Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File:                     Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier:          2sJNmV1TSQhrCTC6qcUZnFnZlmKgevy0us2qFFmtQO0=
Subject key identifier:   08:8D:45:D9:C6:B6:7C:93:3A:7E:EC:1A:16:2B:56:D7:59:44:F2:0C
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer:       /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial:       01A080771E25CD6D2F2E7D1CA9514D3BF0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number:          099E
Signing time:             Tue 08 Sep 2026 10:01:25 +0000
Manifest this update:     Tue 08 Sep 2026 10:01:25 +0000
Manifest next update:     Wed 09 Sep 2026 10:01:25 +0000
Files and hashes:         1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: UvtyggQXgZWhbGUvyBNo6pk8IMCGFXJiSFKUHPkqGws=)
                          2: lD0Wwhw0gpihU_arbUQK_IQqs4c.roa (hash: 6HIhfJOZXKPxqB9WM2oez5Dgrzz0kzJpo4+10uPExmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 10:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:80:77:1e:25:cd:6d:2f:2e:7d:1c:a9:51:4d:3b:f0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
        Validity
            Not Before: Sep  8 10:01:25 2026 GMT
            Not After : Sep  9 10:01:25 2026 GMT
        Subject: CN=088d45d9c6b67c933a7eec1a162b56d75944f20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:7b:3a:c5:ca:4d:b1:38:99:a7:49:48:7b:
                    99:1b:88:ea:41:70:ab:b0:69:18:01:27:71:c1:3e:
                    2f:3b:33:fa:81:80:85:13:c0:af:5b:4f:20:e8:c2:
                    e8:7b:21:13:ed:03:7a:fa:97:2e:45:1f:c8:af:90:
                    f1:95:af:d7:c9:7d:3e:7a:00:f5:ad:70:10:8a:ce:
                    6e:7a:5d:c4:c3:5b:b6:f2:a8:93:7f:3f:f9:56:d1:
                    51:1e:55:a9:2f:b9:72:62:83:b1:a8:e1:ad:17:5d:
                    9b:09:0b:2b:4a:3d:3d:03:94:fb:6c:d9:d7:55:1a:
                    f9:87:58:8c:43:18:40:68:96:66:b5:38:77:cf:71:
                    ac:6f:72:e6:22:72:4d:e9:5e:8f:2a:d0:7e:43:ae:
                    be:59:83:40:65:06:bf:81:27:fa:3e:cc:97:20:63:
                    25:b9:95:a9:37:e5:0c:39:c8:1f:a9:97:a7:ad:55:
                    68:da:b0:df:57:4e:f3:b1:db:ab:b4:b6:64:9c:3a:
                    ab:12:9c:83:23:43:0c:b5:16:e3:c2:31:e9:20:86:
                    1b:ab:cd:a0:03:d3:81:db:6d:0d:2f:36:3a:3b:4d:
                    49:74:ba:fb:bb:af:a4:02:52:33:1e:d8:13:49:8e:
                    1f:35:f2:c0:3b:46:86:8c:8c:1f:0e:4c:b6:2a:ea:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8D:45:D9:C6:B6:7C:93:3A:7E:EC:1A:16:2B:56:D7:59:44:F2:0C
            X509v3 Authority Key Identifier:
                keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:a3:2b:93:bd:4f:90:75:ac:55:69:8a:9d:95:e6:3a:42:
         d8:f4:5f:8c:ae:f9:d2:65:b1:a5:38:35:51:76:86:01:c2:e9:
         fb:3a:75:da:a2:c2:22:e9:08:31:ec:97:04:ed:58:36:49:3a:
         17:c1:27:a6:40:08:6c:4b:2d:b8:28:4d:46:ff:1a:e8:14:68:
         3d:76:10:0c:27:5e:5b:23:1d:d7:6a:a5:08:c5:62:d6:0b:ca:
         4d:ee:89:36:ec:75:50:d8:b8:27:5a:27:c2:1b:cc:f7:37:31:
         64:32:61:66:b2:ea:9f:a4:b4:d7:4f:b2:e6:f0:a8:59:f4:2b:
         4f:2f:f7:e9:a0:b0:82:c8:dc:59:31:3f:26:f5:22:83:94:fc:
         8f:1d:16:8d:83:fc:02:16:7d:52:32:ea:96:e9:f8:ee:3f:77:
         71:4b:36:3d:95:71:c0:26:39:cf:1c:d4:3b:be:23:1e:5c:63:
         d3:eb:f3:7e:7f:a4:c9:e4:c6:2a:c4:ff:f6:f2:2f:0f:f4:5a:
         b4:6c:ca:06:41:f7:a9:93:64:79:4d:38:00:c2:06:32:1d:6c:
         7b:42:17:a7:7e:d3:ef:fa:9d:ae:99:14:29:3d:a5:2d:c6:a1:
         2e:4d:b9:c9:52:d4:78:51:fd:1b:01:e9:f2:3f:0a:56:9b:b0:
         a1:0e:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:42:12 2026 by rpki-client