Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
File:                     CzENu2344GIhv_3pKCDHnLsUrlw.mft (raw, json)
Hash identifier:          JNi0fhlaUENceC5vwjUzPLDoyfENXVbdKoSVPvg3Q4s=
Subject key identifier:   A2:ED:55:9C:24:54:D3:4F:66:27:1E:A0:A9:61:F3:64:D2:52:DB:80
Authority key identifier: 0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
Certificate issuer:       /CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Certificate serial:       01A10813A1C0F9B9470BA5FFF64C9B493E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
Manifest number:          0102
Signing time:             Sun 04 Oct 2026 18:01:06 +0000
Manifest this update:     Sun 04 Oct 2026 18:01:06 +0000
Manifest next update:     Mon 05 Oct 2026 18:01:06 +0000
Files and hashes:         1: 2QbBHswT4LyT9MKxWibJ_ZC77bY.roa (hash: OMywM0jRuHNbVt6pewn8yF5ZOU7J3bKnC67SOzWkkWU=)
                          2: AMQVPdnd5gupAf5BUQnxLVvfPz4.roa (hash: s2nhQfFPjFWsBfYKQNz+So9BoEG35m98vEDyLpUK0wg=)
                          3: CzENu2344GIhv_3pKCDHnLsUrlw.crl (hash: b8xTCzvejPLpqqmJskWSU/35Vuxm9HrIEnIQX/6bxsk=)
                          4: LXXfQN2bkC9puw5dqkTeVg1dAuM.roa (hash: enCJ6utAPOkQVHVt862XMSScyncqVjbigRDYlmgELSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:13:a1:c0:f9:b9:47:0b:a5:ff:f6:4c:9b:49:3e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
        Validity
            Not Before: Oct  4 18:01:06 2026 GMT
            Not After : Oct  5 18:01:06 2026 GMT
        Subject: CN=a2ed559c2454d34f66271ea0a961f364d252db80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:16:bc:ae:17:ee:37:f5:e0:b6:2b:7f:60:0b:
                    50:d0:67:20:2d:35:3c:4f:94:e1:dd:23:b0:db:9f:
                    71:51:fd:65:5e:c8:88:fb:fe:84:d3:40:ec:bc:72:
                    c0:0d:4e:5a:16:1c:08:63:f9:2f:11:f1:69:88:ed:
                    c0:65:06:34:1e:d5:72:ed:e2:d8:e4:4d:73:d3:74:
                    95:a1:7a:87:45:42:58:31:2d:12:8d:c6:b8:20:20:
                    a9:3c:06:55:1f:e8:24:6c:ed:e4:f7:cc:9e:c2:24:
                    75:15:d6:ac:d5:81:9e:ac:61:9b:61:dd:eb:71:e5:
                    0e:0a:84:61:30:53:5d:8e:9f:2d:ff:f5:7d:31:ef:
                    53:d8:37:65:65:0d:8d:52:e5:b2:7d:35:9d:fc:15:
                    1b:a2:c7:9e:31:b8:9c:cd:8d:95:e5:f9:65:f2:99:
                    54:bf:94:31:fe:14:3f:89:0f:6e:65:6f:95:e8:71:
                    3f:20:ce:57:a6:1c:91:eb:d6:a5:8d:36:70:27:fe:
                    c3:02:58:97:d8:80:fd:4e:c5:bf:ad:58:69:cb:d5:
                    44:d0:51:83:a5:86:05:a0:69:d9:32:c0:d4:a8:b6:
                    5f:3f:ce:94:79:af:55:0f:e9:e9:6f:e2:c1:7a:d0:
