Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
File:                     sZPxphH_PZUKvZZlLNqgVaNR20U.mft (raw, json)
Hash identifier:          1E845EOyPjIYfEkYusihPmG/JFeLX39OZQ/fwn6y/UA=
Subject key identifier:   8F:D6:6D:E8:F2:F2:C0:6D:61:F2:EE:7C:9E:79:7E:A1:83:83:EE:B3
Authority key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Certificate issuer:       /CN=b193f1a611ff3d950abd96652cdaa055a351db45
Certificate serial:       01A104372C9CC453F823AF768F50639A8401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
Manifest number:          0100
Signing time:             Sun 04 Oct 2026 00:01:27 +0000
Manifest this update:     Sun 04 Oct 2026 00:01:27 +0000
Manifest next update:     Mon 05 Oct 2026 00:01:27 +0000
Files and hashes:         1: 0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa (hash: 3Fe9Azb+RrHGaKENizsao17NNGxQe5yH/WD4Wqllrkg=)
                          2: sZPxphH_PZUKvZZlLNqgVaNR20U.crl (hash: P5F1Lnjx+0+JP6R/SgbI465OlHQ720hQiXW6PgsuyTM=)
                          3: zzpXRXiaaDaUNJgb8J2uf-9tibo.roa (hash: 6IAZNXyLJkKu4qRWV3DHkLx2sFZt0DSc2M4cQ6BsTRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:37:2c:9c:c4:53:f8:23:af:76:8f:50:63:9a:84:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b193f1a611ff3d950abd96652cdaa055a351db45
        Validity
            Not Before: Oct  4 00:01:27 2026 GMT
            Not After : Oct  5 00:01:27 2026 GMT
        Subject: CN=8fd66de8f2f2c06d61f2ee7c9e797ea18383eeb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:7b:0f:3e:cc:80:05:ea:b0:09:3e:d6:fe:
                    74:3c:05:a4:8d:94:08:3b:2a:8f:06:25:a0:60:0e:
                    4d:92:d3:4b:9c:4f:54:c9:97:42:ff:d8:cc:2a:eb:
                    10:df:0e:4a:4f:41:52:88:a2:7f:68:6a:46:3c:db:
                    73:70:1b:b4:b9:44:0d:71:83:f8:0a:0a:b7:32:48:
                    51:fc:1a:e6:af:a2:89:ca:44:6f:c0:40:38:f2:78:
                    31:51:43:46:c4:69:ea:52:a6:8b:b3:41:f3:35:80:
                    32:3d:67:d7:07:03:b6:4a:0d:dd:4a:94:69:d9:1b:
                    2f:79:ad:44:37:8e:f7:ad:ef:9c:03:15:90:57:eb:
                    e3:5c:b4:ab:29:85:42:bf:46:31:9e:9e:98:45:ac:
                    d8:07:2a:30:a7:36:d9:97:e5:59:0b:9e:53:a9:45:
                    f9:d5:06:31:18:24:8e:ec:e5:79:68:a9:9e:f6:aa:
                    a3:4e:e2:98:a1:db:96:20:c2:f1:14:a4:c8:be:97:
                    9a:8f:7d:f2:0c:1d:6c:11:84:c0:cb:e4:de:8d:94:
                    e8:30:3c:3f:4e:ea:e9:c2:b6:78:cd:cd:a1:19:08:
                    6a:3a:8f:7c:30:18:75:05:86:9d:9d:d2:d4:b4:e7:
                    53:68:72:be:a6:a9:fe:40:d3:05:86:1e:04:aa:b7:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D6:6D:E8:F2:F2:C0:6D:61:F2:EE:7C:9E:79:7E:A1:83:83:EE:B3
