Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
File:                     zxMebPBAsKlffsLJPjJqYQh9jG8.mft (raw, json)
Hash identifier:          QvYG3l2NFt4Sq1VouVXjW0hqXfOVdBWDFIuhI8tDpdk=
Subject key identifier:   DA:08:78:3D:3E:1D:3A:15:58:47:2C:D0:18:A7:60:49:20:D5:45:BA
Authority key identifier: CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
Certificate issuer:       /CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Certificate serial:       01A08A8C410DB2480EB5B61A07344CDD6063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
Manifest number:          C1
Signing time:             Thu 10 Sep 2026 09:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 09:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 09:00:42 +0000
Files and hashes:         1: vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa (hash: /QlR6UrnyGXIfWBFiHE7gFFLbMr1qU25LazaUkwU8DA=)
                          2: zxMebPBAsKlffsLJPjJqYQh9jG8.crl (hash: SSJ7S5fUHIt9FaCzHuukToaaCSPqGrMYJg42dL+fJd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:41:0d:b2:48:0e:b5:b6:1a:07:34:4c:dd:60:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
        Validity
            Not Before: Sep 10 09:00:42 2026 GMT
            Not After : Sep 11 09:00:42 2026 GMT
        Subject: CN=da08783d3e1d3a1558472cd018a7604920d545ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:2b:96:c6:ad:49:09:12:37:ac:66:b4:a2:
                    af:e4:87:7c:6c:c6:97:3a:d0:f6:de:9b:cf:bf:50:
                    60:5c:2a:f8:d2:4e:a3:59:04:40:d6:ec:25:ce:86:
                    95:92:96:30:db:22:fc:6c:c4:b8:6f:8b:b7:fb:74:
                    04:72:52:54:a9:a7:4d:d6:0e:1b:e0:89:9f:cb:fd:
                    f7:75:00:a9:0c:65:10:e1:fd:2d:01:59:bf:9f:ed:
                    ad:38:f4:f1:8d:87:43:02:90:a7:1b:43:93:74:6a:
                    ea:bd:21:e1:ee:65:d9:17:3f:82:09:f7:b3:90:55:
                    6a:b5:8e:cb:24:b2:af:61:2e:83:99:ca:17:5b:24:
                    67:b1:2e:6d:9a:ee:61:96:ba:a4:d2:22:f0:5e:af:
                    0a:76:89:e9:84:04:e4:ca:e7:9c:b4:8d:1b:83:44:
                    1a:24:d6:af:36:9b:ed:42:16:28:4d:80:7d:d2:4b:
                    93:f9:8d:1d:f9:3a:74:fc:52:a0:f6:32:94:47:bb:
                    30:31:db:72:23:7b:39:e4:01:6c:fd:39:02:27:31:
                    0c:e2:3d:20:7a:f5:9c:8b:f3:2e:20:b1:0f:6d:39:
                    6b:16:69:25:ed:fc:0f:0c:82:1e:9b:d7:e6:01:0c:
                    dd:cb:06:22:1d:6a:aa:63:9a:3d:06:f6:74:17:45:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:08:78:3D:3E:1D:3A:15:58:47:2C:D0:18:A7:60:49:20:D5:45:BA
            X509v3 Authority Key Identifier:
                keyid:CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:33:a5:43:16:b5:00:51:53:ff:c8:e5:12:18:32:da:a1:
         78:28:93:4c:4c:35:57:3d:fa:3d:09:de:e7:a7:22:13:70:ff:
         32:18:69:40:43:a2:00:3b:7e:5f:7d:77:d1:c8:e8:31:ff:39:
         26:df:28:eb:8b:6e:ea:3c:66:79:81:e7:ac:3e:12:bd:db:19:
         16:d6:a8:4d:b5:8f:c7:f6:36:c7:2b:05:37:35:26:cb:b3:dd:
         60:55:f0:59:f0:5d:c7:8f:f4:8b:4a:1f:54:7b:43:8c:c0:5d:
         d8:5c:88:c2:b4:f0:29:89:09:a3:4b:96:38:d9:09:75:94:8a:
         f7:58:7c:3f:94:b9:04:ad:18:ce:ef:87:67:a0:da:63:7f:82:
         56:9e:ad:b9:17:d5:a0:97:46:90:23:62:56:e5:19:d0:f8:41:
         9f:fb:cb:2d:ab:9a:f0:cf:f1:8d:20:30:65:a2:f0:f3:b4:00:
         d9:cb:7f:2b:8b:26:7b:62:0a:8e:5b:db:fe:e8:98:5c:e1:05:
         68:b9:ac:d0:00:cd:7d:68:5c:bb:dd:39:04:85:82:69:f9:ad:
         f1:64:49:cc:bf:21:29:0f:6f:dc:a2:2b:32:ba:cf:f3:fe:03:
         a8:ed:4b:13:da:7f:0d:6e:9f:ee:82:cb:0c:08:36:ce:07:48:
         90:f3:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:06:10 2026 by rpki-client