Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File:                     mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier:          OOms+dj6KuMaakR8dGD0r2R5jajvXIpY/QbGjVCkJd8=
Subject key identifier:   7F:4F:8B:E7:E1:74:D6:80:C0:A8:09:96:FE:56:C3:60:73:6D:8C:6B
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer:       /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial:       01A17EBD557AF46D4488BBB84A4C768382F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number:          06EB
Signing time:             Tue 27 Oct 2026 19:01:39 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:39 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:39 +0000
Files and hashes:         1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
                          2: V_tPVXkmNH-9PJavVnocYPrTQTA.roa (hash: AGRfFdJJ1C/dURKRvBBJILwUMj7XLrg7AaRP8T3ZsSM=)
                          3: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: yNoOD92swa6Lw1HLgMvhDQ1BFWuQmCzFJTd4+O3gBow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 19:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:55:7a:f4:6d:44:88:bb:b8:4a:4c:76:83:82:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
        Validity
            Not Before: Oct 27 19:01:39 2026 GMT
            Not After : Oct 28 19:01:39 2026 GMT
        Subject: CN=7f4f8be7e174d680c0a80996fe56c360736d8c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:53:e3:63:84:cd:ec:88:13:e8:26:d7:bc:0a:
                    e3:57:4b:1b:f7:77:96:27:48:49:d1:91:43:b0:24:
                    12:60:05:c9:09:1b:41:2c:8a:31:f0:c5:8f:41:23:
                    15:7e:28:5c:0d:41:d7:7a:3e:1e:a4:ff:6a:5c:70:
                    14:ce:2c:2b:88:0f:a3:2d:3c:48:a0:4a:67:07:b9:
                    e9:75:6c:13:38:88:ca:4c:54:e7:88:86:00:2d:0f:
                    37:a3:8b:00:2b:a8:3a:e0:c1:57:30:78:a8:79:22:
                    bf:09:5f:55:ac:9a:21:d2:9a:83:dd:9d:1b:1f:e5:
                    22:51:57:02:4d:9d:8c:01:65:ba:79:e8:67:ba:71:
                    3f:9b:12:3e:fe:0b:ec:4d:8e:24:07:77:c2:1d:63:
                    e7:32:10:f5:61:76:12:df:65:b1:55:e6:bb:9a:65:
                    dd:ae:62:7f:25:8f:72:46:8f:94:22:6b:54:95:ae:
                    6c:11:c4:a0:78:37:4e:39:01:df:18:d7:89:7e:bb:
                    a0:61:f0:27:c3:92:30:c2:d5:9f:e0:a8:b8:0c:9d:
                    43:c3:03:05:c2:20:82:d6:46:12:2b:1f:d6:87:14:
                    e3:32:84:a0:22:df:0e:d0:9b:8e:92:d5:62:a4:e2:
                    4c:e1:f6:0f:dc:af:a9:d1:d1:e1:2c:f4:dd:e8:22:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4F:8B:E7:E1:74:D6:80:C0:A8:09:96:FE:56:C3:60:73:6D:8C:6B
            X509v3 Authority Key Identifier:
                keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:67:1a:ab:e7:68:66:90:1b:fd:e7:de:7b:14:5c:39:36:e7:
         96:d7:f3:82:93:3f:b8:21:e6:eb:ef:25:db:fc:2a:92:14:a6:
         f6:83:5a:97:b0:cf:68:f7:2b:77:09:3d:73:cc:ab:fc:2a:0f:
         9a:0c:6c:2a:e1:85:ef:15:58:85:87:e1:2f:24:29:0e:e8:f7:
         a6:8e:5c:15:65:e0:57:1a:62:a4:bb:08:c1:fd:8a:76:fd:39:
         ae:c3:6f:84:b2:c5:69:63:b0:ce:c7:1e:eb:64:97:39:44:3f:
         2e:c7:9b:af:5a:cc:9d:1b:dd:da:9a:dd:0b:b2:90:6a:77:18:
         ee:a6:9d:a3:46:9f:ae:d0:a0:e5:d3:7d:0f:32:77:83:5e:b0:
         52:00:02:c2:8e:c3:86:3e:81:7e:0a:90:d0:1f:ee:57:8c:49:
         d1:b5:27:0a:f9:2c:e8:eb:ad:84:96:50:bf:ed:c4:bf:0f:02:
         ae:74:ee:ec:76:ac:a6:85:ee:2d:55:67:c8:04:eb:a5:d4:1e:
         b7:bc:6b:1c:83:9d:cf:1f:af:55:50:92:c6:18:67:81:03:ef:
         39:b4:05:13:47:40:22:3d:0a:ba:e5:67:3b:5a:1a:47:2e:c6:
         d7:a7:be:c7:8f:58:ec:1d:13:f3:cf:4f:a5:5b:4d:9d:02:33:
         5c:36:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:28 2026 by rpki-client