Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          g8CuIQrchz7zLufko9AvEHOUhwg5c3PwtLw7ZeZJcrc=
Subject key identifier:   4B:A2:33:D8:F2:A5:13:18:E3:32:C2:82:C9:85:38:0C:E0:46:8B:5F
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       019E886CB069848189B96FC4000FA040355E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          1132
Signing time:             Tue 02 Jun 2026 13:01:24 +0000
Manifest this update:     Tue 02 Jun 2026 13:01:24 +0000
Manifest next update:     Wed 03 Jun 2026 13:01:24 +0000
Files and hashes:         1: BMF2VpXZcBJDRIgbKu6WmPKlRZE.roa (hash: Qaj7moEkQ9ZCrPUXtOtCs5aCDU6SYqiy/nfoo9H7JTA=)
                          2: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (hash: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0=)
                          3: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (hash: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0=)
                          4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: MoDKDl5t6BNFk58Lf35zWu3VPFytIyTu+dYSmSxWJus=)
                          5: wK1thNBNOi3cJ4C_cLUUCpyCeDg.roa (hash: SYmUDWSPEMPAWWeOzzPct/i4L2oBAFG5xQ9Zk5i1914=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:6c:b0:69:84:81:89:b9:6f:c4:00:0f:a0:40:35:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Jun  2 13:01:24 2026 GMT
            Not After : Jun  3 13:01:24 2026 GMT
        Subject: CN=4ba233d8f2a51318e332c282c985380ce0468b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:d7:8c:a1:51:f1:b5:db:54:f2:b8:95:2a:
                    a6:99:21:99:31:64:77:17:fe:51:8b:a7:6a:61:ef:
                    53:ac:5f:71:52:2f:8e:fd:0a:fe:ae:e2:53:dd:e6:
                    69:6d:33:4b:24:c8:c5:31:ce:01:d2:b0:c7:f6:f4:
                    25:98:3a:6f:95:ee:04:ce:99:9d:be:c6:d5:3a:b3:
                    e7:c6:17:c5:b2:72:8d:e6:39:1f:06:63:a9:a3:bd:
                    58:c1:f9:8c:6f:4e:c4:d1:12:bf:17:65:11:d2:67:
                    a5:2d:19:e0:b9:52:e4:03:c7:72:3e:ac:84:2f:4b:
                    95:ae:94:57:f3:14:df:26:25:e4:9f:e5:46:f6:44:
                    72:89:ea:e4:e7:af:fe:9e:1d:1a:a5:bb:d1:32:33:
                    fe:6d:0b:08:38:3f:05:f7:b7:47:80:c8:c7:93:da:
                    6d:8e:d6:0a:7d:dc:dd:23:9c:cc:de:63:b9:a7:15:
                    85:b0:72:c4:84:18:51:c7:65:27:57:08:97:c5:7e:
                    9b:b4:10:cf:ee:52:72:4a:3d:38:8e:76:94:af:d5:
                    c8:05:83:c4:d2:17:31:98:01:34:41:d7:4f:87:48:
                    a4:a6:d7:ae:e3:b8:02:82:cf:74:07:fb:9e:22:34:
                    b4:e6:fb:56:61:20:10:35:11:fb:27:49:36:5a:26:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A2:33:D8:F2:A5:13:18:E3:32:C2:82:C9:85:38:0C:E0:46:8B:5F
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:80:16:0e:97:6c:e3:5c:e6:3b:68:43:aa:21:df:d9:5e:8f:
         31:87:78:4d:40:e0:15:60:12:ca:81:ba:c4:24:5c:0e:98:5d:
         dd:68:41:43:18:f0:e4:f2:3d:ae:74:13:03:eb:74:16:45:a6:
         72:f2:58:09:ae:11:3a:00:ee:69:c4:ca:39:86:eb:67:02:9f:
         50:3f:91:3e:5c:28:e5:2f:86:f8:c3:6c:f4:09:56:24:73:42:
         18:22:f1:77:43:09:0e:26:49:a9:12:19:36:d0:08:93:35:ef:
         2a:e0:65:f0:40:88:9c:da:80:dc:89:51:b2:8d:36:b8:6c:88:
         ac:f7:f4:69:58:1e:1f:48:be:5d:8e:86:72:e2:b9:f0:71:75:
         a9:e2:00:d6:75:e6:54:5c:d6:95:cc:e1:d7:98:a8:1c:ba:e6:
         62:30:e3:7f:1a:a7:b4:4d:74:38:84:be:27:06:97:3c:e1:d0:
         cf:24:6a:89:ba:f5:dd:0c:9d:4f:28:f7:fd:d9:a9:b8:fc:d4:
         fe:70:53:d6:33:04:f4:20:de:38:3b:91:05:76:31:e2:ad:d1:
         47:7a:c1:6b:f3:19:aa:45:82:ef:e9:06:ed:76:0d:eb:df:f8:
         75:8d:83:45:ba:e6:1d:5b:31:33:8d:26:c5:8b:21:80:35:cd:
         58:4b:94:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6IbLBphIGJuW/EAA+gQDVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0
NmVmNGEwHhcNMjYwNjAyMTMwMTI0WhcNMjYwNjAzMTMwMTI0WjAzMTEwLwYDVQQD
Eyg0YmEyMzNkOGYyYTUxMzE4ZTMzMmMyODJjOTg1MzgwY2UwNDY4YjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xrXjKFR8bXbVPK4lSqmmSGZMWR3
F/5Ri6dqYe9TrF9xUi+O/Qr+ruJT3eZpbTNLJMjFMc4B0rDH9vQlmDpvle4Ezpmd
vsbVOrPnxhfFsnKN5jkfBmOpo71YwfmMb07E0RK/F2UR0melLRnguVLkA8dyPqyE
L0uVrpRX8xTfJiXkn+VG9kRyierk56/+nh0apbvRMjP+bQsIOD8F97dHgMjHk9pt
jtYKfdzdI5zM3mO5pxWFsHLEhBhRx2UnVwiXxX6btBDP7lJySj04jnaUr9XIBYPE
0hcxmAE0QddPh0ikpteu47gCgs90B/ueIjS05vtWYSAQNRH7J0k2WibVpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuiM9jypRMY4zLCgsmFOAzgRotfMB8GA1UdIwQY
MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4AWDpds
41zmO2hDqiHf2V6PMYd4TUDgFWASyoG6xCRcDphd3WhBQxjw5PI9rnQTA+t0FkWm
cvJYCa4ROgDuacTKOYbrZwKfUD+RPlwo5S+G+MNs9AlWJHNCGCLxd0MJDiZJqRIZ
NtAIkzXvKuBl8ECInNqA3IlRso02uGyIrPf0aVgeH0i+XY6GcuK58HF1qeIA1nXm
VFzWlczh15ioHLrmYjDjfxqntE10OIS+JwaXPOHQzyRqibr13QydTyj3/dmpuPzU
/nBT1jME9CDeODuRBXYx4q3RR3rBa/MZqkWC7+kG7XYN69/4dY2DRbrmHVsxM40m
xYshgDXNWEuUkA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:15 2026 by rpki-client