Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          OM8Ww05iLMzZARC4eN5cbtH9tSBrC/RMfMF5OGGJebA=
Subject key identifier:   07:5A:94:8C:BF:10:A5:42:FA:B8:D9:7E:ED:06:34:8C:B4:A6:57:EE
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       01A00281F1FAE97A190C5916DD9D0BA89A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          1A06
Signing time:             Fri 14 Aug 2026 23:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:05 +0000
Files and hashes:         1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=)
                          2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: u0E0Rc4yZrpXsO75d2qWMB6S06FR7WvsbIRH9ExMOOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:f1:fa:e9:7a:19:0c:59:16:dd:9d:0b:a8:9a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Aug 14 23:01:05 2026 GMT
            Not After : Aug 15 23:01:05 2026 GMT
        Subject: CN=075a948cbf10a542fab8d97eed06348cb4a657ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3a:f0:be:eb:0f:3c:35:0a:21:5a:83:cd:d5:
                    e3:9b:a5:35:09:f4:44:75:55:59:75:1c:14:90:fe:
                    68:29:97:98:7d:2b:90:e3:02:f9:fd:1f:54:d3:0c:
                    df:58:15:18:52:87:8d:db:d4:55:73:8c:0c:00:8e:
                    82:ef:6a:81:1c:9a:b8:8e:8b:7f:14:e6:4e:e0:99:
                    88:23:d3:e8:5b:82:f1:19:36:31:35:3c:92:17:8d:
                    07:ca:84:73:67:11:99:63:a3:90:9a:2e:79:68:7b:
                    33:f9:9c:13:6d:e9:5b:08:1a:22:55:ed:c6:33:6b:
                    52:67:28:90:b0:2e:11:61:ed:2b:3b:fb:1c:71:3c:
                    f0:b9:23:e7:c3:7f:88:4b:fc:f7:45:14:a6:8f:34:
                    a1:56:8d:90:7a:57:5b:74:25:6d:c3:19:66:5a:62:
                    d6:48:be:0a:3c:9d:e2:cd:cc:7d:a8:6a:53:8d:53:
                    d8:8c:34:78:2b:46:c5:4e:2b:fa:1e:84:a2:1b:99:
                    fc:bf:95:c7:24:e0:5c:bb:1f:be:a4:c0:18:8f:eb:
                    82:3f:79:7f:6d:fb:21:c7:a6:67:9f:d2:00:71:d3:
                    1b:a9:6d:bd:a2:2f:4a:dd:2e:57:92:28:c0:74:88:
                    41:06:f1:39:e9:a1:f4:24:c2:22:1a:cc:28:4c:68:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5A:94:8C:BF:10:A5:42:FA:B8:D9:7E:ED:06:34:8C:B4:A6:57:EE
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:47:25:16:eb:1c:84:02:2c:d1:11:31:18:4c:ab:43:63:
         64:30:4b:ca:26:14:9d:01:ef:85:f4:59:82:9a:90:61:76:40:
         6f:bd:46:b2:21:c3:f1:67:4e:d7:68:4f:53:34:f9:ac:84:71:
         50:e5:15:de:cf:30:6e:87:46:98:00:28:d1:1d:d3:05:43:56:
         53:d8:2b:a9:87:59:69:22:ee:55:f4:59:f2:18:5f:8f:02:25:
         bf:89:40:73:5b:1f:44:f6:fe:f8:cb:ff:75:7f:75:b3:b3:27:
         b4:36:5f:9c:d7:9f:40:2b:b9:c4:77:da:9e:66:b1:f5:50:31:
         15:43:0e:40:b1:2c:03:63:68:ad:93:de:a3:db:74:05:d3:7f:
         c9:7d:a6:03:82:da:e6:d7:7d:db:6a:6f:15:54:bd:43:5a:84:
         3b:ef:d6:e6:51:85:92:de:d4:e9:a9:4c:30:84:7c:f8:67:15:
         47:7b:6b:63:dd:57:0b:6b:91:57:e4:6c:fc:2e:e2:59:22:5b:
         d8:46:17:7e:35:26:51:e9:16:79:4b:81:c0:95:a2:9d:e8:bf:
         72:2f:93:90:bc:f3:36:a8:21:0a:68:05:12:8b:b3:51:e8:bf:
         da:c2:56:ef:db:3c:b4:81:10:44:cf:68:4d:b4:65:6f:4f:d2:
         8f:9b:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:14 2026 by rpki-client