Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          b1hk9yXmuKdaGao2i1UvnfLT4SoBQ6lqaqUILsuuiZM=
Subject key identifier:   44:5F:DB:8F:42:83:DB:EA:E1:B7:D6:13:47:25:3D:25:A5:3D:3E:22
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       01A17D3CB8A436DBC63394B3116A34589840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          1062
Signing time:             Tue 27 Oct 2026 12:01:33 +0000
Manifest this update:     Tue 27 Oct 2026 12:01:33 +0000
Manifest next update:     Wed 28 Oct 2026 12:01:33 +0000
Files and hashes:         1: 06k5D3ZBmEUBxIHBnu9co1Dnn_Q.roa (hash: 23+3ygARGKHv+NTUhNap77ASbjdhDMj7SUzDTySx8Mk=)
                          2: 2tOQcNqia9FY_EgjlzJvmLqEZvk.roa (hash: vCVW24gm0Il+L7GD5QhbLKqrNdBKimfTZajv5G9G6e0=)
                          3: 78RtptxQshjOEl7mQ83jXiDnEK8.roa (hash: jPAJWe9QhBUPp52He04OGfKDbfHrvmfWpIDF+I2JeKw=)
                          4: N-M1_Gcs5nz1z-RZbD5F2Zwy0ik.roa (hash: Eebmmc2rhKXOb9UxpkjpYhhaoAIhvKS+3sRa+Rf9xxc=)
                          5: S7xMn2WZ6tpb12ZzK2bfHpgj_jQ.roa (hash: a6xOII9rFzlXhVP9cTBhXZN2z2bq0zGYQLqbGgEi7x8=)
                          6: UnAAO5LZUpGqAlAFH0cTVQdXrPQ.roa (hash: +0fvTCTz6t0CVUgBJlyimNyAqahKNROglBmjcNIj20s=)
                          7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: qeNc8jFxAhX/NrJPNsOYI4Xd0jzqoagTB7SJeZZvBdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:3c:b8:a4:36:db:c6:33:94:b3:11:6a:34:58:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Oct 27 12:01:33 2026 GMT
            Not After : Oct 28 12:01:33 2026 GMT
        Subject: CN=445fdb8f4283dbeae1b7d61347253d25a53d3e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:ea:05:f1:cd:b7:d1:f4:83:ef:67:c2:4e:
                    b6:1c:46:07:90:e2:15:7b:0d:82:0c:5c:3e:43:1d:
                    6c:04:c5:fe:eb:d8:04:31:3b:8a:05:f2:98:fb:86:
                    b6:e8:e4:30:da:fe:ce:97:9b:68:3a:cc:c5:66:31:
                    fb:92:d1:5e:1f:d4:20:69:cd:12:f1:43:ac:92:98:
                    39:9a:8d:cb:d7:66:db:5d:55:56:d2:95:50:98:6c:
                    b6:96:c1:e9:87:e2:88:65:1a:8d:6c:b7:f8:ac:4e:
                    36:f5:27:40:50:58:54:f1:03:e1:98:c6:6e:4a:67:
                    13:27:89:0a:63:62:41:b6:b8:63:76:47:27:a7:39:
                    28:05:de:28:47:72:1a:a0:90:ee:d8:2a:7d:7b:30:
                    bf:7b:de:c1:89:8d:27:a0:b9:9a:cc:ce:23:db:d2:
                    0c:de:87:be:53:dc:ef:18:37:26:d6:3b:7b:d0:75:
                    59:06:8f:65:66:39:26:c1:37:3d:78:ea:f2:81:34:
                    24:6d:15:44:5d:8e:0a:28:9e:2f:a3:23:c3:a7:2b:
