Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File:                     M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier:          Z3m69UwYNuFVuW8+Ez/y54zelW7ZpOi3qtkzxDJYHa0=
Subject key identifier:   91:44:67:18:4E:10:C0:36:4F:6E:90:6B:3A:44:A0:8F:5E:05:09:17
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer:       /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial:       01A15F313CC2A6559A69AE2704568138220B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number:          1AB8
Signing time:             Wed 21 Oct 2026 16:00:24 +0000
Manifest this update:     Wed 21 Oct 2026 16:00:24 +0000
Manifest next update:     Thu 22 Oct 2026 16:00:24 +0000
Files and hashes:         1: Ei3aWkPls_AzS2jY10p19EPkpsk.roa (hash: zb4SB34oJRAPczxZgNNmiB+q3XRqPpneSMS6PliMhAI=)
                          2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: 4QOQr8hLcutV1v17TgAAigCWDg5d8L8pMFffcCpk/1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:31:3c:c2:a6:55:9a:69:ae:27:04:56:81:38:22:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
        Validity
            Not Before: Oct 21 16:00:24 2026 GMT
            Not After : Oct 22 16:00:24 2026 GMT
        Subject: CN=914467184e10c0364f6e906b3a44a08f5e050917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:8d:ac:c5:3d:1d:37:55:23:2f:70:e4:73:
                    dd:3d:7e:00:be:3c:10:c4:19:33:2a:6a:0e:a4:5e:
                    1c:c0:12:6d:08:63:73:af:db:18:5c:ff:0a:26:ab:
                    b2:0f:0e:3f:22:e7:3b:49:1b:97:e3:03:b4:ec:f2:
                    14:45:64:4c:df:1c:fb:3f:32:e3:62:14:cc:a8:42:
                    91:71:19:80:8a:c3:cb:23:36:a5:de:73:d4:8b:ec:
                    54:b5:20:c2:4b:17:f6:cb:18:15:22:75:92:43:75:
                    2e:0d:f8:29:b6:36:48:69:fd:f0:d1:88:a6:48:27:
                    23:02:71:c0:ba:29:6e:51:2d:94:fc:14:e9:39:a4:
                    1d:17:e8:25:db:70:db:b0:9e:e0:90:69:8c:88:89:
                    13:d0:7b:ed:a5:8b:41:be:84:dd:3a:46:e2:95:f1:
                    e1:15:95:4b:70:e6:c8:5b:d3:d3:d3:21:f4:ed:29:
                    7a:20:02:bc:ca:2b:8e:5a:18:e1:10:2b:30:8a:c0:
                    e7:71:4b:bd:3b:b7:b6:56:36:3a:d5:85:85:be:d7:
                    3b:b6:79:9e:1b:51:cc:21:a5:1c:eb:7f:f7:91:b3:
                    84:18:40:7d:e7:d9:72:bb:b1:25:e7:08:b3:35:4b:
                    f8:ac:4f:ac:a4:2d:47:ca:81:1a:a2:ba:98:4b:47:
                    7e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:44:67:18:4E:10:C0:36:4F:6E:90:6B:3A:44:A0:8F:5E:05:09:17
            X509v3 Authority Key Identifier:
                keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b5:58:e5:f7:fb:46:22:8c:da:00:5d:89:ba:0c:d7:99:0c:
         6f:1c:60:95:97:c4:bd:ae:2a:b1:fd:23:92:02:93:09:ee:37:
         3b:b3:12:8c:45:50:a6:86:e2:69:d9:58:43:bd:dc:3d:7c:1c:
         6c:12:38:eb:93:7a:a8:24:db:75:1f:4a:e4:ab:d1:90:9c:35:
         5d:63:71:33:13:2c:c0:0a:ed:01:24:27:7c:47:58:e9:85:a9:
         0a:d4:be:6e:fd:f2:d3:3d:20:c3:4b:f6:e7:3f:8f:78:21:47:
         12:01:91:9c:e7:cd:fd:57:43:4e:41:84:0d:00:fe:e6:7f:7b:
         66:06:1c:56:02:9e:a1:c7:2d:af:02:d9:45:18:63:1e:2d:77:
         18:74:cd:04:06:71:f7:af:04:ee:78:ea:a2:21:f1:ab:80:df:
         1c:0e:54:64:3f:a0:be:d8:54:14:3a:ac:57:67:ec:90:dc:4e:
         eb:df:9a:51:d4:b6:fb:f1:d0:e6:49:fd:26:b3:f6:81:64:9e:
         40:b9:c3:56:ae:15:02:59:be:8d:5a:de:5f:6d:2a:0a:33:62:
         76:0e:5f:55:89:33:ae:1e:93:95:8d:49:14:44:82:95:69:2c:
         7f:79:28:9d:5e:f5:31:17:57:ea:0c:a5:7e:d1:35:80:bd:51:
         d0:b2:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:21:36 2026 by rpki-client