Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
File:                     zqWzQQw5ccQthJmW1t5usSt-_7A.mft (raw, json)
Hash identifier:          W6Trfb/fBW0p1eNtgWarTr7LBqjIwHK3pYg0TLO3TQc=
Subject key identifier:   9D:DB:2C:E2:55:8F:ED:A1:B7:3E:C6:B2:DF:62:D0:7B:C1:32:74:AE
Authority key identifier: CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0
Certificate issuer:       /CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
Certificate serial:       01A0E73F5221305BACEAD57BBBE73FFE4A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
Manifest number:          F1
Signing time:             Mon 28 Sep 2026 09:01:21 +0000
Manifest this update:     Mon 28 Sep 2026 09:01:21 +0000
Manifest next update:     Tue 29 Sep 2026 09:01:21 +0000
Files and hashes:         1: 8HP5Xq8lrtqkn5h201-7okkzPq4.roa (hash: WP8g6JdUNh8+NUEE1ptFTokCNu2rtnQfuXAaBhtEymc=)
                          2: kGfuExTz52-sB1eMkLDsaAGePpw.asa (hash: z47BctNwAk2POTWeuHzhRwzuq2rLlRzJsQDmN61BdBM=)
                          3: kd2W9NlpugwG6NvnSXOzTzW0oQ8.roa (hash: Br98Z6at7igokOIBqZeHS6qV6L6XUe/YkPKiEMU2Ipw=)
                          4: zqWzQQw5ccQthJmW1t5usSt-_7A.crl (hash: fZxK6mEKQCpP5rcxvymIp0ozD9x3v0YKBVd9ao90uT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:52:21:30:5b:ac:ea:d5:7b:bb:e7:3f:fe:4a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
        Validity
            Not Before: Sep 28 09:01:21 2026 GMT
            Not After : Sep 29 09:01:21 2026 GMT
        Subject: CN=9ddb2ce2558feda1b73ec6b2df62d07bc13274ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:86:24:95:88:e4:af:8f:5e:73:cc:7b:18:21:
                    30:14:a8:db:94:57:2c:46:dc:9e:23:d5:69:4d:8c:
                    1b:24:64:9a:c3:15:77:d1:47:a2:66:b2:fd:fc:35:
                    73:11:0a:4f:a4:30:4e:3a:f0:0a:3c:f6:94:b2:db:
                    35:29:65:62:92:ff:02:44:00:a2:a4:97:9a:e0:c1:
                    f9:e4:81:a5:61:0f:9a:ed:fa:d8:03:4c:a2:84:f8:
                    d5:61:53:00:65:ba:2f:16:02:45:b4:27:5a:a8:bb:
                    9e:ad:d3:73:45:a3:98:3b:08:5b:32:79:06:05:47:
                    a9:f7:2b:da:85:d5:a6:02:4a:5a:66:a5:b2:c0:32:
                    de:da:f3:24:6d:29:cc:45:a9:66:b1:15:90:b3:c0:
                    74:1c:a1:9e:44:9f:ae:d2:ed:62:8a:35:2c:7c:b4:
                    56:ee:1b:03:be:19:6a:e8:22:e6:bf:42:50:3d:5e:
                    4a:a3:0c:66:b0:8b:6f:b0:35:df:fb:3e:93:8e:39:
                    27:c5:76:14:17:cb:6e:0a:49:a7:bb:51:3e:8c:8d:
                    ee:70:c0:ea:c7:cc:d5:a5:c3:bc:47:6d:55:b5:3e:
                    84:e4:74:54:3b:a2:81:da:95:1b:8c:ee:29:89:d8:
                    b5:5b:6b:5e:c4:f2:2c:d1:0d:d0:f4:4d:aa:6e:0f:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DB:2C:E2:55:8F:ED:A1:B7:3E:C6:B2:DF:62:D0:7B:C1:32:74:AE
