Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File:                     M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier:          9BNQIqumpt5E7kqXsrkU0NWaOulkvWk25/Fe4UaEz9A=
Subject key identifier:   D6:D0:2D:69:AD:76:A1:16:BA:13:B1:19:F6:61:39:CF:C0:60:22:74
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer:       /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial:       01A00394C0196259125F18C933901CFF79E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number:          1A04
Signing time:             Sat 15 Aug 2026 04:01:15 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:15 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:15 +0000
Files and hashes:         1: Ei3aWkPls_AzS2jY10p19EPkpsk.roa (hash: zb4SB34oJRAPczxZgNNmiB+q3XRqPpneSMS6PliMhAI=)
                          2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: x3OWjtlBRZk8O9x9/ZwobbSFgX4YErSW4AePIQv+C9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:c0:19:62:59:12:5f:18:c9:33:90:1c:ff:79:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
        Validity
            Not Before: Aug 15 04:01:15 2026 GMT
            Not After : Aug 16 04:01:15 2026 GMT
        Subject: CN=d6d02d69ad76a116ba13b119f66139cfc0602274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:19:7d:ba:74:b1:91:8e:02:62:88:32:4b:
                    01:70:d9:57:b9:59:65:85:e5:6d:a5:25:90:5c:b3:
                    62:af:96:78:b7:c0:29:6e:3c:c8:c2:d1:83:59:83:
                    c4:42:e5:00:03:0f:89:d6:25:6b:9c:3d:7b:b1:20:
                    23:7b:08:bf:6d:aa:a2:02:4c:cb:20:5c:e3:d2:8c:
                    46:18:94:9e:cc:3e:4e:4d:14:b1:f0:05:8b:91:3e:
                    f6:0b:3d:28:57:d7:c8:78:8c:06:a7:fd:3b:48:bc:
                    b8:b8:6c:a1:0a:28:8a:01:e0:7b:eb:b0:6f:09:fe:
                    9f:59:1c:04:68:6c:99:2b:ec:13:72:2e:07:d3:eb:
                    76:ef:2b:25:9e:1b:e3:e3:71:85:99:88:ed:e9:23:
                    5a:a8:2b:7e:50:eb:ec:2b:f5:81:24:65:ab:27:d5:
                    ba:83:d1:aa:d3:ab:93:ce:c9:2a:ca:76:c8:bb:21:
                    1f:97:16:d5:e2:45:e5:dd:5b:b5:ef:77:3a:0b:e6:
                    24:19:fd:ef:b4:79:7f:c6:50:25:a1:b4:fc:03:99:
                    96:bd:7b:89:36:8c:6e:3d:b2:a7:b9:27:59:01:26:
                    20:a7:2a:77:91:e5:18:d7:0c:92:ac:b1:a3:88:cc:
                    b3:83:e9:36:e6:0b:95:34:01:f4:a7:f8:5d:d7:1d:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D0:2D:69:AD:76:A1:16:BA:13:B1:19:F6:61:39:CF:C0:60:22:74
            X509v3 Authority Key Identifier:
                keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:42:6e:32:36:af:1a:be:b7:ea:42:a3:6c:04:55:ca:b4:2e:
         cb:e4:38:5d:bd:0e:25:88:fe:13:be:3d:26:8e:76:de:df:59:
         c8:0d:c2:29:07:42:d0:59:f9:a2:ab:e8:8c:71:57:3d:64:e2:
         6c:e8:28:3e:0a:0f:fa:2f:8e:d8:b0:19:d2:44:9f:85:da:06:
         85:70:24:41:77:ad:ae:3d:a6:63:ab:b4:fd:59:32:8b:3f:64:
         fa:61:a8:a5:ee:7b:77:64:a8:b2:3f:17:b8:05:b6:36:c6:e9:
         8f:39:30:ad:1a:bc:f0:78:51:92:b9:b0:f6:25:55:80:82:21:
         78:5f:13:db:ff:fc:ff:9f:34:8b:75:bc:c0:da:7e:b3:df:40:
         ad:ae:b1:ef:d2:0f:6a:9f:d8:6a:e1:b7:fa:8f:9e:73:1c:97:
         f9:9d:b2:c6:59:a8:a7:28:19:f7:92:de:a2:98:c7:79:4b:0a:
         76:17:97:64:43:e5:26:74:ec:a9:d1:40:ac:40:74:69:88:bf:
         bc:12:b3:5e:38:5d:d0:9f:2c:10:34:92:31:cb:f4:6d:3a:1c:
         96:59:34:97:f3:68:9e:cc:33:5b:ae:7c:98:80:00:97:27:98:
         29:2f:9e:f5:f3:a5:90:f6:46:70:67:a5:64:93:ba:b2:07:34:
         41:b7:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:08:27 2026 by rpki-client