Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File:                     zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier:          wv1+EyOLl5Tv7LMJqXdDpzriFd4KNmcFl58uCoSNPZk=
Subject key identifier:   28:3C:AE:6E:C1:B7:2F:65:25:55:99:D3:23:F6:A1:D8:25:E3:4A:83
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       01A18676445FFA7C0F947B04F4931887637C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number:          180A
Signing time:             Thu 29 Oct 2026 07:00:59 +0000
Manifest this update:     Thu 29 Oct 2026 07:00:59 +0000
Manifest next update:     Fri 30 Oct 2026 07:00:59 +0000
Files and hashes:         1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
                          2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: zpQssKdHjrs2SZNkTw1J9gn6Foh7CnPNX+o1L6XIWNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:76:44:5f:fa:7c:0f:94:7b:04:f4:93:18:87:63:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Oct 29 07:00:59 2026 GMT
            Not After : Oct 30 07:00:59 2026 GMT
        Subject: CN=283cae6ec1b72f65255599d323f6a1d825e34a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:97:01:73:e5:21:34:65:2a:94:a2:d0:8a:
                    02:95:ef:83:30:55:53:b2:ac:72:bc:bc:fe:8b:9f:
                    31:df:d9:77:16:d2:5b:ac:8e:50:65:be:ad:e6:f0:
                    9c:23:e2:45:78:b7:3d:5c:17:87:6d:bc:c0:06:04:
                    00:ac:fb:ec:72:d9:99:0c:ca:fa:4d:27:e6:57:ef:
                    13:ea:b5:16:14:09:40:d9:8d:20:0f:d9:ba:55:77:
                    4d:d0:4e:85:d7:65:62:27:6e:17:7e:13:d6:20:c5:
                    65:0c:8b:fb:ff:00:29:e1:9e:75:bc:92:31:32:03:
                    e4:e0:97:81:ad:23:17:8c:0c:25:65:d4:99:9b:20:
                    b1:e3:8a:6a:00:bf:31:33:8d:bd:32:c8:b0:c1:1a:
                    79:97:8c:e3:58:a9:a9:f4:f0:7f:f6:06:8f:8b:43:
                    a8:cc:3e:c0:75:67:75:a9:95:7c:fb:78:72:1c:14:
                    05:3e:b8:20:a2:99:aa:32:fa:d5:81:c7:62:b1:8f:
                    d4:f0:13:bf:ca:76:ca:76:94:ea:8b:88:cb:46:28:
                    24:75:93:7a:49:e5:f9:01:f9:87:35:84:ca:12:3c:
                    50:c7:d8:02:d7:98:c7:4e:fa:9d:ce:9b:2a:86:b7:
                    a4:f1:ed:42:d4:3c:f3:bd:f9:15:0e:0a:f7:df:3a:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3C:AE:6E:C1:B7:2F:65:25:55:99:D3:23:F6:A1:D8:25:E3:4A:83
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:0d:fd:62:02:63:d0:4a:6f:cd:29:64:6e:a7:5a:70:09:
         c8:67:ea:6c:58:f9:e3:2a:26:0e:69:5b:8f:8c:19:15:b5:1c:
         32:45:2c:e2:c2:ca:fe:9f:c3:e9:e0:53:93:0d:eb:b4:d1:a7:
         bc:10:0d:25:68:29:13:79:8b:94:bc:15:6e:51:b6:ae:a7:c3:
         38:3e:be:6f:40:bd:8b:d7:f7:c6:8f:44:4e:9d:69:d8:21:d2:
         95:80:41:e6:77:6f:06:73:b7:0e:74:68:db:5e:6a:ff:5b:4e:
         77:e4:8b:8e:1a:a1:6a:d8:ca:a9:73:14:71:b0:4f:44:e3:d2:
         dd:b0:60:59:89:67:05:c0:8e:d0:ae:cf:af:46:12:f9:1e:7e:
         db:67:50:59:e7:e5:d1:6f:37:b1:28:a3:ad:91:b2:3d:0a:f1:
         14:d8:6e:4d:14:0e:6d:3f:d6:d1:da:64:87:f9:84:4d:a2:db:
         a5:7f:49:ef:72:23:03:36:25:bc:62:50:0d:7d:18:02:bb:c9:
         e1:0d:3d:87:1e:1e:72:ea:ae:35:1a:ed:5a:fe:66:0a:f4:03:
         87:34:e3:b7:2b:9f:ee:4e:0f:19:97:e7:5d:19:37:e1:90:08:
         55:9e:56:b4:04:35:9d:27:04:f5:fd:6a:ff:47:e9:2e:08:55:
         51:d0:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:13 2026 by rpki-client