Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
File:                     ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft (raw, json)
Hash identifier:          lAWPm+SxO37p2x3hCK7JtxdlmkpkYrQYs0VejwQeMcE=
Subject key identifier:   98:94:DF:57:7A:A9:37:06:4E:7F:6A:44:BE:EB:78:4E:3F:21:FD:60
Authority key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Certificate issuer:       /CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Certificate serial:       01A0FAC679EB7E3A3783A493A4A70C79F2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
Manifest number:          01FD
Signing time:             Fri 02 Oct 2026 04:01:46 +0000
Manifest this update:     Fri 02 Oct 2026 04:01:46 +0000
Manifest next update:     Sat 03 Oct 2026 04:01:46 +0000
Files and hashes:         1: 7ZqISZcCHbaHwtwLkUD_r8agXsw.asa (hash: dl1w2jg1byW481fc0haGqfo1j34GohFywTi+hYY0kWc=)
                          2: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl (hash: aGvHV35dMiGAtfkZyYTRdW4q/WBN7EaSOADZ7S70g6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 04:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fa:c6:79:eb:7e:3a:37:83:a4:93:a4:a7:0c:79:f2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
        Validity
            Not Before: Oct  2 04:01:46 2026 GMT
            Not After : Oct  3 04:01:46 2026 GMT
        Subject: CN=9894df577aa937064e7f6a44beeb784e3f21fd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:39:b9:3e:9f:75:83:55:76:5f:6d:37:dc:
                    38:ac:a8:2c:ad:f1:60:ff:53:c1:4a:19:22:66:9d:
                    b1:05:86:2c:ef:9d:a0:8a:fd:7a:b5:40:39:e2:14:
                    bb:14:10:1e:59:35:8f:55:c1:88:4d:4b:5a:9c:82:
                    29:a8:22:00:67:5d:df:c6:97:46:7a:4d:18:8d:98:
                    8d:b7:55:a1:c8:4f:4e:63:b7:cc:e1:e1:c6:89:05:
                    e4:1c:2e:af:e8:31:12:56:bf:3d:1b:b4:ba:83:d5:
                    8d:cc:08:c2:24:cd:b5:94:40:53:53:9a:3e:74:c2:
                    65:ad:8e:ba:05:46:84:ac:75:e0:3f:7b:7d:4b:3c:
                    65:ab:bd:74:a4:63:a0:98:79:37:d1:fb:4a:21:fc:
                    cb:df:e7:47:17:8e:98:05:70:81:7a:f1:82:bc:fe:
                    d2:80:ed:9f:a3:db:92:cd:51:fb:47:31:cb:36:c8:
                    b6:3e:d3:7f:cf:f9:48:ae:b5:0c:a1:4c:ac:2a:6d:
                    51:cd:ac:95:b8:4c:41:b8:8b:1d:da:d4:7b:5e:f2:
                    32:1f:c1:76:79:04:78:12:cf:21:c9:49:43:7d:65:
                    dd:f3:fd:d6:96:a6:99:ed:47:04:76:6d:21:60:77:
                    64:48:9b:ff:11:36:d2:6c:96:93:60:e5:1d:ae:09:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:94:DF:57:7A:A9:37:06:4E:7F:6A:44:BE:EB:78:4E:3F:21:FD:60
            X509v3 Authority Key Identifier:
                keyid:65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:26:ca:af:46:3d:05:a9:bf:57:75:cf:4c:6d:bd:41:1d:d6:
         03:07:57:35:4a:05:5f:6d:82:c6:ea:bb:01:ac:0a:19:b5:7c:
         42:1e:a6:d1:4a:eb:0e:aa:4c:d1:5d:bf:69:c4:a3:bd:16:9c:
         db:5c:dc:46:a2:ef:2e:25:f7:d4:a6:7a:07:fc:c8:c3:5c:28:
         f4:c5:e6:75:b3:90:5c:ae:e5:e9:b6:15:06:f9:9c:28:d0:32:
         e5:44:bc:38:25:55:89:88:cb:e4:f2:5d:1d:3d:f3:cb:bf:95:
         18:09:46:ee:7a:f3:87:34:b9:ba:90:71:78:51:70:61:4c:1e:
         5a:49:ad:50:89:a5:7f:16:45:c2:58:db:b7:8c:32:6e:f4:95:
         eb:79:14:4d:6c:a3:f8:cf:c9:52:25:2c:9d:0a:49:be:e7:21:
         af:e8:21:da:af:10:5c:71:b8:28:0d:44:3e:56:18:f6:81:64:
         4b:39:a3:52:c8:8f:a0:86:f5:a5:66:df:bf:92:fe:22:d1:8c:
         cc:66:82:03:f1:96:45:44:1b:d8:64:96:9f:7c:c4:5f:e1:77:
         6f:a3:7f:00:58:70:0f:06:fd:05:e1:91:9a:b2:ef:24:3e:bf:
         f6:eb:b3:49:b7:a4:eb:98:10:4a:f4:08:01:9b:eb:d3:6d:1f:
         d2:b6:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:59:17 2026 by rpki-client