Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File:                     zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier:          icXwaZzieaZEuybpaaBybOtPIP0OuMw8+eeYySi49eY=
Subject key identifier:   85:1E:28:2E:E9:E0:89:6E:8C:3E:20:64:F4:BA:69:E7:FD:0D:E4:18
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer:       /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial:       01A08C7A837B955A9F9DB27A40A82C0B5680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number:          043E
Signing time:             Thu 10 Sep 2026 18:00:34 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:34 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:34 +0000
Files and hashes:         1: Hv6nIX8HVFeyFg4uQleXqqT5MWI.roa (hash: HIwiJMcqVUyXLS/mAM0+jLz/PX0Vv8ko69oawzAsSDQ=)
                          2: gu4GPTRfWQO75vY7xSH9xzSoqQY.roa (hash: odhJabg6AJqtqcZtfP2GyOkQsROVO1GzPGrLF/Q0sqM=)
                          3: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: 1uiXqtrlN3689TUqEOnKzYbxXW5c6GZfvHz7bJyNEFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:83:7b:95:5a:9f:9d:b2:7a:40:a8:2c:0b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
        Validity
            Not Before: Sep 10 18:00:34 2026 GMT
            Not After : Sep 11 18:00:34 2026 GMT
        Subject: CN=851e282ee9e0896e8c3e2064f4ba69e7fd0de418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:1e:91:b5:5f:79:a8:f7:75:22:9d:d5:a8:
                    64:83:84:23:2d:cb:76:35:b1:01:e9:ef:eb:2c:9e:
                    d0:d1:d9:7e:5b:81:f1:86:74:41:4e:ee:de:06:1d:
                    d7:d7:f0:21:f9:c5:78:f7:44:d3:e8:b3:1d:59:41:
                    b6:6f:77:e8:9b:b2:e8:fd:a9:8c:2a:33:87:d8:1d:
                    21:e3:d5:f8:72:9b:fb:ec:75:c6:a1:7e:4d:a4:bb:
                    b9:26:f5:45:f5:85:46:39:3c:23:1f:89:48:ec:01:
                    57:45:47:3c:83:fb:71:9b:6c:9b:2b:81:00:9b:2c:
                    5b:eb:52:fd:9a:f7:dc:5b:8d:1b:33:fc:50:64:2c:
                    a1:b0:34:91:3f:31:6a:0c:da:83:ac:dd:b9:c3:67:
                    68:e4:fd:70:05:41:29:44:2d:87:ff:66:d5:44:8c:
                    fd:35:7e:4e:a1:19:37:98:a6:d6:09:fc:65:eb:71:
                    64:8a:08:42:c2:30:93:7b:58:21:f9:9b:be:0e:e7:
                    8e:86:ee:31:a5:6e:fb:20:40:21:cd:4e:71:9d:08:
                    6a:a1:b6:ef:6a:b5:03:83:87:c8:46:56:5d:d2:a1:
                    a1:80:fc:38:21:89:30:97:b4:7c:a2:ce:67:44:b8:
                    ca:8b:22:f0:13:e9:82:ae:8f:b8:b7:af:40:c8:a5:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1E:28:2E:E9:E0:89:6E:8C:3E:20:64:F4:BA:69:E7:FD:0D:E4:18
            X509v3 Authority Key Identifier:
                keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:1e:b7:12:e6:b2:1a:1e:7b:e2:b6:40:9e:e1:13:a3:ff:7a:
         a1:dd:6e:11:94:d7:b2:7e:56:ed:12:94:65:d9:a7:20:f1:3f:
         de:42:27:fd:60:6b:20:e1:66:78:87:da:17:ce:95:b5:29:ec:
         17:3c:b4:67:16:ee:40:a0:b8:35:b4:4b:d2:62:b4:e6:34:02:
         bb:9e:8d:5a:79:1a:16:ef:72:03:80:1b:3e:ee:99:ed:fd:55:
         23:87:f8:3a:4b:a4:25:f3:d1:60:90:08:84:d3:71:ce:aa:56:
         b8:02:77:66:74:7f:69:b5:24:02:4e:8d:ed:46:c4:1c:f6:e8:
         30:a5:18:6e:ce:76:d7:e5:76:21:e5:db:1f:78:dc:b9:2c:c5:
         ff:f6:f2:99:9c:a0:ed:40:3c:74:b9:3b:72:cb:82:b7:67:ce:
         1b:01:2d:3c:bf:29:8b:37:31:60:62:28:95:9e:b9:7b:fd:27:
         e4:48:60:58:2a:ab:62:f8:26:a0:bd:13:bf:61:72:fd:3a:46:
         dd:f6:af:94:fe:87:96:22:f1:33:b3:03:7c:d9:6d:9d:ac:56:
         8c:7f:a0:88:48:99:68:fe:fd:b5:7c:1e:df:69:14:ab:a2:e1:
         cd:aa:b5:e3:f1:b8:ec:4f:5c:5b:65:90:a7:2b:3c:85:d1:a0:
         54:55:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:07:51 2026 by rpki-client