Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File:                     ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier:          XcGCyQYihIfCnSArOTzi/DuAQaY/PuGRqGnmX4z0mkc=
Subject key identifier:   C4:FD:1A:70:4F:FE:44:79:3D:55:31:3C:78:7C:E4:50:DF:30:EC:E7
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer:       /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial:       01A0890C0BC2D186E88E0DDBD8FCB0AF617C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number:          0642
Signing time:             Thu 10 Sep 2026 02:01:03 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:03 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:03 +0000
Files and hashes:         1: 5qNkExOt0emDRhiow-KnQX8Ro24.roa (hash: SZnUDB4XM0tRqzieEnmgDupfTzoEv8bYkRPs9SoQrho=)
                          2: AepDD3jigplk6QcR9LyLUoqqihY.roa (hash: THecEgKrOHG2Vkm6EotNhxdWtYOa+cyczX1SMz1TciA=)
                          3: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
                          4: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: 2298ZPn9VixOIN5R7BoAeW3OSJHIMDgMmMfh9r/zZL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:0b:c2:d1:86:e8:8e:0d:db:d8:fc:b0:af:61:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
        Validity
            Not Before: Sep 10 02:01:03 2026 GMT
            Not After : Sep 11 02:01:03 2026 GMT
        Subject: CN=c4fd1a704ffe44793d55313c787ce450df30ece7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6c:bc:35:0b:7d:04:c2:9c:3e:e6:ca:d4:27:
                    5c:32:97:b6:0a:76:49:8d:48:b8:3f:16:b0:fa:b9:
                    08:75:a7:8e:bd:c2:ca:55:ea:2c:55:61:4a:1f:98:
                    0f:49:84:99:c5:02:60:eb:aa:8f:cd:f0:c1:f7:7e:
                    de:3d:f3:cf:34:2b:5a:7e:14:47:07:d9:f1:dd:94:
                    13:8a:59:c2:24:cc:b4:04:a5:ea:c9:27:ae:60:b6:
                    8f:ca:21:f4:be:dd:55:e4:05:51:83:b2:90:5b:60:
                    d0:39:a2:5c:d5:c9:4f:10:67:90:26:8d:2e:9e:90:
                    84:d1:21:9d:3a:39:35:c1:2f:4b:2c:cb:cb:45:f4:
                    67:89:92:9f:8d:f6:1b:76:d8:07:0d:0f:cb:96:82:
                    27:c4:5b:0e:ff:98:6e:44:23:17:11:0a:cd:f7:14:
                    50:74:99:32:8f:3f:ce:88:72:ae:13:53:d7:12:be:
                    b1:88:a0:7c:62:74:36:ec:bc:1d:0a:ab:8d:46:2c:
                    8b:94:9a:37:68:73:ec:d4:80:11:eb:7f:0c:8b:98:
                    0b:0e:01:30:10:d4:f6:87:19:d4:d0:7f:be:85:be:
                    19:7c:f1:6b:60:cb:f3:a0:bf:95:4e:b5:26:fb:f2:
                    29:60:d0:e3:ef:22:a3:b8:b9:d0:22:a0:3f:cc:bd:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FD:1A:70:4F:FE:44:79:3D:55:31:3C:78:7C:E4:50:DF:30:EC:E7
            X509v3 Authority Key Identifier:
                keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:6d:84:48:5b:6a:b1:79:2b:1a:2f:ed:0a:0b:84:1b:5d:
         94:65:a2:c0:03:96:45:b7:09:7c:28:3e:a4:bb:0a:8b:ea:64:
         f0:6c:b4:48:5e:fc:01:df:ac:00:41:0b:d7:7f:37:7d:a3:49:
         fb:03:25:fb:ee:f8:61:d0:8d:42:fe:e2:27:6a:0d:99:9d:8d:
         51:4f:30:9d:7f:c9:5e:d6:b2:32:bb:36:4d:b1:e7:71:10:8a:
         53:7c:e0:b3:6c:60:29:4f:e6:ae:ff:41:7a:91:8f:03:d0:71:
         59:27:f7:80:91:b3:2f:d0:19:4f:ea:b8:cd:f5:53:57:a6:c8:
         3e:f2:42:66:ff:b6:96:5b:53:83:e2:3f:47:e6:93:bf:dd:31:
         2d:74:3c:c1:a8:a5:b7:1e:86:00:6d:f9:0e:ad:c2:7c:61:a2:
         43:0e:c8:50:57:94:77:16:97:1f:a0:5b:d5:94:cf:01:38:cd:
         4b:18:f9:c5:33:4a:55:69:56:72:49:2c:ad:d1:90:4b:10:d2:
         6c:a5:1b:bb:4d:2d:33:c0:c8:f7:5f:a4:19:77:30:b3:b1:34:
         d4:34:97:5d:46:df:5a:08:1a:53:76:1c:9c:e9:22:72:65:26:
         18:33:6e:f2:09:e5:fa:86:fb:0b:2e:b8:58:ef:58:94:62:26:
         43:1c:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:03:05 2026 by rpki-client