Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          NcByKNlv/OsInpx3IUwJFMBsKYJzv5XjkczEUvFfruQ=
Subject key identifier:   4E:36:69:2E:8E:44:74:95:4E:DE:54:54:63:BA:98:8C:0B:63:2D:79
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       01A08A8D05689188052E0545AB0F2E23E388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          09CA
Signing time:             Thu 10 Sep 2026 09:01:32 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:32 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:32 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: 3nEwUC5I3w1H97dilMjRLl0Qso6Oya6ON278jUnchZ0=)
                          2: io0GvTpo_VyMUyPyaPwaY5qhYQs.roa (hash: o71eBkqnQim23+RZGUgawhsMcbHLdUbBzsu6ep4SKt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:05:68:91:88:05:2e:05:45:ab:0f:2e:23:e3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Sep 10 09:01:32 2026 GMT
            Not After : Sep 11 09:01:32 2026 GMT
        Subject: CN=4e36692e8e4474954ede545463ba988c0b632d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:01:1d:04:87:4f:a5:bc:46:3f:79:e7:2e:
                    a8:d4:5b:6a:33:87:c8:2f:fa:2d:ac:bb:9a:c5:c7:
                    fb:88:93:72:c3:35:f5:c5:8c:65:3c:2b:95:bc:00:
                    9a:a2:b2:71:87:75:48:3d:9b:72:99:c1:c0:68:90:
                    95:e1:bd:81:d8:1e:ea:82:8b:06:19:46:2e:23:d2:
                    e7:23:bf:bf:c6:93:8f:5e:5d:9a:11:9f:41:48:5b:
                    63:ce:7e:96:a8:58:a5:fc:fc:ef:f8:99:1a:a6:53:
                    7c:22:36:3e:fe:c7:64:55:72:c4:b3:39:21:89:01:
                    34:62:27:fd:99:b8:5f:ed:97:1a:9b:37:d9:e7:1e:
                    5a:0a:21:b5:7a:be:4f:7b:ed:12:97:c4:9d:fc:b9:
                    50:31:34:fe:88:12:e4:fd:6b:6b:f5:92:38:a4:ad:
                    b4:01:6e:8a:08:be:e9:d2:96:8b:51:3e:35:b4:55:
                    3e:82:fc:b7:89:95:24:15:f5:8f:c6:ce:f6:10:0d:
                    ee:d1:aa:85:bc:de:8e:0a:ee:08:0b:99:ea:2e:49:
                    33:80:01:ef:6d:be:d7:3f:94:de:3e:a1:ff:7b:14:
                    ba:c0:2f:de:3b:18:56:44:70:d2:88:1a:4d:28:28:
                    80:da:58:2d:ba:b1:4a:a8:3d:bc:f8:dc:c5:a9:90:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:36:69:2E:8E:44:74:95:4E:DE:54:54:63:BA:98:8C:0B:63:2D:79
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4c:21:21:ac:ef:80:a1:5a:f7:50:58:28:81:50:a2:dc:dc:
         a1:6f:f5:2e:4a:e6:4a:3e:9a:1c:cf:0d:df:e0:96:a5:c7:4b:
         fe:ef:5b:6e:59:b0:e5:52:3e:c2:f6:dd:3b:7c:c1:5a:8f:0c:
         ad:d7:b4:d8:90:0b:ac:53:db:bc:0b:94:5c:79:02:7c:5e:45:
         b7:e0:90:80:a9:4f:d5:5d:80:a8:d3:6d:56:78:76:a1:2e:36:
         6a:76:59:63:e5:16:f6:4c:f6:63:91:7a:9a:4d:f2:29:82:c2:
         e5:ce:85:5c:a8:20:81:1a:a9:ba:bb:e3:1a:06:c4:98:1f:e2:
         ec:31:45:4e:ef:2c:57:3c:79:db:fb:06:a6:a5:60:04:c1:5d:
         0a:c6:1d:2b:14:7b:2b:24:c9:a9:8f:1e:a5:6e:64:b4:0e:fa:
         ac:39:dc:4c:0f:bc:31:72:98:b0:87:7a:ab:41:ad:2b:55:5b:
         d1:3d:24:c9:b5:62:d3:06:de:2a:b3:da:7c:5a:66:75:42:c8:
         ac:8a:9a:28:6e:16:75:08:0f:fa:5e:0c:5e:ce:55:fe:b9:5a:
         be:38:f5:0a:af:b5:a5:28:5e:16:da:55:1d:fb:78:b7:bd:97:
         a9:7a:f4:58:ec:97:fb:c5:12:9a:aa:c6:6f:75:7e:4e:f9:a5:
         33:fa:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:49 2026 by rpki-client