Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File:                     zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier:          3iqvpsxcMJ+vYX5r6qJR3jmpdT7RgwQ6jwUBdfepYIA=
Subject key identifier:   F0:FF:AE:3B:B5:C2:B3:D3:F5:A1:10:F4:13:2E:33:02:9B:9B:60:43
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       01A17C976750C14F55831BEC8DE30742BD4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number:          1C6F
Signing time:             Tue 27 Oct 2026 09:00:59 +0000
Manifest this update:     Tue 27 Oct 2026 09:00:59 +0000
Manifest next update:     Wed 28 Oct 2026 09:00:59 +0000
Files and hashes:         1: 0Wo7rWj4dkcU66sJeqix1HnpVtU.roa (hash: V8uATySjBBDB6nqb7uol841Vzlm6P70obntmiwdNM7w=)
                          2: 1YYlM4ouGP3n966YQQJD1J8Ht1c.roa (hash: S2bt8De1mjKmpnVjdK4IwIG1kVZf0VST4BMHZsJGgJk=)
                          3: 39hNxNp-nuCqNksdTxKZgMGVxJE.roa (hash: zujIoYkl4Zo8pHqy7FDX7Ubdipm6/EZB9d5Au9zY7xk=)
                          4: 47CsFOJriBbo1mq0-ajVp1jYEUI.roa (hash: aGrtYJNVgjYu/HsVE+4iU/oLDMmucqYc8rXRFsYsUHc=)
                          5: 4ylsIMEDIPtWwFh385Ofyk1OHBs.roa (hash: hDlNtnY/PTFExGDCBEFAqm5Ru+NAscd+2QjC4sfe/s0=)
                          6: 55eIFFqzRSZ0Ed0V0C_-_6jQXsg.roa (hash: ViIQrtNN0920kOEd8f18k1JuVb5CLpsQkSnuVh4z8UQ=)
                          7: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=)
                          8: 7Xre036woZ8vcol8k5XmEu1iA1I.roa (hash: eyn3q3PLjDTVu84Akp3ffRdOxB2vaXhFGWuStQOY2t4=)
                          9: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=)
                          10: Fv-ztF2UG5zf6h5b12hXUB2uIfM.roa (hash: vWzxaASZZO87hMUAoCYoH4niRZRjFfP7/pwFauJSL4Q=)
                          11: GA1XHzWcpcUGoUmLR47BUH5ZcZc.roa (hash: iAqD74qcYTcBb5sTTSkiYu2s1IkOFMHBUPbsfUe4F2c=)
                          12: JO2xr2SpG8k5bLsLnvYB8od4wPs.asa (hash: fRSbrwuw/d1qBK8idZqHFRm2f3lneeVglcAeRA4ZIRM=)
                          13: MBJ1TmxMlUADfhppw87AtlF4BAw.roa (hash: WEd1zzNA+pNvlt4cAOAWiu/zRr1ny+nFIdymaQ/OK8Y=)
                          14: MDnbMrcEtQO3LUvd5PYrO0KOouI.roa (hash: pJtoBFRrJd+WRsGQ11VpMD8GneaY/fB5G1JQRXHxSA8=)
                          15: Trxc4jeny8dNEnGxhN74ZsfhiqY.roa (hash: 3SUuxVeA46pCrInZR/RGR5OP9gwL2bojt7VpxJlK2Tk=)
                          16: YertTbP8ORjFZb4AB74mRsA3J1Q.roa (hash: wzF6sykfeonMiXaOHg9TmKmNaKu3g02Q5iXos2+wH78=)
                          17: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=)
                          18: bA4b87f91ryc3jb4SiaTzw70uLA.roa (hash: M9DMYWjQrriYvfIMkTPt89s2T8jCvpnvOvBPbxf8EDE=)
                          19: ezjxRfeJRjpnrRCKWbvwR5vJRKU.roa (hash: EXExMi7BOHWcVWkWrbvXgL84WwGEkcmRdKjry0zUqRk=)
                          20: jgUxlJkGPwcsxNxWSeiIxmkXs4k.roa (hash: T7OMDx4n354hPK728lnwxNPKv0p6Ko452S13iYgLVrw=)
                          21: jr-PunQRQJFZJ7OYQwdFrKrkWJ8.roa (hash: q7R0ND36zZ5sAUsSRpGvv9igpHz56injhoG5j1zS828=)
                          22: kjRidx0D39Ao0112FfgdK6_4QsQ.roa (hash: 1c4wEZ+8x5KA1HUnAkNWdzJa0JfekRogYEyNw7TG30w=)
