Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File:                     Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier:          Q1frCnzny0yIw/tOyy1tn822lLafEbPEuADy5z+C+y4=
Subject key identifier:   ED:5E:76:87:F6:C3:F9:24:C7:99:E2:68:63:E8:DB:C9:B6:34:F3:F9
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer:       /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial:       01A18F0BCEE468071724DA7D26377BB0E43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number:          06C4
Signing time:             Fri 30 Oct 2026 23:01:18 +0000
Manifest this update:     Fri 30 Oct 2026 23:01:18 +0000
Manifest next update:     Sat 31 Oct 2026 23:01:18 +0000
Files and hashes:         1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
                          2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: Fp8oAKZNnuTqMuhZGO0jeDBiwPPgBjA82VhcjCN3YO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:0b:ce:e4:68:07:17:24:da:7d:26:37:7b:b0:e4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
        Validity
            Not Before: Oct 30 23:01:18 2026 GMT
            Not After : Oct 31 23:01:18 2026 GMT
        Subject: CN=ed5e7687f6c3f924c799e26863e8dbc9b634f3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:81:61:ee:11:c6:e4:fd:4c:d2:29:21:a1:
                    04:f2:9d:5c:05:79:21:30:3f:f7:94:fe:80:73:b7:
                    03:18:08:af:4f:b0:f4:d3:ed:de:2f:2b:45:9d:88:
                    bc:e7:58:67:f0:5b:00:d7:38:1f:25:76:f9:84:1f:
                    b5:79:eb:1f:a8:31:70:48:23:81:87:60:e7:51:f6:
                    ae:8d:f2:ae:fe:9b:ab:6e:2e:6f:86:51:ae:3a:d1:
                    b6:1a:ce:f0:02:39:0f:2f:d5:6c:46:22:84:df:d0:
                    d6:91:4c:39:0d:8b:c3:bb:5b:bd:71:fa:52:6b:a8:
                    cb:75:9e:14:59:d0:91:7e:aa:23:ed:cc:df:77:1d:
                    a3:ec:15:9c:9a:92:4c:04:d3:68:ec:32:ca:c5:91:
                    cc:12:ff:46:12:ed:c3:b4:5c:dd:cb:e5:0f:a3:b3:
                    51:3f:13:39:a5:b8:5a:fc:4d:6c:90:c9:86:5c:d3:
                    74:ec:26:f6:07:6a:15:26:62:44:b1:a5:3a:f3:41:
                    d4:2a:a1:01:2c:80:2c:18:45:50:67:61:62:1f:9b:
                    81:82:80:32:ff:a1:85:b6:bc:05:16:70:55:7e:1f:
                    8f:cc:3a:78:71:e2:c3:1f:9f:67:b6:91:bd:70:ea:
                    1c:09:f5:20:74:fb:31:47:ad:a9:ae:df:a1:42:f0:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:76:87:F6:C3:F9:24:C7:99:E2:68:63:E8:DB:C9:B6:34:F3:F9
            X509v3 Authority Key Identifier:
                keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:24:f5:1d:75:a2:ae:92:95:c0:34:cd:e6:14:3f:69:67:
         f5:c9:70:09:66:89:20:7f:11:39:fc:9c:b5:19:a7:b3:0c:a6:
         bc:2e:93:d8:40:db:00:ac:af:59:32:e2:ca:5d:24:ed:2d:a8:
         ec:a5:bb:70:f4:34:6d:e9:6f:8e:2f:35:25:7e:6c:c1:e1:13:
         15:9e:11:98:6a:80:a7:d7:9e:83:9c:59:62:9a:41:6b:26:4e:
         9f:6e:28:13:1f:0d:b9:df:65:de:8f:c6:d1:54:5d:46:f8:89:
         41:6a:d1:07:6f:7a:64:dc:9e:cc:b6:df:27:50:19:b2:96:fb:
         64:0a:ad:ab:f5:8f:5c:42:f0:8a:8c:be:37:ce:48:ef:d2:00:
         04:75:98:27:7c:5c:26:0c:4b:df:11:ca:f8:3d:a0:6e:a3:d0:
         bd:a9:de:bd:5e:96:b3:4f:2e:2c:54:ea:61:fc:0b:2b:e8:88:
         36:20:67:9d:09:b3:25:07:3b:1f:fd:91:5c:b9:93:d4:1c:b1:
         1c:0e:a1:13:d5:1d:82:b8:17:51:d5:75:0a:c5:94:63:20:da:
         39:cb:87:96:61:d5:6c:3a:b0:c5:fd:28:45:ca:28:5b:7d:b1:
         89:0b:9a:ee:6c:04:fa:af:cb:c3:5b:11:7a:69:88:cf:20:14:
         4c:f1:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:18:45 2026 by rpki-client