Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File:                     ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier:          85P6P+9IO5KvTzWk75xp1VIi5uCP9I/WuYS2kQBpytE=
Subject key identifier:   AF:FF:84:40:68:6B:18:8D:19:B4:EE:02:63:05:B9:D7:18:54:A4:CE
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer:       /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial:       01A176CBD2B04A69A10DF33B66C87E9E6404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number:          03B6
Signing time:             Mon 26 Oct 2026 06:00:31 +0000
Manifest this update:     Mon 26 Oct 2026 06:00:31 +0000
Manifest next update:     Tue 27 Oct 2026 06:00:31 +0000
Files and hashes:         1: 8ndDa5rRng5A6n53ieZF5n0zI7s.roa (hash: KtGt0NdlDvyNnvEnoJfeg2xWBfVSAuPvOu/PVmj7YGM=)
                          2: VPi2ebLJADEknE0vjMS8E-YQvPQ.roa (hash: oO735iZZLpkD9NxJ8YTop9o4debqleHv7iMJ/1qzafM=)
                          3: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: 6DR8YIiryZRSqlXdfPCn1wACJS/DYJmes5NvGA9O7HY=)
                          4: uR2ylumTmfT3BQFedfgIoqmEIcM.roa (hash: OT+mNpsQIWtCh4SyPSeorwW+75Abd8tYhpy5oP3ZE18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:cb:d2:b0:4a:69:a1:0d:f3:3b:66:c8:7e:9e:64:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
        Validity
            Not Before: Oct 26 06:00:31 2026 GMT
            Not After : Oct 27 06:00:31 2026 GMT
        Subject: CN=afff8440686b188d19b4ee026305b9d71854a4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:81:b9:68:11:46:2d:d8:20:ed:c4:3a:ce:
                    3a:35:c5:28:25:53:aa:51:bc:e6:4e:ad:6d:99:80:
                    44:7f:4b:dd:76:23:3e:67:e2:25:85:39:d0:19:8a:
                    34:81:33:2c:d1:5f:03:69:70:a3:2a:9b:f2:be:c1:
                    07:ca:b3:18:66:d2:40:3e:34:a1:d4:1f:c3:f7:d7:
                    f6:53:09:ff:c0:ff:99:ac:0e:59:f5:fc:7d:91:65:
                    ff:66:d6:e9:0c:a3:ef:74:16:17:bf:be:d5:14:f2:
                    f2:09:45:09:1e:53:ff:7d:46:1a:d8:0e:b7:7c:09:
                    d3:26:c4:63:1b:60:9e:43:61:fd:16:5a:02:cc:17:
                    05:7e:c6:02:b8:4a:1f:86:13:55:55:21:97:64:17:
                    12:27:ac:15:b5:85:40:68:26:c6:17:ce:6f:71:51:
                    c1:68:32:18:7d:c2:40:dc:b5:10:3a:29:34:23:e2:
                    a6:b2:04:7e:f9:54:17:62:0a:06:61:6b:98:5a:9e:
                    8e:ef:a7:25:17:bb:52:b8:e5:f3:77:27:49:44:b5:
                    ab:94:11:35:49:e3:79:0c:57:c1:ce:94:c7:08:24:
                    81:4d:a1:6b:95:91:46:55:e3:42:f6:0a:52:df:d4:
                    a2:1f:86:a1:5e:42:de:34:77:5a:c8:0f:ae:eb:7a:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FF:84:40:68:6B:18:8D:19:B4:EE:02:63:05:B9:D7:18:54:A4:CE
            X509v3 Authority Key Identifier:
                keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:08:1b:aa:f9:6f:b3:41:da:c8:3b:62:3e:c4:85:37:9d:
         59:fe:3f:a6:95:5d:e6:73:24:6e:fe:e3:26:9d:2e:b6:53:8b:
         e9:69:3d:bd:a0:1f:94:97:a9:a0:80:37:b8:a3:b6:13:41:f9:
         1c:f8:ec:a5:01:2a:97:36:2f:c2:68:19:ef:f7:e6:73:e5:95:
         54:55:b3:76:64:1c:21:f1:7f:6e:7e:7f:90:2e:1f:8f:c0:57:
         4e:a5:bb:26:00:a3:86:10:e7:be:f6:22:ea:5b:23:20:8b:76:
         2e:94:1d:e2:ce:fb:c1:46:b7:ff:31:f8:31:2e:ab:5b:34:90:
         fa:70:9c:07:18:a9:33:01:52:6b:32:f8:07:0b:0c:8b:08:c0:
         20:ce:f7:9b:2b:aa:3b:2e:96:1e:13:df:84:a6:74:d4:a4:d9:
         54:56:9f:22:69:a8:71:cb:36:0a:ed:34:6c:3a:8f:c2:85:2d:
         39:e6:70:1e:2a:00:8e:ec:48:79:d1:83:02:01:8a:29:8c:e5:
         76:25:65:a0:4e:0b:23:a3:af:f4:97:66:b8:98:fd:96:e3:06:
         55:cd:1a:40:62:9d:05:2a:dc:15:48:fe:c9:73:5a:83:33:4c:
         b7:22:70:a3:32:a3:89:1b:f8:ca:bd:06:72:2a:e1:68:52:95:
         61:03:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:41:53 2026 by rpki-client