Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File:                     Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier:          MHt5C0Aw2H2zP21QhFFJlOkx8De64zFLLsgjlcfsuSs=
Subject key identifier:   22:7B:98:A3:DB:37:D1:39:F4:D9:C3:CD:2E:BE:13:96:C0:8F:65:0A
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer:       /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial:       01A15364A41AD65B21883C1A9335E372067D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number:          058E
Signing time:             Mon 19 Oct 2026 09:01:06 +0000
Manifest this update:     Mon 19 Oct 2026 09:01:06 +0000
Manifest next update:     Tue 20 Oct 2026 09:01:06 +0000
Files and hashes:         1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
                          2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: Jbs1L6DywvLmYkWMnkZ/gB+qThQVkBDFLY8TkRqYLKg=)
                          3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
                          4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:64:a4:1a:d6:5b:21:88:3c:1a:93:35:e3:72:06:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
        Validity
            Not Before: Oct 19 09:01:06 2026 GMT
            Not After : Oct 20 09:01:06 2026 GMT
        Subject: CN=227b98a3db37d139f4d9c3cd2ebe1396c08f650a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:5e:15:4a:81:62:de:61:13:32:78:2b:1d:
                    39:f4:b1:79:9a:6f:c4:04:a1:bb:ec:65:0f:a0:a5:
                    1a:bb:12:78:61:fc:49:cc:47:c4:a0:1f:ef:ca:88:
                    2f:fc:a3:56:8a:d1:26:54:3d:5c:9d:36:85:a4:1a:
                    9a:aa:8d:e8:7e:e6:9a:85:f5:13:ac:ba:3e:ff:e9:
                    47:e2:1f:b6:47:0d:e3:7d:c5:d0:b6:34:02:68:ca:
                    5a:3d:54:87:1a:93:0a:5d:8b:0c:12:bc:9f:07:b5:
                    47:49:d6:1e:cd:27:34:df:08:c5:72:89:a4:b9:61:
                    d1:d3:dd:5e:38:2c:b3:4f:d3:f1:0d:c0:b6:02:e3:
                    f7:4b:9a:b6:27:4e:fe:63:a5:d1:00:71:5a:37:93:
                    7d:cd:73:6e:48:42:0c:9f:1f:2c:38:b2:8e:80:2f:
                    bc:a2:93:29:74:dc:a7:af:bc:ec:fb:87:83:74:53:
                    96:c6:30:a8:47:d4:35:38:5a:a4:4c:15:58:9d:7f:
                    c9:10:1a:0e:89:ed:f9:28:19:b1:2a:37:2f:19:f1:
                    d7:ba:3f:78:1a:5b:67:4e:c8:c1:13:b5:38:04:61:
                    3d:13:a9:9c:b6:1c:9e:bb:54:49:37:85:0f:4d:17:
                    37:7c:89:ab:69:c7:3a:50:e2:e6:64:d0:a0:7f:eb:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7B:98:A3:DB:37:D1:39:F4:D9:C3:CD:2E:BE:13:96:C0:8F:65:0A
            X509v3 Authority Key Identifier:
                keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:74:dc:91:71:c0:c4:2d:21:4c:3e:05:25:6b:1b:37:50:50:
         ac:cf:29:fe:51:da:f6:72:1d:0a:37:6a:a3:e8:06:22:de:1a:
         dc:b7:0e:9f:33:34:14:66:fe:97:80:d1:00:55:ce:76:9d:b1:
         33:f1:37:3b:bf:00:a7:7e:6d:22:5e:d8:f1:d4:e2:0d:0b:67:
         cd:89:6e:cb:51:97:5b:2b:c9:e3:42:22:94:23:73:b8:f5:de:
         08:59:04:b4:0a:27:e6:ec:d1:bd:52:9c:b8:8d:38:f0:02:c1:
         21:ad:f4:18:ed:4d:86:78:d4:b9:62:f5:21:07:84:f0:4a:88:
         b2:c4:61:0e:98:1b:55:5f:62:00:ac:a3:e5:7e:38:a9:f8:fd:
         f9:76:90:f4:23:e2:b6:10:7a:08:1b:f6:0c:1d:1a:1b:06:20:
         d6:d8:2d:07:6f:18:37:3d:48:2d:ba:30:89:aa:b9:a9:3a:ef:
         06:e9:1f:e9:5d:dd:52:32:01:ef:24:ec:41:14:f0:0c:02:5d:
         b9:ba:9d:7d:eb:29:58:ea:db:af:f3:fe:05:d2:1d:74:f7:f3:
         89:b1:5c:7b:41:64:b3:7d:14:27:f8:2c:13:ae:bf:8b:4c:95:
         42:eb:49:91:c2:be:0f:71:a4:7d:43:cc:e8:81:c6:09:a5:80:
         a1:43:00:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:59:22 2026 by rpki-client