Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          wjVzQN+cYn15O43gGmeItL9I8alQI0xFo2smqSQrMm8=
Subject key identifier:   5A:3E:86:E5:08:60:1A:3F:57:21:DE:88:26:BE:C3:13:34:0D:D5:2C
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       01A054E795CA1346A92E2D4DE18B7DDD472A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          138F
Signing time:             Sun 30 Aug 2026 23:00:58 +0000
Manifest this update:     Sun 30 Aug 2026 23:00:58 +0000
Manifest next update:     Mon 31 Aug 2026 23:00:58 +0000
Files and hashes:         1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
                          2: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
                          3: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: Kj3nHA0frNF0c4YEl73C4rjQErQwDhl0fR/BJKDg9P0=)
                          4: az8-qmAm__Q2vWY0AcJPLxKPa7w.roa (hash: wZzIfzMKAO+r012Fp/hJId8drWxI5XCw8K4AvtAAvEM=)
                          5: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
                          6: ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa (hash: QvdoLk4yxysIF/RBd4WT88j/9RIybsVbv3Yb9pLmzK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 31 Aug 2026 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:54:e7:95:ca:13:46:a9:2e:2d:4d:e1:8b:7d:dd:47:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: Aug 30 23:00:58 2026 GMT
            Not After : Aug 31 23:00:58 2026 GMT
        Subject: CN=5a3e86e508601a3f5721de8826bec313340dd52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:2d:b8:5f:c7:60:67:fe:e5:b1:a1:df:c9:
                    cc:97:39:dc:ec:a9:24:53:b5:2e:5a:7e:f2:16:0f:
                    aa:93:37:28:95:0e:b4:10:83:69:ca:58:9f:28:b5:
                    9c:ba:c6:8c:2c:9b:10:7d:58:f1:a1:86:a6:07:fb:
                    8c:88:f5:6b:67:06:ef:a7:34:5f:cc:52:83:58:f7:
                    e6:48:2e:ed:90:ff:19:92:5d:61:35:36:fd:cb:24:
                    70:45:76:1f:42:ba:62:8b:9f:ee:c4:70:82:ad:db:
                    9c:7d:f7:98:92:99:d0:81:c3:49:11:b5:e7:66:44:
                    c3:c1:0d:8b:a2:48:b3:41:26:7b:02:8a:ac:fc:4a:
                    97:eb:c6:e9:3e:59:68:87:03:5a:e4:67:f0:7d:4d:
                    67:e1:ca:2c:dd:06:88:c9:37:00:e5:0a:fa:71:2d:
                    a3:01:af:2d:9d:c3:8a:17:fa:ba:2f:fa:23:c9:cb:
                    22:37:1c:fa:59:dd:a9:9e:76:80:f1:1a:20:79:2e:
                    41:e3:41:37:e0:bf:96:a8:e4:86:d0:70:4c:9c:d7:
                    d5:35:2d:b2:e7:21:34:d6:ae:a3:89:d0:99:81:37:
                    aa:4b:fd:45:22:6f:c3:b3:9c:be:6a:0d:3d:7d:37:
                    6d:9d:b0:60:a2:dd:50:a3:3b:9c:a6:9c:c4:d6:14:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3E:86:E5:08:60:1A:3F:57:21:DE:88:26:BE:C3:13:34:0D:D5:2C
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:f4:28:e8:15:d4:16:2c:0c:e7:2f:40:c5:0a:71:e8:d6:
         a0:ba:0d:a6:68:6a:91:a5:3f:cb:26:97:90:92:7e:44:0f:88:
         76:92:8e:ed:d5:22:22:b9:f3:9d:5e:92:47:44:ed:f0:1b:80:
         06:58:05:37:1c:c5:48:2b:f4:0f:57:b2:d3:eb:7b:14:07:bd:
         d9:e8:e1:37:95:fb:54:92:4f:04:94:30:a3:f5:74:0e:e0:45:
         cb:cb:e6:30:ea:55:ba:71:64:22:cc:09:47:db:6b:de:a6:0d:
         5f:ec:70:36:b6:02:b1:3f:4a:8f:a7:ec:04:08:f8:75:12:5d:
         0f:79:87:20:81:bd:cd:db:da:c1:f0:30:a4:ef:5a:cb:f9:99:
         b8:f4:1a:8e:08:8e:b3:3a:39:98:60:3e:ab:5e:b3:14:14:24:
         72:ee:7f:8e:2f:d4:54:66:cd:74:8e:48:99:ae:98:ed:d8:31:
         cd:5b:84:17:74:4b:e6:d3:bb:2d:13:5a:8c:22:a4:1a:8f:f9:
         98:34:17:36:32:53:aa:17:57:2a:d9:ae:f0:0d:7d:8e:36:9d:
         72:4f:93:68:d0:3a:34:1f:cf:f4:5f:45:c3:fd:8a:3a:52:66:
         c1:c6:e2:2c:b2:af:9e:4c:9a:ff:58:56:aa:bd:77:4c:5a:88:
         d7:8a:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 08:37:29 2026 by rpki-client