Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File:                     zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier:          DO/TGOJnX00wd6/io2vTqJHNwauHhaAaOxodnn/tGi0=
Subject key identifier:   DD:20:9D:EC:08:AA:12:3A:1A:31:88:7D:B9:20:7B:9E:AB:EB:49:CA
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer:       /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial:       01A08B682C40DEF799C80E6404A2791301D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number:          1A48
Signing time:             Thu 10 Sep 2026 13:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 13:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 13:00:55 +0000
Files and hashes:         1: CXkKc_BGGlQDVJndPZpJEIKApLM.roa (hash: lB6WL5NHR05zZ3JJcK7U/WiKpx7SIVQpEQDB/XRsPv0=)
                          2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: tkT2BbhLJToz5LEfETEzb4fFxlLyI4T20pbcSBj7R90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:2c:40:de:f7:99:c8:0e:64:04:a2:79:13:01:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
        Validity
            Not Before: Sep 10 13:00:55 2026 GMT
            Not After : Sep 11 13:00:55 2026 GMT
        Subject: CN=dd209dec08aa123a1a31887db9207b9eabeb49ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:57:2b:76:0b:dd:ad:c6:f2:86:74:eb:df:
                    5a:09:33:b3:18:8e:cd:e9:6b:7a:42:97:24:41:33:
                    c7:1f:d0:eb:55:33:c8:8c:ee:0c:ef:2f:23:01:fa:
                    d8:09:64:3a:be:13:ba:ca:a2:89:d7:e1:8d:68:6e:
                    84:ab:49:04:2b:6e:95:2d:f1:8e:6c:e2:03:39:87:
                    87:4f:7a:79:97:0e:c0:95:29:19:fb:a5:20:1b:d1:
                    b0:21:26:34:4e:fb:b3:14:6f:ce:f2:88:54:7a:27:
                    8b:68:a9:2b:df:a8:97:4d:71:3c:7a:b3:8a:fa:31:
                    56:e3:ab:10:6b:e6:5f:f3:1a:ac:93:7f:2f:83:64:
                    b5:03:11:70:31:2f:fd:21:84:f4:77:2f:df:00:40:
                    93:27:84:c4:35:8e:1d:94:f1:48:e5:4a:c9:41:8f:
                    cd:ea:f9:00:e5:dc:8b:76:3a:96:bc:99:79:f0:48:
                    54:cf:da:73:00:c5:99:fd:c8:0f:0f:76:5d:3f:bd:
                    4f:4d:32:d1:96:22:fe:14:63:ba:77:09:3a:19:0f:
                    17:5c:3b:11:61:f9:39:48:9a:f0:4e:3d:92:79:fa:
                    57:d8:39:29:a9:62:b6:d8:d3:4f:0b:83:78:5e:2c:
                    14:d0:4f:d2:0b:09:08:53:4b:b4:12:18:41:23:b0:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:9D:EC:08:AA:12:3A:1A:31:88:7D:B9:20:7B:9E:AB:EB:49:CA
            X509v3 Authority Key Identifier:
                keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b3:6b:d6:bb:80:04:2e:93:39:a5:7c:9f:31:b1:72:29:bd:
         9a:f3:57:8f:c9:70:b4:4c:9f:f7:24:c5:cc:49:14:5f:64:6c:
         bd:da:e1:2d:bc:ac:f4:f2:70:9e:f6:3d:20:0b:a6:5d:d4:a0:
         ac:0e:36:b4:58:3c:87:3b:bf:89:8c:0f:85:78:e2:0d:22:a5:
         a5:64:c9:63:bd:d0:8b:df:5e:3b:62:fa:d4:79:af:a0:cd:b3:
         45:64:56:12:0f:57:b7:8e:17:3d:bf:39:4d:3a:30:b1:88:6f:
         e8:33:0b:d8:84:61:2e:84:2f:7d:2e:25:0f:25:9a:62:71:1f:
         a8:64:9f:bf:07:2b:7d:3f:0f:03:d1:f6:32:a5:a5:87:22:75:
         42:56:43:bd:83:c9:76:6c:32:8a:06:5f:91:d6:1d:1a:fe:bf:
         e1:c1:c5:97:06:cd:01:e1:8d:9d:5c:86:42:ed:98:52:3e:72:
         b5:35:4d:50:c3:96:e4:e6:09:bd:3b:75:d0:df:15:61:39:50:
         cb:6e:b0:ce:a0:5f:5c:8c:05:c8:d6:64:20:f7:de:d4:38:58:
         79:04:fc:cb:52:6c:5c:9f:5a:ad:6b:94:53:b9:7e:84:a2:d3:
         6b:1b:19:6a:cf:df:58:39:cd:01:ca:1e:c1:4a:f6:b3:c6:6b:
         df:fa:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:27 2026 by rpki-client