            X509v3 Authority Key Identifier:
                keyid:CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:26:06:fe:70:87:c9:45:9a:54:11:82:66:3f:61:92:c6:91:
         40:0c:96:85:40:d9:e6:9b:20:b3:07:2f:56:61:35:a3:a0:48:
         c0:1d:36:9c:8f:35:2e:95:cc:07:46:a5:b6:aa:f2:b4:3b:18:
         0f:16:4e:5e:18:eb:40:0a:e2:81:3d:b9:69:a6:ca:97:67:b5:
         af:26:18:32:6e:24:4e:37:df:35:8e:bf:23:2c:9f:d9:a3:e5:
         d9:7f:b0:6e:46:70:1b:13:18:b3:e8:fd:e5:f4:09:2c:b1:0c:
         e4:e8:da:35:1c:1d:e5:40:4c:13:f3:ed:89:7a:91:e7:32:89:
         40:7b:ef:75:90:61:bd:e5:da:20:3f:1a:c8:ab:4d:29:62:55:
         32:38:a7:7d:c6:c9:39:33:0e:d4:6f:e6:21:47:5a:db:46:5f:
         21:17:f8:37:54:49:09:01:32:26:c1:8e:20:ce:c4:53:95:3d:
         dc:dd:0e:8c:3e:5c:2c:d1:31:45:45:72:18:b9:3a:1b:2e:2e:
         5f:7f:38:dc:a5:97:41:5a:5e:c9:69:d1:17:dc:2b:5a:42:93:
         a8:e5:ae:b8:61:b7:a9:03:54:13:dc:c9:87:dc:c3:c5:bc:65:
         74:71:9c:06:1b:eb:e8:d3:13:28:3e:b3:46:be:6f:4c:f9:0c:
         a3:d6:6e:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnP1IhMFus6tV7u+c//kqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTViMzQxMGMzOTcxYzQyZDg0OTk5NmQ2ZGU2ZWIxMmI3
ZWZmYjAwHhcNMjYwOTI4MDkwMTIxWhcNMjYwOTI5MDkwMTIxWjAzMTEwLwYDVQQD
Eyg5ZGRiMmNlMjU1OGZlZGExYjczZWM2YjJkZjYyZDA3YmMxMzI3NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YYklYjkr49ec8x7GCEwFKjblFcs
RtyeI9VpTYwbJGSawxV30UeiZrL9/DVzEQpPpDBOOvAKPPaUsts1KWVikv8CRACi
pJea4MH55IGlYQ+a7frYA0yihPjVYVMAZbovFgJFtCdaqLuerdNzRaOYOwhbMnkG
BUep9yvahdWmAkpaZqWywDLe2vMkbSnMRalmsRWQs8B0HKGeRJ+u0u1iijUsfLRW
7hsDvhlq6CLmv0JQPV5KowxmsItvsDXf+z6TjjknxXYUF8tuCkmnu1E+jI3ucMDq
x8zVpcO8R21VtT6E5HRUO6KB2pUbjO4pidi1W2texPIs0Q3Q9E2qbg8cPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3bLOJVj+2htz7Gst9i0HvBMnSuMB8GA1UdIwQY
MBaAFM6ls0EMOXHELYSZltbebrErfv+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFXelFRdzVjY1F0aEptVzF0NXVzU3QtXzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYt
Zjc4YzIyMDY1NzVhLzEvenFXelFRdzVjY1F0aEptVzF0NXVzU3QtXzdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYtZjc4YzIyMDY1NzVh
LzEvenFXelFRdzVjY1F0aEptVzF0NXVzU3QtXzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSYG/nCH
yUWaVBGCZj9hksaRQAyWhUDZ5psgswcvVmE1o6BIwB02nI81LpXMB0altqrytDsY
DxZOXhjrQArigT25aabKl2e1ryYYMm4kTjffNY6/Iyyf2aPl2X+wbkZwGxMYs+j9
5fQJLLEM5OjaNRwd5UBME/PtiXqR5zKJQHvvdZBhveXaID8ayKtNKWJVMjinfcbJ
OTMO1G/mIUda20ZfIRf4N1RJCQEyJsGOIM7EU5U93N0OjD5cLNExRUVyGLk6Gy4u
X3843KWXQVpeyWnRF9wrWkKTqOWuuGG3qQNUE9zJh9zDxbxldHGcBhvr6NMTKD6z
Rr5vTPkMo9ZuUQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:35 2026 by rpki-client