Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File:                     zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier:          wkuXO19UrujWKJq/sz9/n3Q/cP3zdHt9N925Wch5lps=
Subject key identifier:   7A:FC:5C:1A:23:DE:1E:00:07:0B:A5:8B:B6:26:48:AA:DF:C1:E6:90
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer:       /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial:       01A1220A03F8CDC7003BFFF6AEA17F6894CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number:          0A3C
Signing time:             Fri 09 Oct 2026 19:00:44 +0000
Manifest this update:     Fri 09 Oct 2026 19:00:44 +0000
Manifest next update:     Sat 10 Oct 2026 19:00:44 +0000
Files and hashes:         1: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: Ihw/iGp4pbOhqSPbFtdFWuScrfmy5sZssuX3WbDgxp0=)
                          2: zyPqIwgvyXC9lIUoG61mB6n09UU.roa (hash: vO04NStXDDqi7y92fry/H4qNWdoUZgsfcjDUmEnQqDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:0a:03:f8:cd:c7:00:3b:ff:f6:ae:a1:7f:68:94:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
        Validity
            Not Before: Oct  9 19:00:44 2026 GMT
            Not After : Oct 10 19:00:44 2026 GMT
        Subject: CN=7afc5c1a23de1e00070ba58bb62648aadfc1e690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:16:9f:ce:db:31:5d:51:e1:c8:10:79:63:d2:
                    e1:9e:8a:23:df:3c:ea:2d:2e:6f:2d:37:a3:14:02:
                    87:8c:b5:40:74:b4:2d:f8:70:5d:c7:cf:ba:b7:fc:
                    ea:01:d7:ba:6b:76:57:f0:7d:c5:58:b7:20:9d:ba:
                    7e:ea:e1:19:a8:7f:34:46:3f:10:35:b3:fe:68:33:
                    ef:dc:3c:2e:e3:7e:77:1f:a2:82:61:55:50:f3:64:
                    f9:1b:52:89:e1:2a:58:25:4e:1f:3c:3f:07:4b:b5:
                    ee:f3:60:7a:1b:20:61:7b:c0:e1:25:da:2b:46:80:
                    79:a7:50:e1:3c:15:01:5e:63:0c:e8:fd:b4:44:92:
                    4e:0b:84:fe:27:a9:12:36:18:71:20:3e:cb:6c:f9:
                    a2:0e:5d:8e:4f:eb:35:0a:ee:bf:d6:ca:28:ad:2f:
                    34:b6:a8:83:5c:00:38:ee:99:83:28:bc:81:98:d3:
                    d4:07:59:cb:e3:9b:ae:4b:5c:de:8c:64:aa:c8:06:
                    24:fc:fc:60:6e:4c:8e:4f:18:f4:93:83:24:c9:28:
                    f3:8e:97:1f:45:92:24:4d:8b:35:55:d1:a2:82:6e:
                    da:3c:aa:66:9e:87:99:b2:07:06:15:48:36:bc:86:
                    23:d0:45:34:50:1a:c6:ff:42:46:13:9c:87:ac:ca:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FC:5C:1A:23:DE:1E:00:07:0B:A5:8B:B6:26:48:AA:DF:C1:E6:90
            X509v3 Authority Key Identifier:
                keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:89:82:54:a2:06:e3:84:b0:1f:3e:49:d0:e7:49:44:df:86:
         ed:b7:7f:b6:dc:5a:28:6b:cd:e8:83:a4:19:24:dd:18:0a:1d:
         4d:6d:a0:92:ff:8b:04:7a:7d:2f:43:30:9c:d8:7e:52:a1:61:
         e2:b5:b8:6a:c7:76:8f:4a:41:2d:fe:e7:91:5d:a4:60:6e:1c:
         89:a5:af:42:b3:22:03:90:81:bb:4e:1c:ee:32:31:34:5e:41:
         f7:c1:1c:1b:e2:34:f1:0c:ac:e9:c9:7d:1b:bb:81:9d:f5:29:
         51:80:2e:64:37:a6:00:da:22:a1:85:52:84:8b:eb:7e:df:c2:
         0b:92:d0:2a:72:40:38:ef:b3:2d:20:82:c5:c7:9e:cf:23:a4:
         ca:1c:65:bb:8d:c4:9a:14:d0:29:9d:51:24:f2:1e:c3:e8:7d:
         f6:43:58:78:01:80:71:19:ee:0c:8f:83:dc:33:76:1d:ec:ca:
         7d:ad:5f:8c:de:5c:e8:58:5c:ac:e4:a5:1e:25:40:28:70:24:
         0f:54:3f:aa:c3:89:8c:38:0e:f1:7b:80:52:e0:80:c8:16:4f:
         98:f9:47:1e:cd:d3:e1:c5:d7:4a:a1:a5:29:92:f5:dc:2b:21:
         fa:f0:89:51:3b:e3:5d:27:ee:79:45:41:40:95:d0:8f:d5:a5:
         7f:a3:67:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEiCgP4zccAO//2rqF/aJTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTc5ZTg5YWFhMmQ1OWVlZTRiZDY4NThmYWU1YmIzZmRh
NzQ5NjEwHhcNMjYxMDA5MTkwMDQ0WhcNMjYxMDEwMTkwMDQ0WjAzMTEwLwYDVQQD
Eyg3YWZjNWMxYTIzZGUxZTAwMDcwYmE1OGJiNjI2NDhhYWRmYzFlNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xafztsxXVHhyBB5Y9Lhnooj3zzq
LS5vLTejFAKHjLVAdLQt+HBdx8+6t/zqAde6a3ZX8H3FWLcgnbp+6uEZqH80Rj8Q
NbP+aDPv3Dwu4353H6KCYVVQ82T5G1KJ4SpYJU4fPD8HS7Xu82B6GyBhe8DhJdor
RoB5p1DhPBUBXmMM6P20RJJOC4T+J6kSNhhxID7LbPmiDl2OT+s1Cu6/1soorS80
tqiDXAA47pmDKLyBmNPUB1nL45uuS1zejGSqyAYk/PxgbkyOTxj0k4MkySjzjpcf
RZIkTYs1VdGigm7aPKpmnoeZsgcGFUg2vIYj0EU0UBrG/0JGE5yHrMoJmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr8XBoj3h4ABwuli7YmSKrfweaQMB8GA1UdIwQY
MBaAFM4XnomqotWe7kvWhY+uW7P9p0lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUt
M2Q3OTY1NTM5YmM3LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUtM2Q3OTY1NTM5YmM3
LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4mCVKIG
44SwHz5J0OdJRN+G7bd/ttxaKGvN6IOkGSTdGAodTW2gkv+LBHp9L0MwnNh+UqFh
4rW4asd2j0pBLf7nkV2kYG4ciaWvQrMiA5CBu04c7jIxNF5B98EcG+I08Qys6cl9
G7uBnfUpUYAuZDemANoioYVShIvrft/CC5LQKnJAOO+zLSCCxceezyOkyhxlu43E
mhTQKZ1RJPIew+h99kNYeAGAcRnuDI+D3DN2HezKfa1fjN5c6FhcrOSlHiVAKHAk
D1Q/qsOJjDgO8XuAUuCAyBZPmPlHHs3T4cXXSqGlKZL13Csh+vCJUTvjXSfueUVB
QJXQj9Wlf6Nnug==
-----END CERTIFICATE-----
Generated at Sat Oct 10 02:53:38 2026 by rpki-client