Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File:                     RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier:          fFxYN7YdujJQ3ieYMdByK9GeGcljm37H/XmPFuD2UgM=
Subject key identifier:   57:7D:A3:30:51:F8:90:43:2B:9A:5D:55:C9:9E:E7:C3:34:93:1F:82
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer:       /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial:       01A15B8C1B4712A312BBB0491C02055BD564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number:          133A
Signing time:             Tue 20 Oct 2026 23:01:10 +0000
Manifest this update:     Tue 20 Oct 2026 23:01:10 +0000
Manifest next update:     Wed 21 Oct 2026 23:01:10 +0000
Files and hashes:         1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: kHXIx4rOCfo+a1C8yJ7Icx2UJUmHH8G7QaGCNrkoyEk=)
                          2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:8c:1b:47:12:a3:12:bb:b0:49:1c:02:05:5b:d5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
        Validity
            Not Before: Oct 20 23:01:10 2026 GMT
            Not After : Oct 21 23:01:10 2026 GMT
        Subject: CN=577da33051f890432b9a5d55c99ee7c334931f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:20:6a:e2:35:d2:a7:ba:58:e4:30:07:f8:
                    a4:0d:66:e7:43:75:2b:ea:8f:be:1e:92:c0:8d:ff:
                    0d:01:54:df:2b:a1:3d:51:93:96:c5:e1:e9:c3:53:
                    13:04:e6:b0:a3:9d:d1:e4:04:b5:f4:ea:22:9d:8f:
                    c3:05:ed:dc:e5:95:28:4c:c9:9f:b4:77:71:a2:34:
                    60:e8:1f:b6:40:8d:f3:15:b3:54:76:46:61:3a:29:
                    88:43:32:d7:a1:3c:40:89:7b:d7:92:3e:4f:a4:05:
                    a7:ca:fd:72:e8:50:59:24:b6:95:d6:93:1b:db:6e:
                    97:f8:e0:1c:ad:1e:7e:79:3c:ee:21:14:45:97:47:
                    2e:f0:df:79:f8:8b:58:a2:c8:a6:93:6b:0a:1c:a0:
                    93:13:c5:ac:db:a9:de:15:96:54:1f:ca:92:8e:b0:
                    ad:e2:7a:00:d5:5f:c1:c0:92:73:de:3f:32:5c:a5:
                    0e:f8:dc:c4:fc:b0:0e:d3:ca:01:5e:9f:6b:88:ea:
                    44:dd:10:4c:ce:3a:b2:ed:f1:66:1a:f0:5f:54:10:
                    ce:84:9f:96:7e:0b:ac:84:42:b4:00:8a:53:01:26:
                    3f:d0:e5:bf:42:52:1f:5f:b5:44:86:3d:2b:03:ad:
                    b1:b7:c1:89:d1:3d:ad:6e:a8:ff:1b:46:16:1d:b4:
                    81:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7D:A3:30:51:F8:90:43:2B:9A:5D:55:C9:9E:E7:C3:34:93:1F:82
            X509v3 Authority Key Identifier:
                keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:db:3c:9b:88:1a:f0:bf:36:6d:97:74:0c:1c:ce:e1:42:81:
         5b:e9:03:b6:ed:07:9c:a5:cf:37:bf:e4:35:39:75:75:d6:a9:
         16:66:b4:97:c7:39:49:cd:29:69:fb:f6:ee:4d:1c:d5:c2:fe:
         63:62:41:59:d9:4d:f4:ac:8c:43:88:5a:33:d4:d1:1a:32:82:
         63:7f:ae:f4:1e:f6:25:d4:f5:0e:d0:26:1c:21:e6:51:1e:c2:
         f1:47:a5:8d:c5:e2:23:b0:d3:d1:01:04:d7:c0:15:55:bc:e1:
         04:1b:76:d5:27:29:e8:11:4e:46:0f:68:99:ca:5b:ec:88:db:
         5a:56:01:35:f4:2b:b6:dd:7b:52:2f:44:3e:f3:0b:67:4b:a6:
         a6:91:47:72:0d:11:a8:37:fd:0b:6a:90:d4:59:75:44:c3:b6:
         c4:94:77:b4:55:e4:1b:01:d0:9a:4f:49:c4:92:dc:ee:5f:5b:
         67:7f:23:8e:82:fe:36:b2:d0:aa:bc:bb:08:9a:4f:7f:6c:ec:
         f4:78:b7:6b:aa:a5:07:94:8d:6b:04:b0:74:9c:62:7f:31:73:
         64:63:1c:21:9f:e6:79:88:37:d3:8a:81:85:09:53:be:94:d2:
         23:36:ee:42:b8:2f:99:d1:76:1b:4f:e3:2e:1f:5e:bf:87:d7:
         08:a4:99:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFbjBtHEqMSu7BJHAIFW9VkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli
YzA1YTcwHhcNMjYxMDIwMjMwMTEwWhcNMjYxMDIxMjMwMTEwWjAzMTEwLwYDVQQD
Eyg1NzdkYTMzMDUxZjg5MDQzMmI5YTVkNTVjOTllZTdjMzM0OTMxZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPcgauI10qe6WOQwB/ikDWbnQ3Ur
6o++HpLAjf8NAVTfK6E9UZOWxeHpw1MTBOawo53R5AS19OoinY/DBe3c5ZUoTMmf
tHdxojRg6B+2QI3zFbNUdkZhOimIQzLXoTxAiXvXkj5PpAWnyv1y6FBZJLaV1pMb
226X+OAcrR5+eTzuIRRFl0cu8N95+ItYosimk2sKHKCTE8Ws26neFZZUH8qSjrCt
4noA1V/BwJJz3j8yXKUO+NzE/LAO08oBXp9riOpE3RBMzjqy7fFmGvBfVBDOhJ+W
fgushEK0AIpTASY/0OW/QlIfX7VEhj0rA62xt8GJ0T2tbqj/G0YWHbSBmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd9ozBR+JBDK5pdVcme58M0kx+CMB8GA1UdIwQY
MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt
MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2
LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9s8m4ga
8L82bZd0DBzO4UKBW+kDtu0HnKXPN7/kNTl1ddapFma0l8c5Sc0pafv27k0c1cL+
Y2JBWdlN9KyMQ4haM9TRGjKCY3+u9B72JdT1DtAmHCHmUR7C8UeljcXiI7DT0QEE
18AVVbzhBBt21Scp6BFORg9omcpb7IjbWlYBNfQrtt17Ui9EPvMLZ0umppFHcg0R
qDf9C2qQ1Fl1RMO2xJR3tFXkGwHQmk9JxJLc7l9bZ38jjoL+NrLQqry7CJpPf2zs
9Hi3a6qlB5SNawSwdJxifzFzZGMcIZ/meYg304qBhQlTvpTSIzbuQrgvmdF2G0/j
Lh9ev4fXCKSZ3w==
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:28:53 2026 by rpki-client