Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File:                     zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier:          FW+NDI3itoKI7Piuwf/xCu1lC05Rx9PTi7aQOaO1Uac=
Subject key identifier:   BB:B7:24:C8:77:74:EB:36:3A:3E:36:B7:5B:B7:38:B4:1C:BC:0A:72
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer:       /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial:       01A15365A0D70B7908ADAC90937BA3F55698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number:          1403
Signing time:             Mon 19 Oct 2026 09:02:11 +0000
Manifest this update:     Mon 19 Oct 2026 09:02:11 +0000
Manifest next update:     Tue 20 Oct 2026 09:02:11 +0000
Files and hashes:         1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=)
                          2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: krBcWShfc15pvkXFUnr7ILVV6/vAPgjw2qlmiZj/aNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 09:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:65:a0:d7:0b:79:08:ad:ac:90:93:7b:a3:f5:56:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
        Validity
            Not Before: Oct 19 09:02:11 2026 GMT
            Not After : Oct 20 09:02:11 2026 GMT
        Subject: CN=bbb724c87774eb363a3e36b75bb738b41cbc0a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:07:e0:23:29:0a:d2:e5:f4:ea:3f:58:c0:27:
                    96:0a:92:13:66:dc:d7:4f:53:a3:b9:b9:1b:f5:80:
                    df:b0:0c:01:81:9a:1f:93:ac:1e:32:05:cc:19:d7:
                    e2:da:b3:be:b2:7b:b1:1c:55:c4:2d:b8:cc:38:fd:
                    5f:ec:39:bf:65:2e:fb:a8:c8:12:8d:bb:fa:f9:cd:
                    dc:20:09:ae:0b:56:2e:5b:d7:14:f8:2b:f9:70:20:
                    a7:d9:77:ea:5a:bf:7d:83:cb:c1:b5:1a:08:7e:ad:
                    2d:2a:de:70:77:cc:41:01:24:a5:52:32:a8:71:88:
                    5b:71:f2:2e:db:eb:3f:65:fb:b8:da:6a:ea:db:68:
                    ed:c5:8b:3c:8e:c8:f6:1b:43:70:cd:ad:2d:47:68:
                    d0:5b:8f:e0:e1:cd:2b:16:b6:8e:99:f5:15:50:d4:
                    e0:db:9e:ed:a3:46:28:ac:27:9e:20:a9:a4:34:de:
                    22:79:5d:f0:64:36:a6:30:b2:79:ac:b9:3f:02:37:
                    65:50:f4:34:2e:b2:15:13:e9:33:5d:48:61:aa:54:
                    3a:e2:32:3a:35:a6:99:56:fa:e9:06:5c:d4:84:4f:
                    b4:7d:e8:ee:a6:f2:99:17:8c:45:df:18:b7:f9:92:
                    35:2e:09:f6:71:56:97:9e:b8:c9:29:3f:ee:f9:e5:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:24:C8:77:74:EB:36:3A:3E:36:B7:5B:B7:38:B4:1C:BC:0A:72
            X509v3 Authority Key Identifier:
                keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:8e:6d:5a:3b:4a:a9:c3:c6:94:b9:5f:97:03:40:eb:90:
         5c:52:87:c8:4f:8e:95:de:cb:7e:1a:b3:76:7f:c1:03:f9:d5:
         8e:a8:60:84:f0:1f:0d:26:63:63:fa:6f:1a:f5:b5:f6:a5:68:
         9e:fd:da:63:6a:3c:2b:96:d3:59:70:0a:a1:51:81:c8:ba:95:
         5b:51:6c:f1:1b:7d:f7:9e:86:47:a1:80:52:cf:fc:41:c8:b7:
         40:b2:2a:09:f3:72:35:81:38:0e:59:69:71:73:81:c8:4e:c3:
         bb:ce:2c:40:19:76:dd:9f:2e:c9:82:73:9d:86:c2:da:78:ac:
         68:6a:72:54:59:ec:11:9e:27:52:bb:e4:f0:15:4c:a5:1f:54:
         c0:2a:fa:6d:fa:92:93:98:62:7e:6e:46:45:15:7e:8f:5c:da:
         37:bb:7c:02:2d:7b:2c:14:3a:e2:e3:eb:6d:aa:d0:a7:26:0d:
         da:82:65:06:62:42:a4:bb:42:67:45:fc:ea:d1:e5:e1:8f:c3:
         13:3b:32:87:24:82:a4:96:26:c1:ac:76:fc:44:f5:19:c6:80:
         72:61:cd:40:9f:84:74:3a:01:4f:be:17:f8:23:e0:7d:3c:1c:
         4f:b4:2b:14:50:ca:d8:7a:42:8b:7f:b3:90:70:5e:b9:63:8e:
         7a:aa:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:29:30 2026 by rpki-client