Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
File:                     zt0ju4440Jd0Yzyw20Llog1-F2c.mft (raw, json)
Hash identifier:          J/d5NTbnJB+gyw1XSlr7RA5da74l1UaPc6ZH9f4Oe3s=
Subject key identifier:   16:A0:D4:43:B5:C2:12:CF:99:98:5C:A0:AE:F5:BC:65:8C:C3:1A:9C
Authority key identifier: CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
Certificate issuer:       /CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Certificate serial:       01A17582DCCB41BA0B4A9A12B9D9CF2CC68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
Manifest number:          02E3
Signing time:             Mon 26 Oct 2026 00:01:12 +0000
Manifest this update:     Mon 26 Oct 2026 00:01:12 +0000
Manifest next update:     Tue 27 Oct 2026 00:01:12 +0000
Files and hashes:         1: B3sUFjmdNfw2Wbgl1lpAMuRHxqU.roa (hash: +ec5NyHhhZd9g1lzc179De1f1DaI7xtjRcD1vQ3XvWw=)
                          2: FpEkjvz9ExCU8WF_yZEuTynNxEk.roa (hash: 1Ak172v20VjTJ5IkMewnA1XPtCQFB64d4MBqUxG0hTA=)
                          3: MP8cv65ITY8cNWNWM9JIwSTr0Og.roa (hash: rx4izqKgskJfzl6CODgjsArLoXvxQVPJAAPmsXR/tZI=)
                          4: T1tgtUCN_6yknVPc0FROlkSXeiA.asa (hash: OeITU3oaHjkcmQ7640BzXmCV0DwpoQvHPoSTB6iKhi0=)
                          5: Xw3dQirRAOok3CTP82mGyXKPmok.asa (hash: aFLFSLfyBSfcQzE9nVtp1dDJF959Pdr2S4U/6m0srr8=)
                          6: zt0ju4440Jd0Yzyw20Llog1-F2c.crl (hash: r0A+KbO2RKdyK7alvR/fIjB9rqxfLsIIsh7oXTTZx+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:82:dc:cb:41:ba:0b:4a:9a:12:b9:d9:cf:2c:c6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
        Validity
            Not Before: Oct 26 00:01:12 2026 GMT
            Not After : Oct 27 00:01:12 2026 GMT
        Subject: CN=16a0d443b5c212cf99985ca0aef5bc658cc31a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:63:f3:6d:d5:d6:39:b7:0f:25:62:01:43:
                    03:0b:c9:68:cc:41:54:1f:4e:45:fa:78:a7:a6:c9:
                    52:ad:56:e4:7f:83:75:82:24:48:62:c1:21:1a:4e:
                    30:12:62:47:09:f9:d2:bb:58:77:7b:c9:d5:6b:2a:
                    3c:21:23:c5:2d:9e:94:ba:7f:8e:74:9e:c8:a0:03:
                    98:1d:9e:67:00:82:15:a3:71:2c:1d:30:6e:74:25:
                    75:0a:1c:52:56:d3:b1:b4:8e:f6:05:eb:23:c7:79:
                    fd:23:cf:c0:ad:d5:2a:fd:3d:6b:c4:fa:0d:59:98:
                    b1:46:1a:7e:26:55:4c:84:b3:ec:75:e1:6a:98:fc:
                    25:45:21:e9:c2:0f:b6:ac:33:33:e5:86:3b:ab:ed:
                    67:bd:67:d8:50:81:44:b9:b3:c6:a2:4c:94:7d:23:
                    ca:a5:f7:42:a5:51:cd:2d:0a:c3:3c:42:f0:c6:37:
                    d2:5e:b8:b1:59:d5:1b:2a:fc:47:0c:f7:bb:03:71:
                    67:5f:cb:7f:55:ac:d4:8d:a8:e7:60:37:95:ab:3a:
                    a4:81:cd:7a:db:e3:a8:7f:2d:74:1b:fb:5c:eb:21:
                    24:c1:21:02:1a:ec:d6:46:49:b1:7c:ae:5c:3b:b6:
                    1b:8b:ec:29:fe:9e:db:ee:ec:67:64:38:e5:23:fd:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:D4:43:B5:C2:12:CF:99:98:5C:A0:AE:F5:BC:65:8C:C3:1A:9C
            X509v3 Authority Key Identifier:
                keyid:CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:d1:8f:d7:a2:a0:c9:ca:5e:b2:c0:ea:56:53:49:42:89:
         75:da:03:ca:87:d4:cb:5d:19:fd:2f:4e:18:d5:7d:c4:bd:b1:
         f2:0f:83:8e:4a:2a:88:8b:37:7c:d6:6b:fc:96:c9:ca:d9:ad:
         d4:a5:3d:5e:43:c5:9b:81:ef:1b:4a:0c:30:90:55:68:8b:02:
         04:e7:5a:cb:2e:dc:73:86:33:70:9a:0a:5a:7f:e3:ac:6b:a0:
         af:05:d4:9d:1f:3f:52:e2:7c:18:b9:ae:d5:5b:0b:6c:03:bb:
         3d:d9:98:f8:60:fe:73:c3:53:bd:98:e4:18:5b:df:23:73:3c:
         4b:97:1a:36:bd:ab:ab:d5:4c:46:30:fa:fd:df:f1:56:70:37:
         d6:e9:a9:c1:87:67:d7:d8:8c:5c:eb:20:d1:76:46:f2:74:a3:
         55:f0:f4:ae:95:b8:95:33:0e:de:e1:46:6d:ba:27:91:bb:24:
         e2:2c:ca:e6:90:73:bc:f2:df:0d:28:7b:f8:d2:25:e3:df:0e:
         e1:16:f5:92:a8:f9:21:fd:f5:95:b9:d5:ea:10:04:b2:bd:3b:
         19:ff:d3:cb:6c:6a:b9:75:b3:80:da:6e:b4:95:c0:de:67:9a:
         7c:0f:47:7f:1e:7a:ba:5b:de:13:a8:99:06:ba:39:81:4c:39:
         a1:ee:7c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1gtzLQboLSpoSudnPLMaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZGQyM2JiOGUzOGQwOTc3NDYzM2NiMGRiNDJlNWEyMGQ3
ZTE3NjcwHhcNMjYxMDI2MDAwMTEyWhcNMjYxMDI3MDAwMTEyWjAzMTEwLwYDVQQD
EygxNmEwZDQ0M2I1YzIxMmNmOTk5ODVjYTBhZWY1YmM2NThjYzMxYTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Rj823V1jm3DyViAUMDC8lozEFU
H05F+ninpslSrVbkf4N1giRIYsEhGk4wEmJHCfnSu1h3e8nVayo8ISPFLZ6Uun+O
dJ7IoAOYHZ5nAIIVo3EsHTBudCV1ChxSVtOxtI72Besjx3n9I8/ArdUq/T1rxPoN
WZixRhp+JlVMhLPsdeFqmPwlRSHpwg+2rDMz5YY7q+1nvWfYUIFEubPGokyUfSPK
pfdCpVHNLQrDPELwxjfSXrixWdUbKvxHDPe7A3FnX8t/VazUjajnYDeVqzqkgc16
2+Oofy10G/tc6yEkwSECGuzWRkmxfK5cO7Ybi+wp/p7b7uxnZDjlI/0WmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBag1EO1whLPmZhcoK71vGWMwxqcMB8GA1UdIwQY
MBaAFM7dI7uOONCXdGM8sNtC5aINfhdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenQwanU0NDQwSmQwWXp5dzIwTGxvZzEtRjJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82YzA2MjItMjAwMC00ZTRlLWFhYzIt
ZjZiMDE4ZTdjODBhLzEvenQwanU0NDQwSmQwWXp5dzIwTGxvZzEtRjJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82YzA2MjItMjAwMC00ZTRlLWFhYzItZjZiMDE4ZTdjODBh
LzEvenQwanU0NDQwSmQwWXp5dzIwTGxvZzEtRjJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjbRj9ei
oMnKXrLA6lZTSUKJddoDyofUy10Z/S9OGNV9xL2x8g+DjkoqiIs3fNZr/JbJytmt
1KU9XkPFm4HvG0oMMJBVaIsCBOdayy7cc4YzcJoKWn/jrGugrwXUnR8/UuJ8GLmu
1VsLbAO7PdmY+GD+c8NTvZjkGFvfI3M8S5caNr2rq9VMRjD6/d/xVnA31umpwYdn
19iMXOsg0XZG8nSjVfD0rpW4lTMO3uFGbbonkbsk4izK5pBzvPLfDSh7+NIl498O
4Rb1kqj5If31lbnV6hAEsr07Gf/Ty2xquXWzgNputJXA3meafA9Hfx56ulveE6iZ
Bro5gUw5oe587g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 05:48:31 2026 by rpki-client