            X509v3 Authority Key Identifier:
                keyid:B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c1:b1:b0:05:e4:ff:d8:9d:41:de:60:58:f1:66:8b:72:38:
         72:6a:29:f3:ea:e6:8a:01:ac:69:3a:fe:d6:44:9a:44:8b:7c:
         cd:d8:20:cc:41:50:6e:c6:56:46:13:8d:1a:0f:ff:d1:f6:83:
         08:f1:1c:be:b7:da:3c:45:16:6d:57:17:09:fd:59:b2:f4:aa:
         24:92:75:56:81:56:ae:be:88:9d:4f:34:0e:b1:e1:a9:ed:0b:
         25:96:8d:ad:69:d7:4d:27:27:14:a4:06:7b:66:4a:ca:e0:cd:
         c3:8f:48:6c:90:24:11:5d:ef:b5:b4:cf:c8:48:0b:43:91:be:
         43:4f:64:ae:5d:62:b1:dd:fc:2f:6a:78:9f:2b:2f:a7:bb:4c:
         97:5c:04:3d:9f:25:de:7c:aa:00:2b:68:fe:e5:cb:1c:37:29:
         4a:f9:8b:c7:a4:7a:6b:9b:9c:6d:21:ed:ce:d1:2d:8b:63:c4:
         9d:24:cf:50:bc:d2:3e:aa:02:54:5c:dd:b1:99:82:eb:a1:62:
         8a:e2:18:d5:83:81:d9:12:fd:95:53:04:4e:87:1d:fb:05:1e:
         c6:bf:f7:63:48:0d:73:9a:4f:63:aa:66:2d:bf:85:97:07:c3:
         a5:51:a3:8f:e1:ff:c1:5a:dd:1c:48:2f:70:b3:4e:cd:98:c0:
         cb:02:69:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEENyycxFP4I692j1BjmoQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTNmMWE2MTFmZjNkOTUwYWJkOTY2NTJjZGFhMDU1YTM1
MWRiNDUwHhcNMjYxMDA0MDAwMTI3WhcNMjYxMDA1MDAwMTI3WjAzMTEwLwYDVQQD
Eyg4ZmQ2NmRlOGYyZjJjMDZkNjFmMmVlN2M5ZTc5N2VhMTgzODNlZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunl7Dz7MgAXqsAk+1v50PAWkjZQI
OyqPBiWgYA5NktNLnE9UyZdC/9jMKusQ3w5KT0FSiKJ/aGpGPNtzcBu0uUQNcYP4
Cgq3MkhR/Brmr6KJykRvwEA48ngxUUNGxGnqUqaLs0HzNYAyPWfXBwO2Sg3dSpRp
2Rsvea1EN473re+cAxWQV+vjXLSrKYVCv0Yxnp6YRazYByowpzbZl+VZC55TqUX5
1QYxGCSO7OV5aKme9qqjTuKYoduWIMLxFKTIvpeaj33yDB1sEYTAy+TejZToMDw/
TurpwrZ4zc2hGQhqOo98MBh1BYadndLUtOdTaHK+pqn+QNMFhh4EqrfvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/Wbejy8sBtYfLufJ55fqGDg+6zMB8GA1UdIwQY
MBaAFLGT8aYR/z2VCr2WZSzaoFWjUdtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pQeHBoSF9QWlVLdlpabExOcWdWYU5SMjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt
YjdjYTFmZTZjMTg0LzEvc1pQeHBoSF9QWlVLdlpabExOcWdWYU5SMjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0
LzEvc1pQeHBoSF9QWlVLdlpabExOcWdWYU5SMjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcGxsAXk
/9idQd5gWPFmi3I4cmop8+rmigGsaTr+1kSaRIt8zdggzEFQbsZWRhONGg//0faD
CPEcvrfaPEUWbVcXCf1ZsvSqJJJ1VoFWrr6InU80DrHhqe0LJZaNrWnXTScnFKQG
e2ZKyuDNw49IbJAkEV3vtbTPyEgLQ5G+Q09krl1isd38L2p4nysvp7tMl1wEPZ8l
3nyqACto/uXLHDcpSvmLx6R6a5ucbSHtztEti2PEnSTPULzSPqoCVFzdsZmC66Fi
iuIY1YOB2RL9lVMETocd+wUexr/3Y0gNc5pPY6pmLb+FlwfDpVGjj+H/wVrdHEgv
cLNOzZjAywJp6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:44:29 2026 by rpki-client