Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File:                     1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier:          KR5xfSrCSFJDQgy9VQVSSDFSC5FUn2LpLC2nEGix998=
Subject key identifier:   26:75:0C:64:60:66:62:C0:32:F6:3B:26:5F:EF:9F:7E:0F:D7:6B:31
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer:       /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial:       01A17DE211358C6B660E62DD3609DB92EE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number:          013F
Signing time:             Tue 27 Oct 2026 15:02:09 +0000
Manifest this update:     Tue 27 Oct 2026 15:02:09 +0000
Manifest next update:     Wed 28 Oct 2026 15:02:09 +0000
Files and hashes:         1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: ovdaK0zZl5myvJyyE38BoZ3TYiyzzQqGW0GTFYkaUjM=)
                          2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e2:11:35:8c:6b:66:0e:62:dd:36:09:db:92:ee:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
        Validity
            Not Before: Oct 27 15:02:09 2026 GMT
            Not After : Oct 28 15:02:09 2026 GMT
        Subject: CN=26750c64606662c032f63b265fef9f7e0fd76b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:59:17:77:6f:d5:69:8f:42:53:78:6e:5e:
                    65:b6:ed:d9:3e:e6:aa:0f:0a:61:c0:5c:b7:15:a4:
                    75:5f:07:a5:ca:22:1f:cb:a9:be:75:ea:90:20:d9:
                    b8:e8:bf:4d:59:bf:8f:a3:41:ba:31:4d:6d:20:9f:
                    9d:02:44:4e:e8:c9:17:fd:89:60:09:05:aa:fe:6b:
                    0c:ea:11:b5:c3:44:99:f7:e4:8e:cc:a3:49:ae:0e:
                    9b:cc:0c:db:d7:0f:78:74:4a:d9:ed:1e:25:aa:6f:
                    ff:ab:0a:ad:b9:50:d9:d6:a0:30:91:7f:d2:07:8a:
                    fb:fe:29:c0:d9:6e:aa:13:2d:83:d2:6a:2f:e7:de:
                    2c:ad:0e:68:a8:a3:25:79:ff:f3:9d:14:0d:e8:fc:
                    fa:e9:23:d4:ea:a1:fd:ac:84:48:9f:ca:81:bb:f0:
                    00:7f:63:48:7b:2f:0d:3d:a3:8e:5c:01:66:74:ec:
                    f3:47:e5:25:93:8c:dc:64:47:f0:e5:5c:c8:8c:a7:
                    c5:c4:02:fc:50:cc:06:c7:ad:be:38:8a:58:39:62:
                    d3:e6:fb:27:f8:21:cf:1a:68:88:0c:71:cb:6a:fa:
                    0b:66:54:e9:e5:9d:8b:2a:72:85:64:44:d1:74:9a:
                    f4:93:ca:45:4c:64:5f:8d:42:06:83:1d:dd:06:70:
                    7b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:0C:64:60:66:62:C0:32:F6:3B:26:5F:EF:9F:7E:0F:D7:6B:31
            X509v3 Authority Key Identifier:
                keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:a9:39:be:15:85:2f:bb:e0:e9:4e:d5:27:fb:08:de:f2:
         26:3e:90:4b:85:b8:19:f5:db:3b:0c:73:d0:f0:51:88:a3:59:
         7b:fa:00:8a:49:e3:5c:39:43:a0:c8:04:42:24:2a:e6:dd:e4:
         4a:bf:a7:40:a1:64:52:34:0c:35:74:b5:b1:af:f7:1f:db:c9:
         34:42:b0:ee:33:31:38:7c:01:e4:6e:bf:85:c1:d2:8b:74:f4:
         62:bb:70:6d:4d:75:be:2a:f2:b1:27:7a:7d:90:34:b7:b9:4d:
         d6:d5:bd:4f:9f:08:df:c2:4f:db:45:ab:9b:bc:e1:dc:26:c1:
         01:30:b9:e6:88:8a:1c:bd:84:6e:78:5a:26:ca:15:b9:aa:64:
         d1:6c:5b:6f:ae:d5:2d:be:a1:08:6b:2b:0c:1d:7d:82:83:24:
         38:de:1c:d5:6b:f5:f8:1f:ae:44:1f:0b:c2:d4:93:9f:80:e8:
         26:98:5d:49:a3:53:d4:6d:ee:55:f4:19:5e:c3:d6:77:5e:a2:
         7a:fa:8d:25:8e:ab:03:db:5d:ea:e2:cc:c2:c2:64:b0:3d:dd:
         10:2c:82:6b:ac:b8:71:2a:a5:43:2d:bf:79:1d:12:98:62:12:
         a4:4d:64:15:85:60:6e:da:3d:60:a9:ba:76:06:44:a0:b1:ae:
         2c:2f:96:de
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaF94hE1jGtmDmLdNgnbku4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWIyOGY4Zjk3ZGYwOWFjNGZkNzcwMWU5MzMwZDRmNDVi
MWUyNWUwHhcNMjYxMDI3MTUwMjA5WhcNMjYxMDI4MTUwMjA5WjAzMTEwLwYDVQQD
EygyNjc1MGM2NDYwNjY2MmMwMzJmNjNiMjY1ZmVmOWY3ZTBmZDc2YjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlRZF3dv1WmPQlN4bl5ltu3ZPuaq
DwphwFy3FaR1XwelyiIfy6m+deqQINm46L9NWb+Po0G6MU1tIJ+dAkRO6MkX/Ylg
CQWq/msM6hG1w0SZ9+SOzKNJrg6bzAzb1w94dErZ7R4lqm//qwqtuVDZ1qAwkX/S
B4r7/inA2W6qEy2D0mov594srQ5oqKMlef/znRQN6Pz66SPU6qH9rIRIn8qBu/AA
f2NIey8NPaOOXAFmdOzzR+Ulk4zcZEfw5VzIjKfFxAL8UMwGx62+OIpYOWLT5vsn
+CHPGmiIDHHLavoLZlTp5Z2LKnKFZETRdJr0k8pFTGRfjUIGgx3dBnB7IwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCZ1DGRgZmLAMvY7Jl/vn34P12sxMB8GA1UdIwQY
MBaAFPmbKPj5ffCaxP13AekzDU9FseJeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ac28tUGw5OEpyRV9YY0I2VE1OVDBXeDRsNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMmY1ZjIyLTc0MzktNDIwOC04YjM5
LTdkMTFmY2YxNzEyMy8xLzEtWnNvLVBsOThKckVfWGNCNlRNTlQwV3g0bDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc3LzJmNWYyMi03NDM5LTQyMDgtOGIzOS03ZDExZmNmMTcx
MjMvMS8xLVpzby1QbDk4SnJFX1hjQjZUTU5UMFd4NGw0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbyp
Ob4VhS+74OlO1Sf7CN7yJj6QS4W4GfXbOwxz0PBRiKNZe/oAiknjXDlDoMgEQiQq
5t3kSr+nQKFkUjQMNXS1sa/3H9vJNEKw7jMxOHwB5G6/hcHSi3T0YrtwbU11viry
sSd6fZA0t7lN1tW9T58I38JP20Wrm7zh3CbBATC55oiKHL2EbnhaJsoVuapk0Wxb
b67VLb6hCGsrDB19goMkON4c1Wv1+B+uRB8LwtSTn4DoJphdSaNT1G3uVfQZXsPW
d16ievqNJY6rA9td6uLMwsJksD3dECyCa6y4cSqlQy2/eR0SmGISpE1kFYVgbto9
YKm6dgZEoLGuLC+W3g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:37 2026 by rpki-client