                    5a:2b:fa:69:17:b0:07:c9:55:93:fc:b5:53:5e:ba:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:ED:55:9C:24:54:D3:4F:66:27:1E:A0:A9:61:F3:64:D2:52:DB:80
            X509v3 Authority Key Identifier:
                keyid:0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:69:30:39:99:d0:fd:9f:d7:89:bd:c6:86:df:92:cc:f1:
         57:7b:54:de:88:14:1a:ea:6e:8c:7a:ee:66:4b:24:d6:fe:ac:
         e0:b8:a7:c3:a5:03:cc:48:73:a2:90:16:80:1d:b2:33:13:aa:
         31:14:bc:1e:83:79:a7:4c:87:c5:f5:b8:e5:1b:44:a2:a5:8e:
         3c:8e:0b:87:97:50:d6:4e:b2:c8:c5:72:d4:24:04:40:ab:ee:
         ac:42:4c:d8:c7:da:c6:10:34:d8:4a:35:75:0a:6a:99:97:01:
         27:29:78:78:e3:29:58:9d:11:7e:76:b1:51:ce:a6:5d:2f:e3:
         f0:d3:0d:dd:67:3e:3c:5c:9e:97:1b:33:0f:31:ab:7c:f5:07:
         49:cf:6a:68:6d:f3:92:b3:70:57:ed:52:49:d5:4f:1b:7e:de:
         08:8c:d4:00:58:61:02:1e:42:9d:d2:e3:b6:4c:9c:9c:d1:f5:
         c8:b8:bb:84:ba:95:16:59:b3:5c:d5:45:35:cb:5c:fd:eb:77:
         cf:8d:9a:5f:a0:a9:b3:9f:a1:ef:91:17:12:bd:c9:b3:77:3b:
         1a:ec:b8:20:ac:cf:13:c9:b2:c2:86:b6:ae:6c:8f:d0:ff:ab:
         99:9c:a7:c2:2b:55:99:d2:a2:7c:fe:9d:6a:be:b8:49:7b:2e:
         11:27:bd:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEIE6HA+blHC6X/9kybST6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzEwZGJiNmRmOGUwNjIyMWJmZmRlOTI4MjBjNzljYmIx
NGFlNWMwHhcNMjYxMDA0MTgwMTA2WhcNMjYxMDA1MTgwMTA2WjAzMTEwLwYDVQQD
EyhhMmVkNTU5YzI0NTRkMzRmNjYyNzFlYTBhOTYxZjM2NGQyNTJkYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xa8rhfuN/Xgtit/YAtQ0GcgLTU8
T5Th3SOw259xUf1lXsiI+/6E00DsvHLADU5aFhwIY/kvEfFpiO3AZQY0HtVy7eLY
5E1z03SVoXqHRUJYMS0Sjca4ICCpPAZVH+gkbO3k98yewiR1Fdas1YGerGGbYd3r
ceUOCoRhMFNdjp8t//V9Me9T2DdlZQ2NUuWyfTWd/BUboseeMbiczY2V5fll8plU
v5Qx/hQ/iQ9uZW+V6HE/IM5XphyR69aljTZwJ/7DAliX2ID9TsW/rVhpy9VE0FGD
pYYFoGnZMsDUqLZfP86Uea9VD+npb+LBetBaK/ppF7AHyVWT/LVTXrpkywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLtVZwkVNNPZiceoKlh82TSUtuAMB8GA1UdIwQY
MBaAFAsxDbtt+OBiIb/96Sggx5y7FK5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pFTnUyMzQ0R0lodl8zcEtDREhuTHNVcmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It
ZDg0NmQxMDZiNWY3LzEvQ3pFTnUyMzQ0R0lodl8zcEtDREhuTHNVcmx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3
LzEvQ3pFTnUyMzQ0R0lodl8zcEtDREhuTHNVcmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPA9pMDmZ
0P2f14m9xobfkszxV3tU3ogUGupujHruZksk1v6s4Linw6UDzEhzopAWgB2yMxOq
MRS8HoN5p0yHxfW45RtEoqWOPI4Lh5dQ1k6yyMVy1CQEQKvurEJM2MfaxhA02Eo1
dQpqmZcBJyl4eOMpWJ0RfnaxUc6mXS/j8NMN3Wc+PFyelxszDzGrfPUHSc9qaG3z
krNwV+1SSdVPG37eCIzUAFhhAh5CndLjtkycnNH1yLi7hLqVFlmzXNVFNctc/et3
z42aX6Cps5+h75EXEr3Js3c7Guy4IKzPE8mywoa2rmyP0P+rmZynwitVmdKifP6d
ar64SXsuESe9Sw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:38 2026 by rpki-client