Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          fWVPsurNau8UbqOB1ZPlk53MN/PCNZgQScO8YoNnnRM=
Subject key identifier:   0A:21:74:3F:1D:C9:63:7D:AF:42:F7:96:57:3C:F8:BB:F7:7C:FC:06
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       01A06EDEC0890D5137C5D7B4BC98A06808F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0CF7
Signing time:             Sat 05 Sep 2026 00:01:27 +0000
Manifest this update:     Sat 05 Sep 2026 00:01:27 +0000
Manifest next update:     Sun 06 Sep 2026 00:01:27 +0000
Files and hashes:         1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
                          2: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
                          3: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          4: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          5: 98oECme-w_GgSaFmZh37RLhYD9g.roa (hash: iPDzJ3v3jfejnPGzBAdLpmHo920TlkgN96SVjOqNj5w=)
                          6: AH6LIrlbNI1-7jc6_mfP3cKpZas.roa (hash: Cd72THvjuZ43WZBdJkQ5+DWE2lKyF5Q8G1oiHQ4Vu5U=)
                          7: B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa (hash: wSwh8QpiS5FR1lWM/wQRbFfUYho9vYOx2FceddMQvps=)
                          8: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          9: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
                          10: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
                          11: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=)
                          12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
                          13: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=)
                          14: SqdW3wEJdQI6pSiu6sKuLSekouM.roa (hash: rTImG/VwG887tYh4ok8g2ubTFK65bX66Ir6rONB+lXc=)
                          15: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          16: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
                          17: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          18: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
                          19: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: 0JbG0Xgh5UD94KU3sIsySIl1+/1hig7hg5dfE1xUQvc=)
                          20: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          21: eEYECPuTAMSxPzkjToe-AsGHG0o.roa (hash: qvifZPjdOwY78+6g7aEHucIxOME1hkTUXil2N+iv3W0=)
                          22: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
                          23: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
                          24: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
                          27: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
                          28: rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa (hash: jO75JoginvMuRlRlIbd+oIuJpNIVudUke0+lCckHlKk=)
                          29: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
                          30: urz4_AKUeHVYjJAJbjRXtg7l6R0.roa (hash: Lc5cV4YVr/KMErRPjabqXug9W3uT5uCRR+WjWueC5dU=)
                          31: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
                          32: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:de:c0:89:0d:51:37:c5:d7:b4:bc:98:a0:68:08:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Sep  5 00:01:27 2026 GMT
            Not After : Sep  6 00:01:27 2026 GMT
