Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File:                     ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier:          ZPJa3//uRVBgXr/uRo6EsPYfjAZ7UQjMRx/nzCmNK7c=
Subject key identifier:   EC:D0:B3:5E:58:1A:A2:AE:59:CD:D8:DA:13:0B:95:89:F7:44:2A:B3
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer:       /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial:       01A08BD60FB081DA716D08E345FE7CF092C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number:          0E44
Signing time:             Thu 10 Sep 2026 15:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:56 +0000
Files and hashes:         1: 3FX3dROebXazZ9k_8-Lo5o1qkkI.roa (hash: iLVy4lChJ6R/aX19zh/vuVIS2qDiRo8xZfWhdwKLT/E=)
                          2: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: fY16YGoYnIeerWrNij7lYnaGzFgnm0rYMhKaKblqsEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:0f:b0:81:da:71:6d:08:e3:45:fe:7c:f0:92:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
        Validity
            Not Before: Sep 10 15:00:56 2026 GMT
            Not After : Sep 11 15:00:56 2026 GMT
        Subject: CN=ecd0b35e581aa2ae59cdd8da130b9589f7442ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:c3:4c:19:90:00:d9:2f:df:99:bf:41:c4:
                    c8:4f:e9:5b:f8:4d:02:09:c3:2b:67:90:fd:7f:e6:
                    61:7c:bd:9b:ab:ca:64:0f:38:d1:45:11:67:3c:57:
                    b4:2b:52:ca:e6:8d:4a:b7:6f:2e:cc:8b:f5:8f:4a:
                    bb:7f:10:83:67:4c:9e:9d:ac:58:b1:39:0e:85:4d:
                    a2:7c:fd:35:71:4d:67:76:5a:d5:96:65:7e:2d:31:
                    19:34:18:7e:5d:39:be:f8:ed:9c:d7:ce:bd:51:7c:
                    f5:e8:e5:83:54:a4:15:69:09:6a:91:73:7f:ca:80:
                    d4:4d:3f:e0:a4:fa:a8:37:00:d4:72:38:7d:cd:a6:
                    e4:69:cd:7b:fe:47:9a:bc:5e:72:e6:77:80:a9:b7:
                    58:1c:09:96:d3:65:f7:f1:d8:b6:73:02:c1:ea:f1:
                    35:05:73:c0:65:3d:e1:0b:8e:db:ea:7f:da:01:29:
                    ae:2d:f5:61:b1:23:c4:e8:15:d6:da:9e:be:3d:7b:
                    09:f4:df:c6:20:31:6b:17:78:0c:11:1b:f4:3d:8a:
                    55:06:71:c8:64:da:0e:72:62:8f:a3:84:b7:51:53:
                    8c:59:66:98:28:1a:59:a3:c1:45:52:48:91:ec:04:
                    bf:97:15:3c:4e:98:e1:93:b8:6b:dc:59:57:b2:71:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D0:B3:5E:58:1A:A2:AE:59:CD:D8:DA:13:0B:95:89:F7:44:2A:B3
            X509v3 Authority Key Identifier:
                keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1a:68:41:e5:3b:81:d3:ed:bf:81:f7:0b:3d:49:f6:01:31:
         ec:d7:a7:d0:ca:65:4b:83:15:7b:94:19:0a:54:09:49:be:50:
         6e:46:1e:a6:67:63:85:69:b2:57:03:f1:07:32:e4:94:2f:ce:
         61:be:96:a8:67:b7:8e:3e:77:a3:f5:48:f0:a5:fc:f8:7e:df:
         52:4c:9b:66:bc:8b:1f:f3:ac:cf:65:ce:a8:d8:2d:46:37:66:
         0a:99:99:37:40:38:18:7a:c2:96:9b:21:33:3e:74:e0:09:7d:
         2f:29:67:3c:69:25:c5:ed:ae:a6:33:d9:fb:95:01:b7:6a:ef:
         06:c6:8e:b6:a3:2b:22:e5:97:f0:1a:a5:18:47:ba:21:8d:b1:
         c6:86:3a:15:96:14:29:36:aa:1f:76:dd:51:42:14:1a:35:68:
         fb:e2:03:32:f3:16:84:0a:27:36:87:ae:9d:12:04:52:2c:39:
         98:18:41:7a:5b:fc:e2:6c:ea:55:81:70:28:ba:27:ef:e9:1a:
         1d:0d:fe:7d:bb:c1:2d:9c:e7:b3:d1:85:54:4f:d7:28:2b:d8:
         9b:82:0f:2a:07:da:93:e3:83:ed:55:b5:31:9e:2a:a1:85:73:
         9e:3a:3b:15:b5:1b:40:fc:91:71:6d:97:75:70:cd:4f:9a:23:
         d4:13:50:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1g+wgdpxbQjjRf588JLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj
OWQ1MWYwHhcNMjYwOTEwMTUwMDU2WhcNMjYwOTExMTUwMDU2WjAzMTEwLwYDVQQD
EyhlY2QwYjM1ZTU4MWFhMmFlNTljZGQ4ZGExMzBiOTU4OWY3NDQyYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xjDTBmQANkv35m/QcTIT+lb+E0C
CcMrZ5D9f+ZhfL2bq8pkDzjRRRFnPFe0K1LK5o1Kt28uzIv1j0q7fxCDZ0yenaxY
sTkOhU2ifP01cU1ndlrVlmV+LTEZNBh+XTm++O2c1869UXz16OWDVKQVaQlqkXN/
yoDUTT/gpPqoNwDUcjh9zabkac17/keavF5y5neAqbdYHAmW02X38di2cwLB6vE1
BXPAZT3hC47b6n/aASmuLfVhsSPE6BXW2p6+PXsJ9N/GIDFrF3gMERv0PYpVBnHI
ZNoOcmKPo4S3UVOMWWaYKBpZo8FFUkiR7AS/lxU8Tpjhk7hr3FlXsnERAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzQs15YGqKuWc3Y2hMLlYn3RCqzMB8GA1UdIwQY
MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt
NzVkNmJlNGU1YzM3LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3
LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBpoQeU7
gdPtv4H3Cz1J9gEx7Nen0MplS4MVe5QZClQJSb5QbkYepmdjhWmyVwPxBzLklC/O
Yb6WqGe3jj53o/VI8KX8+H7fUkybZryLH/Osz2XOqNgtRjdmCpmZN0A4GHrClpsh
Mz504Al9LylnPGklxe2upjPZ+5UBt2rvBsaOtqMrIuWX8BqlGEe6IY2xxoY6FZYU
KTaqH3bdUUIUGjVo++IDMvMWhAonNoeunRIEUiw5mBhBelv84mzqVYFwKLon7+ka
HQ3+fbvBLZzns9GFVE/XKCvYm4IPKgfak+OD7VW1MZ4qoYVznjo7FbUbQPyRcW2X
dXDNT5oj1BNQtw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:35 2026 by rpki-client