ad:0c:b2:57:b7:51:eb:
                    d3:bf:94:26:9f:b3:4c:3d:9b:d2:f0:53:60:ab:a4:
                    18:83:e3:ba:6b:92:2a:ec:f0:a6:40:4b:8c:a3:8f:
                    df:07:73:f8:5f:ef:21:a6:6f:0d:82:65:8e:78:6c:
                    38:82:1b:15:a1:27:78:49:13:27:ef:e2:56:a4:89:
                    9f:8f:73:eb:15:a0:23:ba:82:e1:62:f5:5c:95:ef:
                    94:0b:27:4d:c4:ae:f4:75:51:87:4e:48:0e:e4:c9:
                    3b:bc:c4:62:f1:1e:5b:9e:68:1c:7b:1a:1c:2c:d7:
                    0b:0c:3d:ca:4d:c0:5d:1d:6c:4d:27:31:2f:ed:26:
                    2e:02:ef:a0:7f:87:e0:e7:03:18:42:b0:bb:64:95:
                    07:8c:7d:22:ee:d4:a0:d6:2f:57:12:62:f8:32:00:
                    6b:58:7d:02:21:4f:bc:24:20:97:a4:a5:7a:a5:28:
                    b1:ad:b6:4c:91:7e:f1:63:bb:06:93:ce:8f:00:fe:
                    55:52:a0:16:51:ae:27:a8:99:be:06:0c:db:7c:b2:
                    d0:21:c7:b8:39:e3:5a:b0:69:25:b6:62:45:58:61:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:12:95:E4:35:3E:C4:8F:92:44:39:36:FE:E4:89:11:5F:C5:22:81
            X509v3 Authority Key Identifier:
                keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:16:14:c7:d3:22:3d:9a:8d:3e:1d:69:1c:f3:fd:cb:44:cd:
         60:98:2a:92:c0:4a:73:b7:69:6b:b6:13:5e:b1:42:a7:94:3c:
         d1:e8:46:ba:2b:5e:7f:33:98:13:95:18:63:af:5d:7d:34:76:
         d6:08:20:7c:2a:1b:4f:25:e8:66:41:23:06:27:b8:2e:a0:bd:
         f4:2e:01:81:ce:83:6c:34:64:a2:f4:f9:d1:85:71:7d:d7:24:
         7f:eb:d2:f5:0d:d8:45:8f:d7:1e:14:c6:11:33:13:f1:03:e3:
         57:a9:45:dd:a1:28:68:2d:9f:ae:ff:8d:5b:3a:db:54:7c:88:
         08:3c:fa:b8:82:68:86:38:50:0b:38:f4:b0:ae:c6:a2:09:04:
         67:00:30:06:ba:e4:54:62:b5:74:66:28:eb:20:cc:33:de:74:
         57:49:e8:d9:35:4b:82:64:75:0e:43:ee:77:a8:26:57:64:8e:
         ce:53:85:cd:e4:cd:f6:51:0e:89:a7:48:1c:b4:13:f0:69:99:
         30:d5:42:51:6e:b1:fb:ee:6f:61:aa:d2:ed:f4:da:70:87:d7:
         3a:16:8b:be:8b:88:1e:2b:ca:87:11:5c:79:cc:10:75:36:ae:
         86:3c:02:4e:90:fd:b1:23:7b:63:03:cf:d5:57:b1:c7:fb:43:
         a4:e5:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:16:30 2026 by rpki-client