Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File:                     ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier:          t7Tyt4frZRfeYAj2cOXcLu2fkF9iKgCkYYoiMpXVvT0=
Subject key identifier:   C8:F7:40:EA:46:A3:26:63:29:71:2A:F1:A2:D8:EB:7D:83:B9:DE:EE
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer:       /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial:       01A08AFAF29BC22D56F2CC319DAFCB086E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number:          0F92
Signing time:             Thu 10 Sep 2026 11:01:36 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:36 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:36 +0000
Files and hashes:         1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
                          2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
                          3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: yvXSwxqylkxR57UcVb6SlkgsveQKd53B0vXTQo4/RN0=)
                          4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
                          5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
                          6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
                          7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:f2:9b:c2:2d:56:f2:cc:31:9d:af:cb:08:6e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
        Validity
            Not Before: Sep 10 11:01:36 2026 GMT
            Not After : Sep 11 11:01:36 2026 GMT
        Subject: CN=c8f740ea46a3266329712af1a2d8eb7d83b9deee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:7e:24:2c:da:22:67:30:35:02:36:83:d9:
                    ff:df:c9:63:dc:6a:fc:0d:61:39:db:e2:d3:92:5d:
                    46:50:fa:0d:11:6e:15:21:ce:0b:24:a1:7f:80:58:
                    1e:26:61:75:85:58:ef:dd:3c:5e:9c:d1:09:5b:d0:
                    d0:23:63:fa:42:9d:2b:94:b4:45:a0:b8:aa:17:e9:
                    f6:74:8f:9e:05:6d:a1:16:7a:f2:b8:29:76:94:5e:
                    5a:ad:4e:00:fa:3f:70:a1:59:43:f3:ba:fe:c5:6e:
                    d1:65:ef:b1:fa:ca:2e:0a:7f:17:17:b0:4f:44:29:
                    7c:8f:8a:63:a9:2f:71:b6:bf:8a:3e:1b:49:a8:c3:
                    81:cf:eb:7a:25:e6:73:a7:fd:68:56:0d:7b:f3:c0:
                    ea:2f:a6:e6:d2:e9:3f:25:95:f1:e9:43:7d:ea:29:
                    69:5d:97:6e:e9:4e:4b:ea:82:8f:56:95:67:cd:de:
                    b8:9c:bf:50:8e:be:b8:37:0d:3b:29:84:cd:b8:05:
                    94:37:7b:21:1e:a7:57:ec:9b:fa:45:f1:9d:76:c5:
                    e7:d5:88:e8:2b:f7:b1:10:c6:e1:21:0e:9c:4b:4b:
                    14:61:45:db:0c:83:8e:52:96:de:30:5d:f6:a7:ad:
                    d5:eb:96:b9:b4:62:a1:00:4c:f4:d7:7c:1a:9c:09:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:40:EA:46:A3:26:63:29:71:2A:F1:A2:D8:EB:7D:83:B9:DE:EE
            X509v3 Authority Key Identifier:
                keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:cc:a2:7a:8e:27:c2:89:b6:2e:00:34:5d:c3:da:50:97:53:
         f8:b6:78:27:a1:de:64:ba:b4:8e:ca:bf:9a:23:1b:1d:bc:70:
         91:46:d2:9c:57:c4:c6:b8:d0:79:8e:98:c4:0c:fc:3f:a0:13:
         fa:d7:85:86:9e:ce:c0:3c:f8:ef:e8:28:84:24:f0:9a:0a:03:
         6e:18:38:5e:9c:da:ee:36:a1:41:1c:5a:b9:f3:4d:69:6e:d4:
         bf:54:26:e2:63:4c:6f:1f:0f:b5:60:7f:e0:7a:5a:63:61:d8:
         72:12:d4:e4:a9:ab:ef:1e:e4:b3:81:be:47:18:3b:cc:45:6a:
         63:e5:75:f5:9e:30:2e:2b:28:92:0c:46:b1:b8:da:70:13:33:
         f7:e7:be:21:36:19:22:b3:bf:5e:77:8c:a2:d6:94:be:2a:7d:
         c9:1e:9e:ee:30:48:78:b3:ce:70:d3:47:b7:8a:ad:a5:59:be:
         2a:a1:5e:0b:28:31:96:34:d9:a5:ef:ac:79:c9:f2:24:08:bb:
         5b:2c:8a:ff:36:ee:41:35:43:2c:d7:55:14:06:d1:c1:cc:d9:
         ce:b4:4a:3e:39:74:26:9c:06:f2:6e:47:3d:13:01:83:43:10:
         f0:5c:a0:6a:68:95:bb:d9:74:21:7e:ce:f7:9e:a7:74:1a:56:
         bb:52:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:08 2026 by rpki-client