                          23: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=)
                          24: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=)
                          25: y_kSlexGeb7TiS61Y5__-h9JwmE.roa (hash: mNFhXW+YkUDwWvy3SkZGzRdGhMxel7XfYcdI27PkPjM=)
                          26: zUq98b8i___94VbqFU7J_4ODp-o.roa (hash: /9n8pSxth5HcINO3N8uYE4G/IAGbUmN6Ln6dn0v47CM=)
                          27: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: xwwCkmkp2osmYfD5IOP1hVAktaGK1AdzMquLMrHSkQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:67:50:c1:4f:55:83:1b:ec:8d:e3:07:42:bd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Oct 27 09:00:59 2026 GMT
            Not After : Oct 28 09:00:59 2026 GMT
        Subject: CN=f0ffae3bb5c2b3d3f5a110f4132e33029b9b6043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:cf:07:56:b1:e6:9d:fe:ec:d7:52:8e:48:
                    1c:f2:da:a7:72:38:ba:5d:07:31:25:e7:6a:48:ed:
                    01:a4:89:8a:2d:ea:ba:31:3d:f8:f5:06:c4:e5:51:
                    5f:2c:c5:ac:8e:0a:37:46:ed:51:a9:0b:a3:29:47:
                    4f:ba:ef:2a:de:2f:de:d1:83:72:b3:03:ca:ab:0b:
                    13:7d:66:ed:30:f4:ff:fd:c5:a2:21:24:88:33:8f:
                    5a:87:43:a1:7f:ed:30:49:18:05:1a:82:ba:fb:6a:
                    65:e6:77:6e:60:00:d0:a3:63:d5:53:6d:44:e4:1d:
                    d2:21:59:43:b7:6e:05:3d:19:c4:2b:9d:6d:97:2c:
                    f4:66:06:90:0c:22:d0:ff:78:bd:65:4e:fe:85:fe:
                    70:40:2a:bc:f2:0a:46:d2:c8:81:50:e5:e9:8a:64:
                    12:90:e7:ad:17:1e:76:49:b0:99:16:43:b5:e8:50:
                    75:34:28:4f:17:ca:48:8a:be:ae:8b:2e:70:70:ca:
                    ad:54:b3:c0:8f:28:c9:ae:a3:e1:bf:48:03:86:e6:
                    85:da:37:87:8e:da:f4:64:69:f9:16:05:1f:4c:9f:
                    53:ff:e3:79:97:8b:98:6d:37:5c:fd:20:58:62:ba:
                    e8:fd:02:95:59:1e:d2:ff:44:9a:03:31:dc:8f:b6:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FF:AE:3B:B5:C2:B3:D3:F5:A1:10:F4:13:2E:33:02:9B:9B:60:43
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:a0:fb:ed:6a:6d:e4:d9:1b:71:8d:1b:16:97:14:d4:02:
         04:b3:22:8e:a6:51:f1:e2:82:85:68:d1:98:ac:a8:08:80:d4:
         83:1b:b7:b1:7d:41:27:c6:4c:e7:80:87:f9:a5:17:17:ae:21:
         77:96:45:b3:9d:1c:10:4e:96:e0:61:f0:8e:41:37:09:e2:1d:
         59:b8:cc:72:b4:f4:7e:4f:31:43:e8:c3:ed:08:45:9a:a7:f3:
         8d:aa:64:4a:8c:70:33:d0:d6:c9:e4:61:bc:a5:e4:1f:f6:be:
         47:3e:61:97:8f:22:fd:2e:7e:5b:de:aa:90:57:3e:f6:16:f2:
         a8:9a:14:e3:d0:fd:e1:20:34:5b:1a:7c:fb:85:a1:bd:2a:cb:
         22:7a:40:0c:26:b2:27:4e:72:d0:94:4f:a0:7e:4c:68:a8:44:
         08:42:fc:a6:49:0b:d6:ed:a5:c0:7f:29:34:cf:40:7e:c0:ee:
         e7:19:80:4c:11:34:64:ee:bf:50:a9:a1:4a:ba:7d:0d:56:60:
         de:54:d1:2c:db:a9:bf:2c:cc:b1:54:a4:06:6d:d9:1c:22:d9:
         a0:45:79:66:0f:70:9f:5f:ac:50:c2:65:b6:80:4c:fc:12:cd:
         5b:82:1f:b9:c3:c8:23:99:2e:48:cd:c4:0c:8b:71:00:a8:08:
         9c:39:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:28:54 2026 by rpki-client