Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File:                     zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier:          eXyzhYEyoTNTxnMXUq6VJL/J/RhGE4/RAMO1/lofir8=
Subject key identifier:   08:34:90:D0:C9:C1:DB:F8:5F:60:00:49:3F:49:AA:B9:5C:3D:71:EF
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer:       /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial:       01A11861D2BB9FFE89B9AC24C238993A9A82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number:          0C8E
Signing time:             Wed 07 Oct 2026 22:00:26 +0000
Manifest this update:     Wed 07 Oct 2026 22:00:26 +0000
Manifest next update:     Thu 08 Oct 2026 22:00:26 +0000
Files and hashes:         1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
                          2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: +C3cvQH/fwhBnPEJCGHThJwMraKIYAe/Ups8pCvkOPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:61:d2:bb:9f:fe:89:b9:ac:24:c2:38:99:3a:9a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
        Validity
            Not Before: Oct  7 22:00:26 2026 GMT
            Not After : Oct  8 22:00:26 2026 GMT
        Subject: CN=083490d0c9c1dbf85f6000493f49aab95c3d71ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:41:46:a7:ce:d4:62:f2:6a:2e:40:a6:e4:
                    94:76:e4:11:9e:00:7c:51:e5:b5:68:d2:b0:02:9a:
                    ce:97:05:e2:08:75:1b:f7:c2:78:bf:bf:06:b7:ae:
                    5e:95:40:5b:dc:7b:fe:67:30:aa:72:0e:39:fa:46:
                    72:33:02:e7:68:94:76:d1:79:35:e4:a5:ab:9e:d1:
                    20:5a:56:67:42:15:13:ac:32:fe:9c:89:17:74:91:
                    84:35:fc:e5:6f:54:31:96:25:42:4d:02:93:ab:0f:
                    01:0f:d1:45:cf:2d:3f:a4:fa:40:3c:e4:fd:a6:b9:
                    a9:be:f4:00:f4:60:0e:56:cf:65:80:61:8d:3c:d5:
                    b8:d4:67:86:63:b2:c3:1a:ed:53:f1:37:13:14:5d:
                    3f:dd:3b:dc:10:9b:26:4e:00:79:9d:4e:3c:cf:54:
                    cc:45:0a:d0:c6:09:8a:d7:17:2f:b4:cf:f2:61:3c:
                    24:19:b6:d9:24:0b:67:33:7a:02:d2:70:8f:29:fc:
                    26:44:e6:ad:39:80:35:03:2f:4b:77:c4:ad:75:68:
                    1d:74:01:c7:fc:0c:52:9f:fa:ef:d4:18:16:89:f8:
                    b6:d1:b4:32:16:94:fb:d1:aa:41:87:be:cd:ea:3b:
                    de:1c:15:df:4e:c9:21:be:41:c1:53:29:09:3a:1f:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:90:D0:C9:C1:DB:F8:5F:60:00:49:3F:49:AA:B9:5C:3D:71:EF
            X509v3 Authority Key Identifier:
                keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:c3:84:ce:89:ef:b3:14:b6:3c:eb:de:a5:cd:af:c6:ac:
         e5:75:58:d5:56:3f:c6:04:32:c0:63:a0:41:46:2f:2b:61:44:
         d5:14:cf:08:44:cd:bb:04:79:00:0d:ca:ed:d5:90:94:42:9c:
         25:5e:2c:1c:42:94:78:bd:f0:1e:8d:43:f8:33:af:8e:e9:c4:
         17:68:55:f9:da:90:d5:4d:3f:fa:3b:67:b3:4a:fe:10:2d:35:
         28:99:9b:0a:38:c7:54:20:91:b9:12:db:b4:e3:09:84:75:7a:
         34:de:cf:2b:a5:11:33:35:38:ec:65:b7:69:a1:72:df:31:cd:
         e4:87:81:b7:1f:7b:e8:39:ac:61:2e:1b:41:c2:e6:17:9b:60:
         7c:7c:09:32:f8:a5:77:67:f9:67:6c:06:27:7a:67:de:ee:20:
         46:ef:19:30:a6:ee:63:44:03:26:70:07:1d:c5:30:e0:10:64:
         c5:95:68:9b:82:de:de:52:85:c7:74:59:6e:73:88:74:50:2a:
         68:72:ac:66:6c:e3:bc:5c:64:1b:90:52:88:0f:68:82:68:c2:
         19:1d:17:39:1a:ae:b1:c8:55:4f:75:34:cb:73:3c:bb:a1:f5:
         f8:af:40:55:15:d6:9e:cd:f2:fc:4a:a4:16:ec:a9:3c:1a:cc:
         0a:e4:6d:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYYdK7n/6JuawkwjiZOpqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTRjMzFlMTVkZjRiN2E2MGU1ZDQwZGYzYWFjMTg1MmU4
ZGE3NGIwHhcNMjYxMDA3MjIwMDI2WhcNMjYxMDA4MjIwMDI2WjAzMTEwLwYDVQQD
EygwODM0OTBkMGM5YzFkYmY4NWY2MDAwNDkzZjQ5YWFiOTVjM2Q3MWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25RBRqfO1GLyai5ApuSUduQRngB8
UeW1aNKwAprOlwXiCHUb98J4v78Gt65elUBb3Hv+ZzCqcg45+kZyMwLnaJR20Xk1
5KWrntEgWlZnQhUTrDL+nIkXdJGENfzlb1QxliVCTQKTqw8BD9FFzy0/pPpAPOT9
prmpvvQA9GAOVs9lgGGNPNW41GeGY7LDGu1T8TcTFF0/3TvcEJsmTgB5nU48z1TM
RQrQxgmK1xcvtM/yYTwkGbbZJAtnM3oC0nCPKfwmROatOYA1Ay9Ld8StdWgddAHH
/AxSn/rv1BgWifi20bQyFpT70apBh77N6jveHBXfTskhvkHBUykJOh+QgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg0kNDJwdv4X2AAST9JqrlcPXHvMB8GA1UdIwQY
MBaAFM6Uwx4V30t6YOXUDfOqwYUujadLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEt
MDhmMjI2M2E0MTNjLzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEtMDhmMjI2M2E0MTNj
LzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglrDhM6J
77MUtjzr3qXNr8as5XVY1VY/xgQywGOgQUYvK2FE1RTPCETNuwR5AA3K7dWQlEKc
JV4sHEKUeL3wHo1D+DOvjunEF2hV+dqQ1U0/+jtns0r+EC01KJmbCjjHVCCRuRLb
tOMJhHV6NN7PK6URMzU47GW3aaFy3zHN5IeBtx976DmsYS4bQcLmF5tgfHwJMvil
d2f5Z2wGJ3pn3u4gRu8ZMKbuY0QDJnAHHcUw4BBkxZVom4Le3lKFx3RZbnOIdFAq
aHKsZmzjvFxkG5BSiA9ogmjCGR0XORquschVT3U0y3M8u6H1+K9AVRXWns3y/Eqk
FuypPBrMCuRt8g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:52:17 2026 by rpki-client