Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File:                     zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier:          A/AaHC6A/d9UuJmU+wvkeFKaQn2qErTef2dx8xb2i+g=
Subject key identifier:   AB:CF:4C:C9:79:70:97:D2:8B:95:9A:A4:3D:45:4A:A7:0E:9A:55:C7
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       01A01FB104C08A24153E3589F25E68F31417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number:          1A14
Signing time:             Thu 20 Aug 2026 15:01:29 +0000
Manifest this update:     Thu 20 Aug 2026 15:01:29 +0000
Manifest next update:     Fri 21 Aug 2026 15:01:29 +0000
Files and hashes:         1: 8q97JD8tJUeeOn9fKUKNm7YiLwU.roa (hash: +XZNxuku4QOLJPqFzFk8t0v4pn8/FyRgMW7pvdNX3CU=)
                          2: MDkPOpYz1CFhy53GuyXV7mJS25Y.roa (hash: JdEyxxhM+8u/dWlLfW1Caxnykc4bJ7pVq4kK7m8J+m0=)
                          3: sPvIT2OpPdfQUjumOhMItUZScLE.roa (hash: 3ub5VhGbB2HUNoD3TI7D0yCIQk+I5O7LDn2pAlXC/k4=)
                          4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: 5A28BgBgJaVM43q/dJUNnPSvoijG7vNxCBY47EJm7Xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 15:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:b1:04:c0:8a:24:15:3e:35:89:f2:5e:68:f3:14:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: Aug 20 15:01:29 2026 GMT
            Not After : Aug 21 15:01:29 2026 GMT
        Subject: CN=abcf4cc9797097d28b959aa43d454aa70e9a55c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:6f:69:e2:71:b7:6d:1b:b1:86:05:ee:42:
                    e6:50:0f:c8:db:b4:11:30:f7:a2:58:2f:d8:3b:55:
                    09:43:b6:c4:41:aa:d2:72:22:2b:b3:9a:8d:e4:6b:
                    ef:ac:b4:46:6d:da:03:af:21:d3:f5:89:8b:3f:a9:
                    ed:78:f7:8b:96:2d:01:61:32:c4:04:ad:25:74:ab:
                    9e:9f:3a:57:39:07:a4:37:50:e5:e9:6b:a5:d7:74:
                    83:9c:7a:3c:5c:49:30:87:bc:18:6f:3b:9d:1b:df:
                    59:a9:c2:79:52:f4:19:3a:5a:6d:9e:d8:02:d1:77:
                    ee:e1:ba:ed:cf:ae:ff:90:d1:c8:60:1b:1d:34:2c:
                    29:e2:36:d7:e5:44:a2:e4:99:ce:2d:47:f6:f8:b8:
                    c9:22:df:fd:35:dc:bf:88:dc:f7:6c:43:70:09:94:
                    eb:3a:ca:4d:d1:be:1a:e0:71:4d:29:21:fc:5e:53:
                    1c:a6:08:68:d5:46:7a:0a:99:cf:60:a0:ce:39:dd:
                    17:90:c7:77:02:45:cc:3e:79:b3:c0:ec:b4:47:36:
                    24:64:c2:c6:c7:d8:39:49:0e:b6:96:fe:7d:11:4c:
                    52:24:f2:fd:eb:19:d7:dc:d5:07:e2:8d:c0:a4:4f:
                    c7:48:bf:f4:bb:f9:d8:b8:3b:03:97:76:e4:02:a8:
                    b4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:4C:C9:79:70:97:D2:8B:95:9A:A4:3D:45:4A:A7:0E:9A:55:C7
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:0a:43:61:26:ad:20:35:77:e6:f9:bc:8f:a5:30:91:3c:
         d0:22:45:8c:04:df:08:d5:a4:cd:23:61:35:47:06:83:b3:e5:
         9b:d8:df:63:8e:c1:2f:4f:d6:c8:3c:00:87:e6:6c:a0:92:6c:
         f8:f4:88:fd:b3:46:8b:38:b2:97:80:06:62:62:55:1b:95:dc:
         c2:9b:49:2f:33:b4:43:26:f3:fa:6b:de:3f:86:a2:a0:5b:eb:
         b1:a6:35:f4:bc:8a:1d:55:05:c4:8d:56:a9:2e:c6:cb:77:9f:
         43:f1:96:d6:72:d6:a9:ea:ca:77:fd:a3:29:0f:d6:05:ed:e5:
         2c:22:dc:31:70:9f:df:e6:42:36:07:38:17:21:2c:4b:bb:16:
         38:7a:f8:77:af:4a:4b:59:ce:4d:df:b8:e1:fc:2e:33:18:2c:
         f2:b8:88:c4:82:30:a2:5a:46:35:02:0c:00:69:18:d0:2c:04:
         c3:88:b3:a5:36:84:24:ef:a6:88:0f:4b:78:63:2f:d7:e0:c7:
         93:ed:24:07:0a:c4:85:bb:9b:a8:05:7d:3d:6f:61:30:64:a9:
         aa:92:f7:17:30:e7:77:11:d4:9c:53:6e:5f:c6:d6:81:f1:94:
         38:2a:7b:98:9c:f2:8e:82:7a:87:ab:98:13:df:8c:be:ec:d7:
         0d:dc:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:20 2026 by rpki-client