Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File:                     zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier:          bUyZ9CXsG4kGMHJ/8RzlgzMd8XFDY3OTVuHxiOn88KM=
Subject key identifier:   A6:41:40:F9:09:44:0E:8D:EA:1F:8B:83:7F:B3:6B:53:D2:3C:53:81
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer:       /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial:       01A02769CC91804298E856DA6699CC21DDA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number:          08E2
Signing time:             Sat 22 Aug 2026 03:00:40 +0000
Manifest this update:     Sat 22 Aug 2026 03:00:40 +0000
Manifest next update:     Sun 23 Aug 2026 03:00:40 +0000
Files and hashes:         1: C-10eoHVV_ERuNuHp1M0fCx__Ag.roa (hash: kJJFsA3C5xKnlbqZn0ozkgC1qO7Vwfq9ha16s0RBd0k=)
                          2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: yu03mhR4dPQBZPnhsE//rCk3vSGKx62oJ90vxhJHOCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:69:cc:91:80:42:98:e8:56:da:66:99:cc:21:dd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
        Validity
            Not Before: Aug 22 03:00:40 2026 GMT
            Not After : Aug 23 03:00:40 2026 GMT
        Subject: CN=a64140f909440e8dea1f8b837fb36b53d23c5381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5e:45:c5:89:17:01:ae:fc:74:94:6b:26:9f:
                    93:8f:5f:3f:9e:68:d6:5b:41:d1:e0:75:bd:17:4f:
                    44:2f:fb:4e:15:c0:fe:a2:f9:55:4b:34:4d:00:a2:
                    a7:12:eb:1e:f1:17:99:0e:34:ac:82:9e:30:6b:48:
                    ad:6f:0a:82:07:ab:c0:f0:74:64:37:23:f3:49:26:
                    b8:0f:df:ba:25:81:6e:71:91:99:cc:65:71:bf:cc:
                    15:2c:34:7d:96:b1:4b:b9:db:9f:75:b8:f0:f1:ee:
                    61:ea:7e:49:7a:74:39:af:a6:c7:99:79:28:e2:9e:
                    de:1c:a1:29:c3:22:c7:57:5c:fb:0f:93:7a:c4:f5:
                    e6:d5:61:99:d8:3f:c7:01:6d:82:79:da:2f:31:d0:
                    26:cf:3c:7f:a5:47:5f:c6:28:10:2c:b8:8b:3b:02:
                    b7:3c:e3:43:75:76:25:a5:e2:c5:cc:ae:29:10:1b:
                    5f:9d:8c:e0:fa:ee:ba:cb:1e:4e:e1:60:27:34:ff:
                    dd:11:63:b5:4a:3b:90:62:b1:6c:09:0b:d4:56:d8:
                    93:15:4f:3a:ca:00:8f:07:eb:43:d4:b3:e0:48:17:
                    62:39:2f:32:3b:fa:ad:75:1f:a9:f1:ea:78:6f:a1:
                    72:71:79:ca:c4:c1:e9:54:5d:17:ed:bc:e4:88:95:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:41:40:F9:09:44:0E:8D:EA:1F:8B:83:7F:B3:6B:53:D2:3C:53:81
            X509v3 Authority Key Identifier:
                keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:e2:50:5e:f4:a6:1d:4a:e5:03:2d:72:83:2e:54:a7:53:
         8e:d8:9b:f9:ff:8f:ce:4f:00:7d:ee:0b:4f:56:20:d3:92:9d:
         b3:4c:51:12:cb:eb:43:a6:c2:60:8b:3c:1c:04:9c:a5:82:a9:
         2a:0b:3d:d5:90:eb:c9:6e:a0:45:bb:41:63:ba:7a:07:1c:a7:
         ff:e6:99:ab:72:c9:4c:c6:a1:df:63:c6:37:7e:6f:b1:b8:32:
         81:42:be:a5:20:3e:2e:62:7d:40:90:31:4b:9d:98:ba:40:bd:
         a8:11:5c:cb:cc:2b:f3:b1:de:30:7a:72:3f:ad:d5:01:02:9e:
         de:fa:91:c0:3c:97:ea:82:e6:76:02:cf:f2:7e:1b:8b:b4:30:
         16:13:df:49:64:30:bc:b5:a3:59:fa:52:4f:66:02:d6:19:4a:
         fa:91:c7:1d:63:38:f3:e7:df:03:57:0b:ee:d0:f0:c0:28:cc:
         06:cb:90:7b:7a:b8:f3:97:e4:02:26:cf:43:5f:4a:67:ce:80:
         95:24:59:3f:36:65:15:b3:72:81:ef:92:e5:fd:37:8b:85:71:
         a9:76:99:27:e5:d4:ad:f5:0f:58:78:58:98:33:34:73:4b:ac:
         95:d2:25:f8:7b:54:87:26:1b:f7:80:f4:78:4e:f8:b3:80:85:
         c7:ca:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:09:00 2026 by rpki-client