Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          yEiYLSuuIAexBaDv4xjC4fdtOSPf2kO+6yDM4Enp6nw=
Subject key identifier:   8A:E9:B0:5C:C5:24:24:8F:24:B4:AB:9D:02:DE:AF:F5:0B:9A:58:37
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       019FF835585687D11A1DB879515C95742244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          154E
Signing time:             Wed 12 Aug 2026 23:01:13 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:13 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:13 +0000
Files and hashes:         1: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (hash: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E=)
                          2: 143uR_Opu7Zeu7uxf8rhyVqs6pA.roa (hash: gnOcz10DzYsdv7a3eo6ReHVx6t0LmKA4aY2SFi+8K5g=)
                          3: 5GRL2xTwlhtB45CKu5VYBHVeCs8.roa (hash: xHs3aoTc2u94fp2p4GMEh09FXKLHJU4FJ23Xwrl2mb8=)
                          4: LImeWPjRU0bTYqqH-HKe4xkFuc0.roa (hash: zqLkD7GL5OBQzT/9VJg9wwwTHEy5OhmPX5ktJW+mT7A=)
                          5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: 8w0WzMaQCb7SVJV8G5kQtib9xYlJfBsKx/9T3I93INg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:58:56:87:d1:1a:1d:b8:79:51:5c:95:74:22:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: Aug 12 23:01:13 2026 GMT
            Not After : Aug 13 23:01:13 2026 GMT
        Subject: CN=8ae9b05cc524248f24b4ab9d02deaff50b9a5837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:e8:4b:8e:9a:22:69:0a:65:02:e5:92:39:
                    5f:93:2c:cf:8d:02:d9:39:dc:25:c4:2e:d1:52:b7:
                    3e:c2:1c:a8:c8:40:cd:8b:e8:a1:d3:96:eb:16:4e:
                    24:1f:4b:b0:d3:36:76:ef:eb:ef:d0:0e:b9:c6:42:
                    5e:c1:6a:50:3f:52:91:54:2e:e1:18:7f:ed:4d:af:
                    7e:94:d0:62:87:03:bd:30:d8:9c:6b:83:b6:6c:69:
                    d2:1e:6e:f2:1b:75:ad:ab:6c:07:34:84:b8:5c:7a:
                    a2:62:1c:52:25:ce:37:c1:a0:c1:40:0f:3f:2d:41:
                    f4:f7:5c:7f:3b:32:50:07:39:be:71:00:6d:87:24:
                    c4:c1:f1:93:2d:39:b8:17:c2:dc:9f:43:8c:35:6f:
                    7c:37:97:34:44:bb:1a:03:e0:ac:11:07:3a:2e:66:
                    73:ec:5a:13:b0:eb:b3:cc:54:ee:37:4c:12:95:fd:
                    1d:c8:4c:3b:d0:55:f3:2e:74:e2:94:6a:86:ac:be:
                    ac:8d:f0:30:6e:37:4c:1e:92:61:01:fa:ff:09:d1:
                    12:a6:f8:ff:67:79:d8:0a:99:10:c0:e4:c8:e9:68:
                    0c:93:c4:11:78:f8:2b:06:68:7d:b3:b2:6c:b8:5d:
                    7b:99:11:34:79:2d:08:62:60:84:90:fa:19:f4:64:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E9:B0:5C:C5:24:24:8F:24:B4:AB:9D:02:DE:AF:F5:0B:9A:58:37
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:7e:09:fd:fd:c3:c1:af:ab:85:ff:f6:c1:90:04:73:bf:
         37:72:78:ad:c2:3f:4f:7d:6a:ce:3b:29:47:5a:e2:bb:c4:a9:
         52:9c:78:0b:70:85:73:f0:c6:bd:c5:21:d1:aa:44:35:f1:8b:
         6d:69:af:8a:58:f6:78:3c:7a:a6:68:ff:d9:23:fc:cc:4c:41:
         08:01:92:bc:67:11:4a:cd:fb:fd:88:79:e5:65:28:fe:76:c4:
         df:b8:fb:0f:8f:6a:05:f7:31:8f:3d:15:f4:4c:33:3f:66:ed:
         29:c9:ef:88:52:1d:ae:1f:68:ca:60:56:0c:20:06:93:ab:fa:
         01:bc:75:51:65:2d:45:1e:df:d0:8d:ea:ac:5b:12:3c:90:17:
         19:fa:dd:e9:de:6d:13:85:ec:b9:da:d1:44:0a:1e:7c:f3:26:
         47:15:ab:64:30:91:2c:56:6d:7e:78:05:f6:1a:18:9e:d0:4a:
         0a:8a:96:af:6d:62:3d:f2:c1:87:59:1e:fa:0a:aa:d4:df:b6:
         d5:7f:5b:a0:62:89:a2:30:06:f8:a7:61:53:1b:36:db:ec:ba:
         2b:6a:3e:98:5c:69:e2:8b:27:a9:7c:0a:84:aa:81:02:0d:12:
         ce:28:03:5d:7b:cd:a0:a3:c6:89:ea:ec:33:e1:12:2a:fc:8c:
         f9:1f:4d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4NVhWh9EaHbh5UVyVdCJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx
MThiODUwHhcNMjYwODEyMjMwMTEzWhcNMjYwODEzMjMwMTEzWjAzMTEwLwYDVQQD
Eyg4YWU5YjA1Y2M1MjQyNDhmMjRiNGFiOWQwMmRlYWZmNTBiOWE1ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgroS46aImkKZQLlkjlfkyzPjQLZ
OdwlxC7RUrc+whyoyEDNi+ih05brFk4kH0uw0zZ27+vv0A65xkJewWpQP1KRVC7h
GH/tTa9+lNBihwO9MNica4O2bGnSHm7yG3Wtq2wHNIS4XHqiYhxSJc43waDBQA8/
LUH091x/OzJQBzm+cQBthyTEwfGTLTm4F8Lcn0OMNW98N5c0RLsaA+CsEQc6LmZz
7FoTsOuzzFTuN0wSlf0dyEw70FXzLnTilGqGrL6sjfAwbjdMHpJhAfr/CdESpvj/
Z3nYCpkQwOTI6WgMk8QRePgrBmh9s7JsuF17mRE0eS0IYmCEkPoZ9GSgOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrpsFzFJCSPJLSrnQLer/ULmlg3MB8GA1UdIwQY
MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt
MGRiYjNiOGRiMTVmLzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUtMGRiYjNiOGRiMTVm
LzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjc9+Cf39
w8Gvq4X/9sGQBHO/N3J4rcI/T31qzjspR1riu8SpUpx4C3CFc/DGvcUh0apENfGL
bWmvilj2eDx6pmj/2SP8zExBCAGSvGcRSs37/Yh55WUo/nbE37j7D49qBfcxjz0V
9EwzP2btKcnviFIdrh9oymBWDCAGk6v6Abx1UWUtRR7f0I3qrFsSPJAXGfrd6d5t
E4XsudrRRAoefPMmRxWrZDCRLFZtfngF9hoYntBKCoqWr21iPfLBh1ke+gqq1N+2
1X9boGKJojAG+KdhUxs22+y6K2o+mFxp4osnqXwKhKqBAg0SzigDXXvNoKPGiers
M+ESKvyM+R9NyQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:19 2026 by rpki-client