Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          +DWwhPE37+itJcwDYXopWa4Rso/kup285yLNFjjIEtM=
Subject key identifier:   47:7B:6F:08:BE:3D:8A:C4:16:9F:BB:9C:66:90:DF:95:16:4D:55:B1
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       01A08AC37ACFA855C80AAE57715E62F371C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          0D3A
Signing time:             Thu 10 Sep 2026 10:01:01 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:01 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:01 +0000
Files and hashes:         1: EUcrUeuArUfiLjyJq2CCJJXEbH0.roa (hash: j5ECLl2Rm4cPawtaMzFLRoWoVbB08uj29AlH0bIyc5s=)
                          2: ImCcU51kmp7ZNuk8BkyjSggDVFA.roa (hash: n45aVak3x5Ct/6DqnZqytEQSgKOpMfagR6z98qYO7lY=)
                          3: OHcQVOiDzKC_wv6FNo8ZwPwzleA.roa (hash: xT0LBnbL9kaBG9ZFdkmrq9KOkjCUtUhM0nWVPUAZpOU=)
                          4: cneDK9wIJto0L8FIGybxXTkN7-g.roa (hash: /ZPU5CDQJmj0WcWpNTND51Omeqs1E74D4tLVOwv5dwM=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: Jp0/eTqSson0mUee8PqRyeYxXgvYyU/oOT0FmuRbnac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:7a:cf:a8:55:c8:0a:ae:57:71:5e:62:f3:71:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: Sep 10 10:01:01 2026 GMT
            Not After : Sep 11 10:01:01 2026 GMT
        Subject: CN=477b6f08be3d8ac4169fbb9c6690df95164d55b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2d:b8:72:96:0a:f2:f6:0e:89:e1:05:c4:57:
                    5d:9e:76:60:ed:c7:92:7b:1f:2a:37:e1:58:cb:02:
                    3c:ed:cb:49:50:d2:19:e2:69:b1:05:b3:6f:86:c4:
                    28:26:3e:de:b1:f2:09:b0:ff:53:74:ab:14:f4:79:
                    95:6a:10:d3:78:fa:68:17:79:bc:03:8b:c8:d2:ed:
                    3d:de:51:5d:7e:e1:8c:a9:45:37:aa:14:08:b1:11:
                    3f:89:f8:a5:bc:36:9f:29:24:25:16:60:f1:f5:6e:
                    28:4e:54:1c:b8:0b:2f:7c:22:9e:9e:0e:06:37:d8:
                    14:9b:08:f3:d4:73:eb:46:04:f3:c6:8d:eb:a7:04:
                    5e:ce:9b:34:ef:ad:ba:d9:91:15:8a:82:7f:9a:bd:
                    3d:ad:b0:98:2a:b3:f2:55:3c:e1:fe:df:04:11:43:
                    45:06:05:0d:87:70:f0:53:35:4f:34:24:af:d0:9b:
                    82:f0:39:41:2c:37:6f:a4:0d:5b:04:79:24:31:33:
                    c3:2e:f4:ea:13:c0:f7:3f:3f:96:27:ac:64:97:5f:
                    60:44:36:f5:c0:eb:48:dd:9d:3a:f2:62:73:70:d8:
                    0c:d8:85:ab:af:3b:b1:6e:7b:65:46:ff:84:f0:9b:
                    db:88:90:71:34:b5:fd:ec:bf:55:4a:70:4a:9e:28:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:6F:08:BE:3D:8A:C4:16:9F:BB:9C:66:90:DF:95:16:4D:55:B1
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:1d:2e:09:46:fe:e5:9c:fe:4f:10:ea:69:d2:54:6f:fc:
         2b:36:f6:45:12:17:1a:98:d5:fb:26:6a:8e:ac:be:39:2d:54:
         6f:f2:06:5d:7f:b0:f4:d0:4c:2f:42:20:a7:b3:ae:bc:ce:eb:
         94:ae:44:20:f0:c3:a1:91:6e:9f:7e:47:77:83:02:be:54:d1:
         c2:a6:16:32:cf:67:7b:c8:ac:6f:a5:6e:9f:12:c1:69:0c:67:
         53:28:d4:de:26:02:5f:a7:ae:af:f3:96:f1:92:01:1c:ff:0f:
         79:6d:8d:a9:57:47:28:6f:fc:29:c5:d5:4d:a2:94:15:dd:d0:
         95:38:c3:2f:e1:35:f3:61:ae:f6:ae:1b:10:ee:b0:47:8f:e3:
         0e:b1:cd:4a:ff:69:b4:5c:a9:a0:b1:35:6f:db:46:93:3c:ac:
         08:3d:d0:98:62:7a:fd:65:8d:fb:2a:db:bd:99:7d:08:38:4f:
         c6:c1:3a:be:6f:58:02:65:32:cf:95:bb:aa:4a:9d:63:3d:b6:
         82:4d:e3:75:b9:da:3b:5c:44:8c:21:35:8e:de:f0:77:d3:86:
         af:b6:d4:75:01:4b:cf:5b:64:6e:7e:ed:33:86:2e:e6:30:d4:
         d5:98:a3:7f:e2:10:1f:b0:09:89:6b:91:e1:07:7e:e5:92:0a:
         91:d4:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:53 2026 by rpki-client