        Subject: CN=0a21743f1dc9637daf42f796573cf8bbf77cfc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:fd:23:d9:ed:75:23:21:f3:73:f3:3a:4a:
                    fd:f9:8b:27:43:23:15:9f:6d:57:b6:e9:90:14:51:
                    37:d9:30:bd:bb:d4:70:e7:06:da:7e:65:f7:6d:f0:
                    38:00:7e:1b:49:64:75:0b:d4:5d:83:05:b0:85:e5:
                    a3:66:e2:41:97:27:3a:e5:00:fa:ba:89:11:c8:49:
                    24:fd:20:5f:3c:65:1e:01:07:53:07:e5:9d:87:f0:
                    d0:db:20:59:9d:51:b2:be:98:20:39:00:b8:10:36:
                    79:ea:c7:75:93:4d:ac:72:5f:0a:b4:21:3f:c8:0a:
                    65:2a:d6:4b:e3:53:0e:fb:4b:4d:3e:87:c7:70:68:
                    83:22:11:7f:42:17:d9:be:b3:20:a2:b8:38:02:1f:
                    30:8f:14:ae:3e:af:fc:81:54:e1:b4:df:ba:1b:fb:
                    cc:2f:98:ec:92:4d:69:23:5b:f0:3c:7b:6b:a1:1b:
                    49:57:26:80:1c:a7:53:31:ab:07:67:b8:93:1e:1e:
                    b0:68:48:c3:b9:e5:db:24:1f:33:2b:99:3e:56:f6:
                    fa:b8:37:10:3b:55:af:80:eb:45:f2:5f:8f:53:43:
                    16:e8:ab:f7:a2:5a:a9:6d:20:3e:0c:ee:5b:dd:84:
                    13:aa:7e:91:54:42:38:30:47:43:eb:8e:bc:27:61:
                    41:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:21:74:3F:1D:C9:63:7D:AF:42:F7:96:57:3C:F8:BB:F7:7C:FC:06
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:9f:a5:34:8a:b9:71:f4:fc:bb:2e:0b:dd:eb:e7:26:52:
         63:88:08:3c:8d:d6:93:a4:18:ab:ba:27:4a:32:8d:13:0b:9a:
         49:42:bf:20:7c:da:09:3e:4a:70:77:9d:23:d9:51:0f:9b:f8:
         0a:98:30:92:95:30:8c:aa:26:35:23:94:0b:43:60:61:93:46:
         6e:80:26:4e:65:de:6d:d6:0d:11:e2:a9:fd:2c:c4:2c:38:81:
         21:ad:e6:96:9c:72:1d:cf:71:12:c7:6e:ad:b2:67:30:42:87:
         0d:1c:c0:b0:62:8e:e1:02:9f:e2:13:d7:cd:d0:ad:45:e7:34:
         12:22:a8:48:48:8a:52:df:cf:e1:0f:a8:40:23:5d:f2:ca:ac:
         f1:fe:f7:3b:2e:c1:3b:b7:af:f4:e7:71:2a:76:54:e1:ab:e7:
         f7:ae:93:d4:14:33:12:c5:0c:cf:e7:4a:3a:30:69:7a:e9:e4:
         a5:26:8b:2a:db:df:95:54:06:92:ea:e0:bc:41:f1:3b:13:8f:
         54:a6:ca:89:2d:1f:e8:ac:ad:01:f5:c9:1c:21:5a:39:5a:c1:
         2f:80:b3:28:08:b8:e5:b5:2d:52:ed:e2:89:63:30:2f:04:d9:
         ab:fb:b5:d5:32:c4:a8:bc:52:f5:fd:8d:57:5b:ca:ea:ac:75:
         a2:dc:97:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3sCJDVE3xde0vJigaAj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjYwOTA1MDAwMTI3WhcNMjYwOTA2MDAwMTI3WjAzMTEwLwYDVQQD
EygwYTIxNzQzZjFkYzk2MzdkYWY0MmY3OTY1NzNjZjhiYmY3N2NmYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/P9I9ntdSMh83PzOkr9+YsnQyMV
n21XtumQFFE32TC9u9Rw5wbafmX3bfA4AH4bSWR1C9RdgwWwheWjZuJBlyc65QD6
uokRyEkk/SBfPGUeAQdTB+Wdh/DQ2yBZnVGyvpggOQC4EDZ56sd1k02scl8KtCE/
yAplKtZL41MO+0tNPofHcGiDIhF/QhfZvrMgorg4Ah8wjxSuPq/8gVThtN+6G/vM
L5jskk1pI1vwPHtroRtJVyaAHKdTMasHZ7iTHh6waEjDueXbJB8zK5k+Vvb6uDcQ
O1WvgOtF8l+PU0MW6Kv3olqpbSA+DO5b3YQTqn6RVEI4MEdD6468J2FBMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAohdD8dyWN9r0L3llc8+Lv3fPwGMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFqfpTSK
uXH0/LsuC93r5yZSY4gIPI3Wk6QYq7onSjKNEwuaSUK/IHzaCT5KcHedI9lRD5v4
CpgwkpUwjKomNSOUC0NgYZNGboAmTmXebdYNEeKp/SzELDiBIa3mlpxyHc9xEsdu
rbJnMEKHDRzAsGKO4QKf4hPXzdCtRec0EiKoSEiKUt/P4Q+oQCNd8sqs8f73Oy7B
O7ev9OdxKnZU4avn966T1BQzEsUMz+dKOjBpeunkpSaLKtvflVQGkurgvEHxOxOP
VKbKiS0f6KytAfXJHCFaOVrBL4CzKAi45bUtUu3iiWMwLwTZq/u11TLEqLxS9f2N
V1vK6qx1otyX5g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:37:23 2026 by rpki-client