Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          t4zEG7b0F1b4MwJhujRahqL01CN54arOFIquoaKuwlU=
Subject key identifier:   66:07:07:A2:5B:78:19:C5:CC:1E:06:41:0C:0B:41:D4:BB:46:83:EE
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       01A11A191E56A2F7ED654A78A0506BF6B766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          09C6
Signing time:             Thu 08 Oct 2026 06:00:16 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:16 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:16 +0000
Files and hashes:         1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: rauVd/gB+tjIATV4AI/8wJ7cYB+n/H0QvICXt9ETAfI=)
                          2: zWU-Qy4G8iGTz8MTeqz8dHClz-s.roa (hash: 8KOZgKpI/1oW0YXilP2w8pzWvf8E4JdNQvX0Tq7OYNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:1e:56:a2:f7:ed:65:4a:78:a0:50:6b:f6:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: Oct  8 06:00:16 2026 GMT
            Not After : Oct  9 06:00:16 2026 GMT
        Subject: CN=660707a25b7819c5cc1e06410c0b41d4bb4683ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4d:94:2f:ea:a1:bd:a7:72:cd:fb:19:61:86:
                    dc:7c:4f:b2:21:9b:0d:cf:ae:32:ec:d3:d8:26:ed:
                    aa:ba:bd:ed:53:50:5c:19:38:c0:bc:89:c7:27:e4:
                    66:b4:a7:a3:6c:af:3a:db:d5:a9:37:5a:58:a8:98:
                    34:36:f0:1e:8d:5c:be:2d:04:4c:19:9b:5a:67:69:
                    e0:18:be:f0:11:a1:e0:17:17:c0:34:82:37:4f:d5:
                    00:b5:18:d8:6a:53:79:19:8e:a1:c0:10:ff:fe:b8:
                    b5:28:57:56:26:a4:6c:72:33:0d:4c:36:44:a8:4d:
                    ab:47:6d:b0:47:07:a9:74:32:2d:71:4f:35:d6:1f:
                    6d:53:7b:82:1e:a2:e8:12:10:31:35:c6:88:f1:db:
                    8e:49:fc:ca:73:11:d1:43:29:5e:b3:ff:0f:6d:1a:
                    69:92:5e:b3:d0:f1:97:a6:8c:61:64:bb:04:64:c1:
                    82:44:b3:8b:13:8d:dc:17:b3:91:04:9d:c9:6c:e4:
                    27:27:18:ab:73:bd:ed:e6:5c:84:48:2a:94:3b:bc:
                    b2:38:0e:a0:65:b8:f8:f7:cd:a1:b7:eb:8b:8c:6d:
                    f3:b3:bd:ea:96:3a:8c:eb:88:8d:2e:b2:05:2a:af:
                    a4:f6:db:49:2e:2b:27:1c:18:8a:15:47:d7:84:05:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:07:07:A2:5B:78:19:C5:CC:1E:06:41:0C:0B:41:D4:BB:46:83:EE
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:25:9e:8b:39:28:48:cb:5c:80:b8:64:2e:a9:40:38:07:6e:
         8b:05:55:09:92:f9:46:57:fc:7a:06:5c:c6:a7:d0:44:fb:d8:
         22:00:7d:af:8d:dc:a1:c3:74:ce:11:4b:e0:9d:b8:49:ea:36:
         ec:8d:f8:ea:58:22:61:a7:4a:8a:ce:b4:88:90:4d:f6:a8:d3:
         da:2b:ab:e0:00:ac:3f:7a:fd:e1:3b:36:a9:97:0e:8a:f5:30:
         13:ea:c1:fd:93:9c:67:d5:9a:1f:cd:e4:4c:e2:13:d0:e5:9a:
         73:50:fb:0b:1a:1a:46:8f:33:67:7e:6e:78:46:1b:85:12:91:
         e0:1a:59:b1:50:41:26:c6:54:54:30:bd:58:59:e6:ec:e5:6d:
         66:45:7a:6c:15:24:7e:d5:fe:42:d2:e5:f2:27:7a:79:b1:9c:
         b6:58:25:0e:38:9e:ca:1a:11:d4:02:83:64:1d:f0:c7:00:89:
         42:8b:5c:46:a0:49:5f:52:fc:5b:1a:bb:43:81:2f:9b:c4:81:
         31:79:31:0a:92:b1:77:02:65:8b:32:18:09:5c:a6:60:da:b7:
         27:ad:fb:b4:02:11:a9:45:04:b9:22:48:b8:07:34:56:ee:38:
         3b:74:e0:15:51:f0:c3:f6:be:f8:91:cb:6e:b9:fe:b5:3c:17:
         74:34:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:42:49 2026 by rpki-client