Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File:                     RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier:          0Y4CLRZbwt7J6A+VFrqPrNQJ04XDRhFr9dxmWCOiFAE=
Subject key identifier:   45:A2:DC:6B:D1:FC:77:30:9D:1B:5C:72:58:BD:3C:ED:64:6B:33:E5
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer:       /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial:       01A184BF023A696A633F8152B749A15EF917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number:          04B9
Signing time:             Wed 28 Oct 2026 23:01:12 +0000
Manifest this update:     Wed 28 Oct 2026 23:01:12 +0000
Manifest next update:     Thu 29 Oct 2026 23:01:12 +0000
Files and hashes:         1: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: OjTq04v20MsKRNRkJn3idx/rulBW/gFXs6ghBieHfG4=)
                          2: XL1P9z2WhAwSshjJ_qUNimywoUg.roa (hash: 2V27vmSQBNuEYMN62UbxpgxUhIofJUMh39lELqkLooo=)
                          3: hRF9ml8v_UduMvXzWno8qvtUHJY.roa (hash: aeqiSYNEe9b/RioY7u2z8TFho5XR5ZNUJdfUaIjcd7A=)
                          4: v8seVYIDYHWoGxFEIsxg-SXECwU.roa (hash: 5O+BU1G/+loNbYaWgI9nb1NRcs3e2blcuMzVwEOV2B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:bf:02:3a:69:6a:63:3f:81:52:b7:49:a1:5e:f9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
        Validity
            Not Before: Oct 28 23:01:12 2026 GMT
            Not After : Oct 29 23:01:12 2026 GMT
        Subject: CN=45a2dc6bd1fc77309d1b5c7258bd3ced646b33e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:38:f7:63:66:e8:49:b7:d0:f8:78:da:db:
                    b7:86:93:65:8a:06:27:28:dd:17:4e:b3:bc:f2:c8:
                    e6:e7:5d:f1:67:44:bc:43:48:56:ab:aa:79:e7:60:
                    6d:2f:88:f9:bd:39:0a:12:e7:65:95:68:7d:2a:b0:
                    d4:6d:bd:ce:ed:6b:72:48:e8:76:75:8b:3e:aa:1d:
                    d5:78:7e:14:b4:20:c7:2b:f4:bf:38:1e:07:a3:99:
                    94:bd:b6:0c:2b:fa:8e:0a:7d:17:d7:69:90:59:bf:
                    65:8d:56:a1:e5:53:54:e5:69:d0:b3:06:cd:c4:e8:
                    a4:17:05:7d:bc:82:da:c2:3c:0f:eb:4c:de:39:e5:
                    7a:79:cf:07:79:0b:b7:c1:43:86:26:51:dd:f9:b1:
                    79:0a:3c:a1:47:cb:d8:a0:12:8a:78:ad:48:2f:6d:
                    1a:1a:21:5b:ac:de:98:60:7e:7c:14:b4:35:0f:ca:
                    d3:ac:b8:8a:ef:6a:30:8c:b4:c1:bd:f6:1f:53:51:
                    7c:c7:2c:33:a4:02:9f:33:e5:33:de:3d:9b:7c:d4:
                    7a:04:71:32:19:e4:93:df:c6:8f:1d:9f:55:9c:05:
                    ac:fe:6b:ef:d9:bf:e3:16:e6:dd:0b:12:46:7b:0f:
                    c2:df:bc:6a:c1:9a:56:16:94:b5:f3:29:95:f6:c2:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A2:DC:6B:D1:FC:77:30:9D:1B:5C:72:58:BD:3C:ED:64:6B:33:E5
            X509v3 Authority Key Identifier:
                keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:63:d2:bb:3d:73:ab:4d:a9:1e:fa:3a:9b:4c:07:80:bd:cb:
         ad:67:94:e4:64:51:39:b9:e2:61:7a:5a:c9:c0:ae:d6:40:87:
         07:74:0c:78:6d:90:74:6f:fd:81:43:24:18:28:36:fb:1c:4c:
         11:53:60:2b:14:d2:77:2a:c1:9e:4f:a6:f5:20:aa:87:28:45:
         cf:f0:ea:e8:42:32:e4:da:03:17:5a:c3:24:88:ce:fc:9b:d6:
         ce:42:46:c8:5c:73:4c:f1:fa:fc:4f:8d:cc:0a:94:2b:af:69:
         e7:23:33:a2:c8:90:52:31:52:f0:cc:ea:87:7e:08:b6:31:f4:
         fe:41:8c:58:7f:8f:13:f6:c4:1d:a2:19:d7:15:8f:48:fd:73:
         db:4d:c8:01:96:6c:9d:53:99:9c:73:bd:11:11:1d:09:46:28:
         b3:44:bd:9d:89:0f:5f:93:d8:70:fe:6c:26:7f:08:cd:83:20:
         a3:c0:01:aa:38:c4:26:a4:9b:84:ca:93:c0:65:69:6d:3c:57:
         18:22:70:62:1f:7a:44:aa:ad:2e:89:fc:a6:24:55:f7:b9:b6:
         bc:65:c1:aa:25:9a:4c:2e:b9:47:69:62:3d:2e:d5:2a:27:ee:
         73:6f:89:82:3e:ea:80:cb:a9:8e:13:6d:61:4f:04:a5:d0:5d:
         cb:90:ed:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEvwI6aWpjP4FSt0mhXvkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTNiOWFjMGE0ODZiMDAzNzc2NWQ2MDVjOGIxYzgxMDQw
NDZmMGEwHhcNMjYxMDI4MjMwMTEyWhcNMjYxMDI5MjMwMTEyWjAzMTEwLwYDVQQD
Eyg0NWEyZGM2YmQxZmM3NzMwOWQxYjVjNzI1OGJkM2NlZDY0NmIzM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdE492Nm6Em30Ph42tu3hpNligYn
KN0XTrO88sjm513xZ0S8Q0hWq6p552BtL4j5vTkKEudllWh9KrDUbb3O7WtySOh2
dYs+qh3VeH4UtCDHK/S/OB4Ho5mUvbYMK/qOCn0X12mQWb9ljVah5VNU5WnQswbN
xOikFwV9vILawjwP60zeOeV6ec8HeQu3wUOGJlHd+bF5CjyhR8vYoBKKeK1IL20a
GiFbrN6YYH58FLQ1D8rTrLiK72owjLTBvfYfU1F8xywzpAKfM+Uz3j2bfNR6BHEy
GeST38aPHZ9VnAWs/mvv2b/jFubdCxJGew/C37xqwZpWFpS18ymV9sIuJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWi3GvR/HcwnRtccli9PO1kazPlMB8GA1UdIwQY
MBaAFEWTuawKSGsAN3ZdYFyLHIEEBG8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgt
NDNlNmJmZjlhMjVlLzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgtNDNlNmJmZjlhMjVl
LzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGPSuz1z
q02pHvo6m0wHgL3LrWeU5GRRObniYXpaycCu1kCHB3QMeG2QdG/9gUMkGCg2+xxM
EVNgKxTSdyrBnk+m9SCqhyhFz/Dq6EIy5NoDF1rDJIjO/JvWzkJGyFxzTPH6/E+N
zAqUK69p5yMzosiQUjFS8Mzqh34ItjH0/kGMWH+PE/bEHaIZ1xWPSP1z203IAZZs
nVOZnHO9EREdCUYos0S9nYkPX5PYcP5sJn8IzYMgo8ABqjjEJqSbhMqTwGVpbTxX
GCJwYh96RKqtLon8piRV97m2vGXBqiWaTC65R2liPS7VKifuc2+Jgj7qgMupjhNt
YU8EpdBdy5DtPg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:28 2026 by rpki-client