                    b7:d1:45:bb:47:e1:92:2a:c8:60:f8:d3:5d:cf:31:
                    e4:58:30:1c:a1:17:d4:69:30:7b:bd:9b:86:d3:42:
                    e1:c9:14:a5:28:8e:a4:ea:ec:ee:a7:ae:06:91:fd:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5F:DB:8F:42:83:DB:EA:E1:B7:D6:13:47:25:3D:25:A5:3D:3E:22
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ac:13:6b:fc:d2:fa:32:56:e8:88:53:42:eb:d1:dc:9d:0c:
         06:19:02:bb:d9:11:d0:11:4e:e0:22:9b:a0:41:a4:70:35:a9:
         c3:fc:b5:a4:ac:18:79:8d:65:97:77:7a:5d:54:8a:e7:1d:60:
         43:21:79:8f:37:0f:5e:9e:ef:ce:8d:7e:26:8b:02:5e:32:47:
         7d:51:13:88:28:32:64:f4:50:0f:f3:51:41:7b:d6:43:3c:8f:
         bd:cb:a4:88:4c:27:84:74:92:a3:04:2c:26:90:e3:51:04:91:
         8e:a6:41:3c:61:5e:5e:b5:e8:e9:be:3c:3d:78:b1:93:76:84:
         af:8f:62:7b:eb:ba:5c:d4:0e:8c:e8:40:51:c4:08:30:17:08:
         3a:08:e4:85:15:67:be:0d:9c:7b:69:18:5b:78:6b:92:4c:48:
         d1:23:5d:1a:60:7b:40:76:e6:28:3f:84:b4:f0:39:ec:1a:d7:
         da:22:19:46:cf:20:94:54:0c:e1:77:84:34:b6:11:af:ba:ad:
         2b:6a:64:b7:0d:20:c8:27:31:ab:b2:09:11:20:8d:bf:c6:02:
         5a:e9:12:27:03:b1:59:d0:60:1a:8c:12:20:84:bb:db:b7:94:
         8d:0f:00:60:0b:6a:7d:75:9a:c6:1a:e5:f9:0c:29:cb:f9:e4:
         2e:60:87:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PLikNtvGM5SzEWo0WJhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx
YTgyMGIwHhcNMjYxMDI3MTIwMTMzWhcNMjYxMDI4MTIwMTMzWjAzMTEwLwYDVQQD
Eyg0NDVmZGI4ZjQyODNkYmVhZTFiN2Q2MTM0NzI1M2QyNWE1M2QzZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3snqBfHNt9H0g+9nwk62HEYHkOIV
ew2CDFw+Qx1sBMX+69gEMTuKBfKY+4a26OQw2v7Ol5toOszFZjH7ktFeH9Qgac0S
8UOskpg5mo3L12bbXVVW0pVQmGy2lsHph+KIZRqNbLf4rE429SdAUFhU8QPhmMZu
SmcTJ4kKY2JBtrhjdkcnpzkoBd4oR3IaoJDu2Cp9ezC/e97BiY0noLmazM4j29IM
3oe+U9zvGDcm1jt70HVZBo9lZjkmwTc9eOrygTQkbRVEXY4KKJ4voyPDpyu30UW7
R+GSKshg+NNdzzHkWDAcoRfUaTB7vZuG00LhyRSlKI6k6uzup64Gkf1gwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERf249Cg9vq4bfWE0clPSWlPT4iMB8GA1UdIwQY
MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt
ZjQ4NTAyZDEzOTQ4LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4
LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqwTa/zS
+jJW6IhTQuvR3J0MBhkCu9kR0BFO4CKboEGkcDWpw/y1pKwYeY1ll3d6XVSK5x1g
QyF5jzcPXp7vzo1+JosCXjJHfVETiCgyZPRQD/NRQXvWQzyPvcukiEwnhHSSowQs
JpDjUQSRjqZBPGFeXrXo6b48PXixk3aEr49ie+u6XNQOjOhAUcQIMBcIOgjkhRVn
vg2ce2kYW3hrkkxI0SNdGmB7QHbmKD+EtPA57BrX2iIZRs8glFQM4XeENLYRr7qt
K2pktw0gyCcxq7IJESCNv8YCWukSJwOxWdBgGowSIIS727eUjQ8AYAtqfXWaxhrl
+Qwpy/nkLmCHtQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:51:53 2026 by rpki-client