Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File:                     zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier:          n1zfM7Tq4cmEMuWe/5RVPsfHGN3aa+Xv2duA8vvrgqQ=
Subject key identifier:   0E:C0:07:7B:5C:A6:A5:EE:73:94:5D:09:20:28:49:B7:A2:CC:67:1A
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       01A08B68B7A136B9A30F2B4DDCB8CDF96744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number:          1788
Signing time:             Thu 10 Sep 2026 13:01:30 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:30 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:30 +0000
Files and hashes:         1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
                          2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: WxMgQ6WepWoaWWN0Um3E0AmyMgwKKTotBoSGAcBhmTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:b7:a1:36:b9:a3:0f:2b:4d:dc:b8:cd:f9:67:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Sep 10 13:01:30 2026 GMT
            Not After : Sep 11 13:01:30 2026 GMT
        Subject: CN=0ec0077b5ca6a5ee73945d09202849b7a2cc671a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f2:e9:5d:12:c4:e9:e8:f9:16:94:e0:fd:ee:
                    43:6c:e6:ac:17:9e:21:b9:f5:b4:6b:9b:a6:4f:6f:
                    1c:4a:b7:a7:76:4d:0f:e0:6b:03:46:5d:1e:9d:58:
                    b1:83:d9:4b:8f:fd:9d:8a:1a:86:02:d5:6a:c8:bf:
                    c8:4d:79:d3:04:ee:e7:1a:f1:98:68:1c:34:d3:c7:
                    b4:35:97:3c:45:fb:60:9b:d8:8a:0a:ad:ae:c9:39:
                    53:eb:4d:8a:45:76:61:f3:1b:c6:44:fd:d5:1a:59:
                    b1:57:8d:f7:9f:8c:5b:ca:8b:56:97:98:43:86:4a:
                    f9:82:f6:2a:07:87:69:49:21:48:f0:c8:64:b9:7d:
                    1b:58:12:34:c5:95:ac:f9:c6:a9:34:0b:7d:f0:28:
                    0e:f5:c5:05:41:f5:18:93:81:f3:d4:af:cc:80:2e:
                    ee:67:f6:ed:36:8e:03:5e:3c:67:a5:7e:24:6d:7f:
                    51:6d:66:1b:5d:03:d8:51:50:42:31:97:56:d2:4c:
                    79:e9:1f:5f:58:71:b4:c0:a4:6a:1e:8b:7f:41:61:
                    84:e8:6b:76:8f:cc:cf:4b:6c:c7:02:3d:b4:d5:3e:
                    df:49:05:63:43:89:71:11:a8:97:c2:5a:5d:07:63:
                    e5:ca:cf:ce:82:bd:42:4d:ad:3f:2c:d5:56:21:db:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C0:07:7B:5C:A6:A5:EE:73:94:5D:09:20:28:49:B7:A2:CC:67:1A
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:73:ad:5c:bd:13:5e:1c:70:99:d8:59:ec:27:bd:80:7c:30:
         42:8b:a8:3c:47:84:00:81:1a:03:13:21:90:ef:b1:96:40:52:
         05:cd:18:ae:02:c3:9b:be:35:b6:39:fa:ca:a6:6c:16:f7:64:
         40:0a:09:67:6f:1e:be:ea:a7:bc:4d:e0:5d:b5:4f:73:72:60:
         9d:62:54:d3:29:a2:c7:ff:04:47:83:2f:ed:5b:18:0c:e0:3d:
         9e:8b:05:2f:4e:88:0f:e2:7c:8c:3c:d3:fd:df:98:af:34:c4:
         f6:cf:37:5e:b5:06:29:00:06:83:6a:16:3e:51:1a:29:ad:de:
         5a:ec:bb:14:89:b3:c4:ed:0e:d1:e3:25:86:cd:02:bd:63:bc:
         28:96:e7:22:2a:1a:7a:71:24:f6:f3:1b:c6:9e:3c:a9:f2:b8:
         78:30:0b:74:8c:84:55:c8:3a:d8:6c:34:25:f1:a2:54:37:bc:
         11:3a:4f:41:3e:10:41:b2:cc:87:67:84:92:ac:e6:8c:40:f8:
         62:74:20:82:d7:84:b4:40:40:c9:2f:08:2a:1c:74:12:8a:80:
         17:e4:a0:0f:fa:19:f8:dd:5f:0d:e4:b6:3a:98:b2:52:c3:32:
         c2:ef:4c:b0:dc:f0:d6:30:5d:fa:99:fb:52:ca:ed:f1:f2:3f:
         fd:98:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:39 2026 by rpki-client