Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File:                     ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier:          QV29b0OMD4M4V3nzuZjE/ZF7Ej5Gs1SIlshRBbk5O6o=
Subject key identifier:   9B:89:54:EB:AA:ED:5E:62:3A:B2:4A:C8:28:13:2D:20:8A:11:51:6E
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer:       /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial:       01A0BC1D54053B8E50F1A84A6DE796498C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number:          09DB
Signing time:             Sun 20 Sep 2026 00:00:33 +0000
Manifest this update:     Sun 20 Sep 2026 00:00:33 +0000
Manifest next update:     Mon 21 Sep 2026 00:00:33 +0000
Files and hashes:         1: X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa (hash: r5fWgTPjjmB31St0AmzLTssy0JP6/zDB0uGldcQoQt0=)
                          2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: W4jNFRi6TFUw+c0WWZAEkAg9DyC5KxNwdqqFlQuLPfY=)
                          3: pbOnM14FBGbBbt13YVtewZP_2tQ.roa (hash: QF3tVszgFzePTz3dxu9AP7R+NV7UXuG0plXFea94dww=)
                          4: tU70CLv_FnaoDz0xj6FPiJvGn-k.roa (hash: G4YFrMOaB3YYQfWSQNKXIK2SLKAYNELC+w3hU94N7bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:1d:54:05:3b:8e:50:f1:a8:4a:6d:e7:96:49:8c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
        Validity
            Not Before: Sep 20 00:00:33 2026 GMT
            Not After : Sep 21 00:00:33 2026 GMT
        Subject: CN=9b8954ebaaed5e623ab24ac828132d208a11516e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:69:41:18:cb:58:63:6e:1a:5d:dc:62:ac:
                    35:b4:34:ca:1c:5b:8a:e0:73:44:53:6e:e1:0b:2f:
                    8c:0f:8b:bb:5c:72:69:51:5a:0b:12:5c:3d:fc:e4:
                    ae:9c:b0:16:91:a4:f5:ff:47:37:7a:9b:04:1b:03:
                    d1:9b:b5:e5:8f:c8:ae:2e:c0:ed:79:d7:f8:f7:12:
                    b3:cb:9b:da:08:b8:36:cb:71:35:df:15:4a:9d:69:
                    2a:66:07:16:c3:b5:fe:8f:d8:3a:86:b3:e4:71:76:
                    a1:53:3e:a6:18:2f:fd:dd:1f:f1:fa:60:db:21:d2:
                    77:7f:0e:17:f5:54:8a:ce:4f:e4:e7:20:8a:47:18:
                    63:7b:9d:c9:94:c7:6f:87:c3:d2:0b:d3:c7:bb:dc:
                    86:8e:ab:3e:2a:75:47:d2:c5:c3:9f:3c:3d:78:c8:
                    9d:3c:3d:78:4c:7f:6b:ee:1a:87:c0:49:6d:41:5d:
                    3f:66:f3:28:15:2a:cb:c7:4f:db:e2:19:6b:a0:df:
                    51:63:c0:11:a5:ee:03:18:7c:d2:c9:f5:cd:6e:38:
                    1e:07:5c:68:0c:cf:83:13:00:55:9b:1b:26:88:72:
                    a4:c6:c2:eb:57:2f:2a:f2:69:fb:d0:e4:0b:46:24:
                    cd:fa:ff:b4:20:22:d4:0e:04:49:57:4a:27:6a:f7:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:54:EB:AA:ED:5E:62:3A:B2:4A:C8:28:13:2D:20:8A:11:51:6E
            X509v3 Authority Key Identifier:
                keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:34:4f:fd:03:75:37:19:53:6d:5b:b8:9b:ae:fb:eb:b7:a1:
         f9:ae:78:f6:b7:85:a6:58:eb:43:7b:f3:35:c0:60:a0:be:69:
         9a:20:5d:7e:63:bb:f5:5f:d1:78:3b:2e:cc:0f:e3:00:b7:e7:
         04:f7:a4:5c:15:4e:8d:d2:d6:91:e0:8f:1e:3d:61:bc:8c:41:
         a1:af:68:23:5c:04:ef:3c:1c:75:c9:df:9f:60:0b:03:3c:d5:
         4b:93:fc:24:12:36:ac:30:1c:2a:9a:32:2c:ad:d8:58:53:8e:
         21:ef:e7:db:0e:7a:d0:83:1d:a9:89:09:45:5d:89:9e:78:fe:
         6b:4f:c5:53:04:9f:cd:0b:82:80:c4:c8:a2:f7:9f:33:32:c8:
         9d:09:14:04:a7:74:1b:e5:1a:81:b9:83:24:35:90:b7:2b:52:
         cf:fd:00:e6:ec:22:fd:af:cc:12:e4:f9:a3:19:d6:d5:28:8d:
         a4:89:82:4b:7d:cc:32:a2:62:d6:3b:53:c3:8c:2e:4a:34:50:
         60:6a:8f:3d:85:0b:79:a8:95:dd:ee:c3:e2:9e:2d:b0:cd:98:
         d0:ef:02:ae:01:d1:ef:0e:ea:91:db:92:a0:93:58:73:ad:df:
         92:26:12:88:70:a0:5f:a7:6e:77:87:86:69:16:4d:95:46:b8:
         b2:d4:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 03:19:43 2026 by rpki-client