Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File:                     ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier:          fcZ7qScO4hm6W+eYFl4xch0Zavj+LFZgT+CNnIkY+CA=
Subject key identifier:   4A:E7:60:86:08:83:BA:22:7C:BE:7E:14:C5:AB:B0:76:04:43:19:90
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer:       /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial:       01A17582BDB169BFDF397052ADB458894E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number:          06BE
Signing time:             Mon 26 Oct 2026 00:01:04 +0000
Manifest this update:     Mon 26 Oct 2026 00:01:04 +0000
Manifest next update:     Tue 27 Oct 2026 00:01:04 +0000
Files and hashes:         1: 5qNkExOt0emDRhiow-KnQX8Ro24.roa (hash: SZnUDB4XM0tRqzieEnmgDupfTzoEv8bYkRPs9SoQrho=)
                          2: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
                          3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: Y0iNq2EbuGekO3FJE2leeB9t/GLSUYqDYU0XZwlLpaw=)
                          4: xTS6Tfiu-9uA63wefJtwTOK2RJM.roa (hash: 4AnrhCLByieTG8zvOspxIp8KCN2IgRpCwnbkXSHOdgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:82:bd:b1:69:bf:df:39:70:52:ad:b4:58:89:4e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
        Validity
            Not Before: Oct 26 00:01:04 2026 GMT
            Not After : Oct 27 00:01:04 2026 GMT
        Subject: CN=4ae760860883ba227cbe7e14c5abb07604431990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:a6:82:c9:07:69:ba:68:fb:18:e7:6a:49:
                    17:58:2b:bb:28:be:0d:d8:55:72:81:ec:09:90:01:
                    e6:ea:e1:4e:6a:c2:6e:11:a5:fd:9f:29:7f:62:f0:
                    f4:67:7e:08:4e:24:f7:f9:11:b2:dd:51:4f:c5:0b:
                    a9:28:97:8e:05:49:4d:f4:84:76:79:93:d7:70:dc:
                    71:5b:ca:67:5f:a2:c8:3e:a7:bf:ab:41:c2:82:d2:
                    82:39:dd:ff:ef:36:fe:42:2b:40:dc:1b:66:f1:72:
                    b8:37:3d:df:75:15:8f:78:31:63:92:a7:23:30:81:
                    53:87:da:e2:f0:89:dd:4a:fa:89:85:3c:b0:9f:3c:
                    99:b0:cc:1b:b9:72:26:dc:bf:53:fd:01:b4:92:19:
                    66:a5:54:28:22:bb:47:00:be:90:3b:8c:1c:aa:b2:
                    c1:35:bc:bd:39:21:17:4f:15:61:33:55:de:bf:be:
                    30:f6:c3:67:08:21:57:69:43:0f:df:a0:f0:a1:63:
                    59:c1:13:cb:34:ce:74:71:61:6d:29:14:3e:34:35:
                    e0:b4:09:fa:fa:09:b3:52:99:56:8a:4c:24:7d:31:
                    bf:de:eb:35:45:37:7a:6b:35:55:f5:6f:34:3a:b5:
                    8c:96:53:79:7f:d9:0f:ff:38:00:a7:19:4d:f7:d6:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E7:60:86:08:83:BA:22:7C:BE:7E:14:C5:AB:B0:76:04:43:19:90
            X509v3 Authority Key Identifier:
                keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:14:72:bd:a1:c7:59:1c:d4:ce:d1:ba:c5:bc:c3:e8:aa:1e:
         8a:63:9a:01:b1:a0:9d:5a:ee:49:dd:01:41:ae:ce:04:3a:43:
         52:67:f6:ec:12:5d:b3:51:79:dd:8f:db:b5:4b:cb:92:8e:c9:
         f9:3a:49:01:c4:b2:a8:82:91:0f:3f:88:bc:b9:4e:04:d4:b6:
         f8:7e:07:51:6b:fe:30:3f:1f:a8:9f:ed:3f:56:65:b1:f8:45:
         29:de:43:31:54:a2:a4:b8:25:42:92:ef:bf:ed:e7:cf:d9:db:
         d5:57:d3:f0:10:6e:ab:8c:dc:38:95:3d:0e:25:ab:9f:57:df:
         2f:3b:8f:14:53:f7:f5:7e:78:1c:7e:dd:f7:19:00:97:47:36:
         0b:51:21:00:3c:10:91:f2:d7:aa:6b:bf:80:18:f7:62:7f:e2:
         2c:4b:6b:07:2c:f7:8b:09:12:a2:6e:83:be:f6:49:9a:1e:5a:
         24:aa:19:4b:94:d4:ab:59:83:eb:7c:cd:44:2f:b6:61:bc:18:
         e2:6b:b5:3a:4f:9e:39:08:50:a6:21:62:9e:60:2f:f4:57:23:
         48:c6:2b:30:3c:bb:71:0b:45:56:ee:00:d6:ee:9d:35:32:15:
         f3:42:3d:81:65:19:6d:e3:e5:c7:8d:e5:c0:8b:6b:5d:d6:a8:
         8d:a4:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:49:57 2026 by rpki-client