Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          aExPEWlrCPbsSlvcizYvToUWCbKW4sQ/BAbvmedv3cU=
Subject key identifier:   EA:B1:76:88:6E:74:E3:16:A5:89:10:FD:BD:11:05:A3:C6:44:87:4B
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       01A1046DD17927BB0A88988C76D0850D131E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          12A0
Signing time:             Sun 04 Oct 2026 01:01:08 +0000
Manifest this update:     Sun 04 Oct 2026 01:01:08 +0000
Manifest next update:     Mon 05 Oct 2026 01:01:08 +0000
Files and hashes:         1: 690a8CHN-4Q9taUIdxCJ6j9_Nq0.asa (hash: PpmrZ0y4OmHYRlFtG+Q32uLuVImrpYxd2geJcOWhBFs=)
                          2: JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa (hash: Fkerbuxc2uV9f5DPxNh2dXMhGEoLKCOWYFOXUdDcPOI=)
                          3: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: +xZsxxlyOTnjyO2CMt5kj+MPuPrE+6Me1lNCx5ratIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:6d:d1:79:27:bb:0a:88:98:8c:76:d0:85:0d:13:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: Oct  4 01:01:08 2026 GMT
            Not After : Oct  5 01:01:08 2026 GMT
        Subject: CN=eab176886e74e316a58910fdbd1105a3c644874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:0b:e7:36:36:e8:38:1d:7a:6d:fe:ea:7f:
                    dd:28:9a:8e:90:e4:36:cd:2d:6a:ec:86:10:f5:cf:
                    52:89:ba:d8:af:10:41:19:d6:27:ed:37:dd:80:e1:
                    8b:23:ec:d4:04:35:b6:34:fa:8b:9b:0b:f2:2f:52:
                    0b:5a:4f:85:0f:f5:cd:ad:8e:c7:a5:a6:c3:4b:01:
                    9d:45:68:02:b1:9a:c2:63:0a:fc:66:6b:e2:05:95:
                    a2:26:fe:e8:01:42:d6:47:e2:f3:e3:80:95:ca:d9:
                    b1:ee:68:8c:35:ec:3e:bb:d6:05:7d:dc:0e:13:c0:
                    5f:f9:88:4e:26:45:79:48:63:0f:c7:cc:82:24:c7:
                    f9:b5:56:c9:5a:92:a2:03:a4:52:37:43:9e:d9:81:
                    41:75:ef:df:ec:c3:13:bf:9d:18:6e:bd:02:fd:89:
                    66:e8:c9:21:05:0c:b8:ea:74:c9:c0:c8:21:7c:b7:
                    73:37:99:7e:3c:c3:56:e3:e6:64:76:3e:39:a1:e6:
                    c8:ba:a6:2e:db:e4:a7:83:ed:f7:e9:ba:f9:48:3d:
                    ee:40:68:63:83:f9:b6:16:63:7f:34:9d:72:1b:ee:
                    58:bf:fb:db:ea:55:7c:3d:50:0d:48:0b:8c:7c:06:
                    d4:77:eb:cb:cd:df:81:df:af:e6:4f:7f:c2:45:ee:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B1:76:88:6E:74:E3:16:A5:89:10:FD:BD:11:05:A3:C6:44:87:4B
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:87:0d:c1:51:3f:15:49:4e:a5:0a:1b:e1:66:96:4a:93:d7:
         67:6d:db:e8:10:6c:4f:2a:00:d2:3c:e1:9d:e5:16:a6:48:13:
         09:1c:75:2b:f9:77:6e:b9:fb:3d:ca:26:ec:72:fc:84:86:d1:
         54:5c:8f:26:4f:14:84:4a:f4:dd:be:d5:57:29:a0:3d:16:f3:
         7b:6e:b9:3a:22:92:98:f3:3d:20:5b:0e:ea:5a:5a:3b:21:68:
         bb:8a:89:2c:44:c0:0b:2f:ba:df:43:41:45:21:ff:fa:86:08:
         50:80:55:02:f6:92:cc:d3:72:79:b9:86:76:f1:38:44:51:32:
         3f:ef:e1:57:b1:21:8e:27:db:b2:81:f0:24:e1:26:eb:64:bf:
         93:6e:bb:0f:d9:d4:b9:67:cb:a4:d6:12:f1:cc:dd:f2:bb:41:
         b5:47:57:f0:ed:c7:4b:b1:ad:c6:d9:d1:9a:7d:25:9f:4f:e6:
         c6:33:23:09:52:4a:e4:f1:f4:2f:2f:b5:fd:b5:50:0a:5b:73:
         73:6b:c5:29:90:7b:b8:71:70:94:dd:24:1c:a9:fe:2a:72:11:
         39:f4:a7:0e:2e:0c:4d:99:bc:a6:ad:6b:a6:50:9d:f8:24:4a:
         dc:d5:0a:8c:7a:5b:fc:06:1f:70:eb:30:f4:ac:cd:64:e9:83:
         3b:a1:60:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEbdF5J7sKiJiMdtCFDRMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh
MzUzODcwHhcNMjYxMDA0MDEwMTA4WhcNMjYxMDA1MDEwMTA4WjAzMTEwLwYDVQQD
EyhlYWIxNzY4ODZlNzRlMzE2YTU4OTEwZmRiZDExMDVhM2M2NDQ4NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FQL5zY26Dgdem3+6n/dKJqOkOQ2
zS1q7IYQ9c9SibrYrxBBGdYn7TfdgOGLI+zUBDW2NPqLmwvyL1ILWk+FD/XNrY7H
pabDSwGdRWgCsZrCYwr8ZmviBZWiJv7oAULWR+Lz44CVytmx7miMNew+u9YFfdwO
E8Bf+YhOJkV5SGMPx8yCJMf5tVbJWpKiA6RSN0Oe2YFBde/f7MMTv50Ybr0C/Ylm
6MkhBQy46nTJwMghfLdzN5l+PMNW4+Zkdj45oebIuqYu2+Sng+336br5SD3uQGhj
g/m2FmN/NJ1yG+5Yv/vb6lV8PVANSAuMfAbUd+vLzd+B36/mT3/CRe4ucwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqxdohudOMWpYkQ/b0RBaPGRIdLMB8GA1UdIwQY
MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt
ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh
LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcocNwVE/
FUlOpQob4WaWSpPXZ23b6BBsTyoA0jzhneUWpkgTCRx1K/l3brn7Pcom7HL8hIbR
VFyPJk8UhEr03b7VVymgPRbze265OiKSmPM9IFsO6lpaOyFou4qJLETACy+630NB
RSH/+oYIUIBVAvaSzNNyebmGdvE4RFEyP+/hV7EhjifbsoHwJOEm62S/k267D9nU
uWfLpNYS8czd8rtBtUdX8O3HS7GtxtnRmn0ln0/mxjMjCVJK5PH0Ly+1/bVQCltz
c2vFKZB7uHFwlN0kHKn+KnIROfSnDi4MTZm8pq1rplCd+CRK3NUKjHpb/AYfcOsw
9KzNZOmDO6FgcQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 05:40:24 2026 by rpki-client