Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File:                     ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier:          JK/gtKE8CNHCyKOTRKQP4GViaeI7O0K+6Euxtx0Y/Dc=
Subject key identifier:   AB:C2:9A:F1:3A:35:42:B8:51:94:A3:B0:D6:7A:AF:65:45:8B:98:69
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer:       /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial:       01A0E4E3CD10D2D4F17ECDD2CB8C584B9FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number:          0C81
Signing time:             Sun 27 Sep 2026 22:02:09 +0000
Manifest this update:     Sun 27 Sep 2026 22:02:09 +0000
Manifest next update:     Mon 28 Sep 2026 22:02:09 +0000
Files and hashes:         1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: RRG8tcdTRD8CYhw+Q5OdvC3ULcBNTY/SHVHlS7QTuMY=)
                          2: yAKqOuAium6XTMoXJuu9-_uS-DY.asa (hash: 1Vmi077ETJ356TXKXOK6rfga9DOuY5i7B2F3O1wC39o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 22:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:e3:cd:10:d2:d4:f1:7e:cd:d2:cb:8c:58:4b:9f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
        Validity
            Not Before: Sep 27 22:02:09 2026 GMT
            Not After : Sep 28 22:02:09 2026 GMT
        Subject: CN=abc29af13a3542b85194a3b0d67aaf65458b9869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:2e:2c:9d:59:ec:96:18:55:65:5d:1a:41:
                    a2:0a:4c:db:a3:64:d8:ef:d4:5d:bc:c1:78:f7:45:
                    72:c3:60:99:87:14:bf:e0:41:96:86:d6:77:47:cd:
                    a5:b2:46:d6:37:dd:82:98:de:35:0e:e5:e7:dd:f8:
                    73:b6:ed:70:b3:ef:aa:9d:85:a3:8a:7b:fd:f9:60:
                    cf:94:69:71:df:1c:9b:81:f8:de:26:cd:58:be:ec:
                    ec:8e:f5:53:73:c7:a5:57:87:5e:78:2b:e0:ad:fa:
                    05:8f:f1:c6:e3:04:64:e7:81:f6:2e:23:5d:26:3b:
                    1b:c3:d2:21:3f:bd:c6:88:da:90:31:53:ae:f3:a0:
                    2b:1e:f5:b4:3d:28:7d:d3:79:b2:a1:a2:c6:b9:75:
                    f5:4e:84:f3:8f:24:ff:f9:5c:a7:45:57:5e:aa:b6:
                    71:20:a4:c7:af:04:58:57:35:ee:dc:52:9b:84:73:
                    1c:6a:e5:c4:ff:55:ce:cf:7f:07:4f:66:14:d9:ee:
                    25:e1:7b:a4:c0:5c:af:0d:db:cf:4e:e1:cd:b1:c6:
                    31:f3:94:21:64:45:e6:fc:3f:13:f0:be:ee:a8:91:
                    c8:94:94:c8:6f:38:6a:0d:65:6a:75:33:6a:73:f2:
                    84:af:4f:2c:80:f8:3c:23:40:ae:94:20:f5:6a:46:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C2:9A:F1:3A:35:42:B8:51:94:A3:B0:D6:7A:AF:65:45:8B:98:69
            X509v3 Authority Key Identifier:
                keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:bf:80:77:4b:de:d3:e9:4e:17:22:af:89:fb:0a:5d:9e:
         2e:73:21:92:e0:9e:3a:4e:a9:d1:44:bb:21:24:88:4f:a4:4d:
         fb:ef:69:b6:d6:3e:f1:59:1c:9f:08:e5:a3:1d:ae:a1:77:36:
         d5:99:ff:10:fc:30:9b:1a:80:55:11:df:b4:37:64:7e:75:83:
         35:81:d7:5d:e2:b8:6a:1d:a4:72:ca:51:b2:4f:52:80:60:58:
         cd:7b:a8:25:9a:e4:48:ce:4c:e0:c8:30:f8:c0:24:94:78:cf:
         1c:e9:a6:32:66:59:4c:42:7a:67:cb:a1:dd:4c:3f:72:89:19:
         ee:03:a2:81:fd:bf:04:0b:c4:4a:c3:96:2d:7d:dd:35:76:ad:
         a1:13:64:fa:be:ea:61:55:f9:50:23:28:9a:cf:9c:68:22:b7:
         ed:f1:bb:a0:64:06:97:f6:73:83:5b:cd:9b:b3:fe:c6:bc:50:
         3b:5a:e0:83:68:9c:dd:63:71:f5:d1:4a:2f:6b:24:b8:87:9a:
         e1:11:c9:8e:78:6e:a2:b5:fb:c7:cd:6e:8d:d9:ea:55:82:e0:
         c3:fe:80:83:85:64:5c:b1:a6:4b:13:36:7b:ae:91:cf:d6:aa:
         84:e6:92:e2:35:bc:20:d9:6a:a7:cd:77:27:d5:e3:eb:53:b2:
         8c:95:b5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:43:10 2026 by rpki-client