Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File:                     Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier:          WcQu1FZP3mzBCqDiB4/Ra4c+Gx9qNd5XB4F5jz9emOA=
Subject key identifier:   80:53:B3:6A:22:F1:39:77:A1:39:70:55:53:B8:8A:72:F4:74:04:C8
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer:       /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial:       01A0268E94B181F989EF481A06C0C8E1D453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number:          0873
Signing time:             Fri 21 Aug 2026 23:01:13 +0000
Manifest this update:     Fri 21 Aug 2026 23:01:13 +0000
Manifest next update:     Sat 22 Aug 2026 23:01:13 +0000
Files and hashes:         1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
                          2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
                          3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: lyU/VobmyAwHqTfUUqx6Aw8j56a3pucq+kaGYYG3UZ8=)
                          4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:8e:94:b1:81:f9:89:ef:48:1a:06:c0:c8:e1:d4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
        Validity
            Not Before: Aug 21 23:01:13 2026 GMT
            Not After : Aug 22 23:01:13 2026 GMT
        Subject: CN=8053b36a22f13977a139705553b88a72f47404c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:ce:5a:c3:e4:c3:19:29:d0:96:03:6e:45:
                    31:a4:ec:3f:18:7f:d3:61:4b:29:81:e9:a9:81:46:
                    c3:cd:96:ad:b8:bd:d1:dc:93:ef:4a:2a:82:ca:2d:
                    e9:d7:9f:c9:a6:bd:27:16:76:3f:c5:09:96:01:7b:
                    e8:7b:4a:10:06:d7:68:9b:3b:eb:06:73:54:ed:8d:
                    0d:50:93:e0:c6:50:2c:d0:bd:25:3f:8f:f0:25:f6:
                    3a:a3:d5:a7:32:81:37:7a:70:00:05:ef:bf:49:52:
                    39:62:40:71:af:78:fb:38:b8:95:d1:75:ae:5d:f3:
                    af:74:82:99:af:8e:c8:13:4a:9b:b4:17:15:72:a4:
                    ab:27:5d:6b:b3:0f:3e:0c:09:5c:34:7c:db:0d:8d:
                    1b:75:bb:e2:8c:9b:68:d4:45:88:9a:d7:4a:62:c4:
                    34:e7:51:36:a0:74:ff:c9:bc:5d:29:72:ce:88:38:
                    91:c0:ee:ab:c1:3e:5d:c1:8f:9a:39:1d:35:54:0d:
                    6c:a5:e3:e8:b0:d1:fd:af:fb:e4:6f:21:9c:2d:25:
                    37:16:39:6a:1d:7c:ef:81:ef:df:4d:7d:42:8c:74:
                    09:30:ba:e6:d1:b9:46:c8:da:7f:91:c4:f4:4a:4b:
                    95:74:11:2e:26:9d:4b:b3:ca:5c:0d:4f:da:59:b3:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:B3:6A:22:F1:39:77:A1:39:70:55:53:B8:8A:72:F4:74:04:C8
            X509v3 Authority Key Identifier:
                keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:12:aa:59:5f:38:62:81:7f:9a:68:12:b3:88:00:fb:5b:4d:
         31:71:9e:4f:5a:5e:e8:4f:0e:1e:f4:25:93:0a:7e:e2:9d:3a:
         a2:7e:97:69:9d:f2:fb:5b:f5:30:36:f7:29:32:5d:74:31:ee:
         56:07:0b:7e:f2:c1:9f:bb:33:50:6e:b2:bc:24:69:67:a0:ec:
         97:62:a3:09:54:4f:5e:0e:31:9c:a7:ee:5c:cd:7f:f6:82:3a:
         9f:ae:60:af:ec:ed:dc:45:45:cd:7f:1f:9f:bb:50:a2:0c:95:
         ba:1b:fa:48:4d:70:ec:d0:79:ad:3f:89:3f:91:db:f0:5c:8f:
         24:75:1d:29:d9:50:b4:cf:07:59:37:df:cb:bd:f1:8d:92:6c:
         d8:2e:86:f7:a1:6b:c5:3d:21:0b:57:f6:d3:16:b6:cb:2c:b4:
         dd:a7:5d:13:1f:e4:33:52:d5:eb:6f:4c:e9:3b:ef:30:bc:25:
         51:8d:df:13:3e:ff:6e:6c:4b:31:35:dd:0b:41:2f:92:c3:e3:
         6b:bb:d4:c6:d0:c9:af:ad:59:3d:63:e1:58:87:a0:ef:45:0a:
         bb:4d:e0:c9:7e:e3:05:c0:d6:6f:74:34:e6:70:8b:cb:5e:9d:
         27:ab:6b:a4:f8:d8:16:4c:70:11:83:f7:dd:57:f2:8b:cd:61:
         05:96:f9:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmjpSxgfmJ70gaBsDI4dRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh
NmFiOGQwHhcNMjYwODIxMjMwMTEzWhcNMjYwODIyMjMwMTEzWjAzMTEwLwYDVQQD
Eyg4MDUzYjM2YTIyZjEzOTc3YTEzOTcwNTU1M2I4OGE3MmY0NzQwNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdXOWsPkwxkp0JYDbkUxpOw/GH/T
YUspgempgUbDzZatuL3R3JPvSiqCyi3p15/Jpr0nFnY/xQmWAXvoe0oQBtdomzvr
BnNU7Y0NUJPgxlAs0L0lP4/wJfY6o9WnMoE3enAABe+/SVI5YkBxr3j7OLiV0XWu
XfOvdIKZr47IE0qbtBcVcqSrJ11rsw8+DAlcNHzbDY0bdbvijJto1EWImtdKYsQ0
51E2oHT/ybxdKXLOiDiRwO6rwT5dwY+aOR01VA1spePosNH9r/vkbyGcLSU3Fjlq
HXzvge/fTX1CjHQJMLrm0blGyNp/kcT0SkuVdBEuJp1Ls8pcDU/aWbNW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBTs2oi8Tl3oTlwVVO4inL0dATIMB8GA1UdIwQY
MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt
MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz
LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRKqWV84
YoF/mmgSs4gA+1tNMXGeT1pe6E8OHvQlkwp+4p06on6XaZ3y+1v1MDb3KTJddDHu
VgcLfvLBn7szUG6yvCRpZ6Dsl2KjCVRPXg4xnKfuXM1/9oI6n65gr+zt3EVFzX8f
n7tQogyVuhv6SE1w7NB5rT+JP5Hb8FyPJHUdKdlQtM8HWTffy73xjZJs2C6G96Fr
xT0hC1f20xa2yyy03addEx/kM1LV629M6TvvMLwlUY3fEz7/bmxLMTXdC0EvksPj
a7vUxtDJr61ZPWPhWIeg70UKu03gyX7jBcDWb3Q05nCLy16dJ6trpPjYFkxwEYP3
3Vfyi81hBZb5OA==
-----END CERTIFICATE-----
Generated at Sat Aug 22 06:54:11 2026 by rpki-client