Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File:                     Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier:          6GV9P1kcfu9lxHX/oHMoIBRlBm9lkTvHT1Kk3Z0Sv5Y=
Subject key identifier:   9D:51:36:67:BB:CE:E2:B9:0D:55:68:68:7B:14:45:E5:41:C0:25:76
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer:       /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial:       01A17F61E449B77AA1FC136FD94719668392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number:          0A22
Signing time:             Tue 27 Oct 2026 22:01:24 +0000
Manifest this update:     Tue 27 Oct 2026 22:01:24 +0000
Manifest next update:     Wed 28 Oct 2026 22:01:24 +0000
Files and hashes:         1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: /MVIj1c9no2tYT11XAnM8Qb6xcSBBIz5Mtpvrj5hALI=)
                          2: lD0Wwhw0gpihU_arbUQK_IQqs4c.roa (hash: 6HIhfJOZXKPxqB9WM2oez5Dgrzz0kzJpo4+10uPExmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:61:e4:49:b7:7a:a1:fc:13:6f:d9:47:19:66:83:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
        Validity
            Not Before: Oct 27 22:01:24 2026 GMT
            Not After : Oct 28 22:01:24 2026 GMT
        Subject: CN=9d513667bbcee2b90d5568687b1445e541c02576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:6d:2d:8b:1d:48:6c:7a:f3:02:80:0b:13:
                    26:12:25:aa:5b:35:77:7d:4e:ef:59:0f:1a:15:26:
                    5a:9c:f1:c8:60:5d:62:44:37:8e:0e:01:2f:9b:cc:
                    17:e3:7f:fa:49:4f:de:ce:fa:3a:4f:bb:89:11:9a:
                    3f:38:14:e1:94:10:7b:75:09:fe:d0:a0:ac:06:a8:
                    2d:c6:00:f1:63:a6:a4:d2:96:22:f5:59:e8:c4:4c:
                    67:dd:f0:c6:dd:19:46:e5:e4:be:3c:5e:d3:71:8a:
                    9a:69:f8:6e:f0:20:74:5b:c3:4a:82:61:93:82:8d:
                    8e:a3:4b:f4:a0:e4:a6:8e:89:c7:a3:12:80:47:36:
                    56:7e:db:8f:71:37:c5:22:f5:ae:b8:f3:3b:8d:bc:
                    13:de:da:0d:d1:06:35:42:8a:0f:b6:a4:2c:12:e7:
                    23:44:c7:31:54:e9:98:99:4b:c2:ce:8f:73:36:a1:
                    33:30:6c:00:18:04:66:0a:76:c8:8c:e1:e8:37:bc:
                    08:d3:2f:ab:f3:f5:24:d8:a5:75:7c:d1:30:de:35:
                    4c:d2:b3:5b:47:12:8b:ca:bb:d0:93:b3:18:7b:f6:
                    09:06:72:70:b0:9d:58:2c:64:5e:7c:04:8c:23:a2:
                    e6:d3:3b:f2:2a:b2:eb:07:65:dd:24:60:d6:e4:aa:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:36:67:BB:CE:E2:B9:0D:55:68:68:7B:14:45:E5:41:C0:25:76
            X509v3 Authority Key Identifier:
                keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5d:41:eb:cd:cd:20:dd:a6:9a:76:62:4e:da:b3:e8:f5:83:
         61:90:5d:6e:a3:52:90:da:af:5f:6f:60:9d:3f:0f:56:f7:a4:
         c6:83:b6:47:19:48:88:1a:0a:17:77:da:79:f3:01:73:b6:75:
         e2:6b:f3:a0:5d:90:fa:7e:24:33:2f:c2:10:0c:58:b1:4c:84:
         c8:e3:e7:78:91:50:c7:70:5c:ed:86:ba:e9:98:af:e2:3c:21:
         8e:65:e1:4f:95:22:47:c5:56:d4:d0:b1:b6:ba:d1:89:c7:77:
         e5:2f:ed:03:01:4a:32:5b:c4:c8:15:52:37:38:f0:0d:58:9e:
         a9:8e:82:7a:0d:3a:32:87:a8:44:56:ac:8a:32:cd:e4:aa:d6:
         89:ba:95:bd:3b:d2:8c:70:02:f0:7e:0d:a5:31:74:5a:2a:13:
         5e:90:c4:2a:f2:40:99:fe:5a:bf:54:ba:c1:5d:ee:a0:36:4f:
         9d:6e:15:76:de:0b:47:f3:c9:16:22:eb:c0:14:63:8c:81:8f:
         61:02:0a:3d:65:c7:43:1e:0b:a6:5a:9b:12:bc:5e:f8:f1:75:
         a0:02:d9:0b:55:ec:28:f9:e3:d9:b3:9a:a9:87:d9:94:f2:10:
         40:b4:ee:fa:29:f5:fe:7c:b9:8c:35:8e:27:11:a9:93:26:ba:
         6f:8c:a6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:20:00 2026 by rpki-client