Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File:                     zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier:          q4WoE2/H7wmMMNp9S45zp6LhG808l6NV90SGJmMJfXY=
Subject key identifier:   FB:F4:90:D8:8A:D5:09:9E:3E:F7:3A:86:9E:68:C3:F5:BC:C1:B4:AF
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer:       /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial:       01A17D05112C835ACE1787DF6B933D3AD869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number:          12BC
Signing time:             Tue 27 Oct 2026 11:00:46 +0000
Manifest this update:     Tue 27 Oct 2026 11:00:46 +0000
Manifest next update:     Wed 28 Oct 2026 11:00:46 +0000
Files and hashes:         1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=)
                          2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=)
                          3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=)
                          4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=)
                          5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=)
                          6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=)
                          7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=)
                          8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=)
                          9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=)
                          10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=)
                          11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=)
                          12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=)
                          13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=)
                          14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=)
                          15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=)
                          16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=)
                          17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=)
                          18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=)
                          19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=)
                          20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=)
                          21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=)
                          22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=)
                          23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=)
                          24: l_tgLDCNZrHRnjXcJzOzh9Ra7zU.roa (hash: WLF0gi26G4abXssIlgwPYxZ0fPh4vIY0Whtl0Wq+kAc=)
                          25: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=)
                          26: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=)
                          27: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=)
                          28: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=)
                          29: yzcEtDsuhoVlqepC5qM8F6leCUM.roa (hash: fdNpYK0aALECclcn+M3fbLIQnh0ayHO1ffXu7375czM=)
                          30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: IK44UhGoJzsULixBSU0aDkMYSqXiLeGrF1hIjObntBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:05:11:2c:83:5a:ce:17:87:df:6b:93:3d:3a:d8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
        Validity
            Not Before: Oct 27 11:00:46 2026 GMT
            Not After : Oct 28 11:00:46 2026 GMT
        Subject: CN=fbf490d88ad5099e3ef73a869e68c3f5bcc1b4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:64:e2:e3:10:45:ba:55:a0:0f:3e:6c:5e:
                    49:09:db:7a:7c:66:74:94:3d:ee:42:95:b0:cf:a5:
                    e1:d1:91:f4:10:33:37:32:44:c3:11:04:35:a0:c8:
                    95:03:49:2e:ba:6b:d1:bb:34:70:30:92:9c:e9:09:
                    7f:dc:14:25:59:88:11:4b:02:75:8f:6b:47:a1:89:
                    2d:37:05:82:0e:ea:79:99:b7:a7:c8:35:ca:5a:ce:
                    a3:57:b7:a8:39:46:03:aa:29:ec:6a:b2:cd:6e:12:
                    5e:28:11:05:b6:b9:07:e8:50:bc:c3:24:dd:98:a1:
                    d4:29:df:31:c2:c3:11:ef:13:4e:df:a8:55:28:78:
                    8d:d7:6a:7f:fe:14:bb:23:44:56:6c:61:7a:a2:dc:
                    aa:13:60:aa:57:4e:d0:5d:4d:9c:96:1b:d7:66:f8:
                    57:16:4d:f1:b0:aa:98:b8:c5:b2:2c:2d:f2:6c:7f:
                    68:ed:b4:71:9a:eb:78:f5:8b:d9:ef:29:42:4d:a3:
                    ed:91:46:91:37:2a:8b:1e:a6:7c:5d:c8:a4:9e:51:
                    46:c6:60:a7:e2:82:ec:88:22:66:6a:15:c3:f2:28:
                    d5:e2:9d:e3:78:84:5b:c5:5f:f2:cf:39:ce:6a:9d:
                    06:e2:22:5e:a6:2a:89:22:28:2e:9c:bc:71:41:20:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F4:90:D8:8A:D5:09:9E:3E:F7:3A:86:9E:68:C3:F5:BC:C1:B4:AF
            X509v3 Authority Key Identifier:
                keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:1f:26:ef:58:d6:46:da:18:14:e9:6b:8e:b8:6a:a9:6b:
         29:ac:56:99:3b:dc:d0:f8:b4:c6:09:ee:d0:bf:d0:5b:e3:7e:
         9b:9a:3f:91:bf:e5:70:9c:e3:da:3e:b5:90:b3:da:f0:3f:48:
         fe:e6:61:49:93:5c:4b:0d:0c:3a:c1:29:d7:8a:ec:e7:6a:49:
         92:74:66:c5:dd:58:75:99:56:2e:ef:b6:e6:25:13:ed:0c:5b:
         19:b1:bf:8f:cc:5e:8e:97:7b:3f:33:2d:d7:ba:6b:ca:b1:86:
         02:98:fb:c1:3f:5d:09:a4:b1:5d:3b:c6:27:ce:46:f6:06:a3:
         e8:c2:c3:79:b3:2e:1a:80:5a:8d:34:82:30:f2:96:01:f6:32:
         1e:12:bd:6e:1e:d5:ec:6c:81:7f:ae:dd:0d:d9:5f:7b:38:fc:
         0f:8d:87:79:af:34:f5:8f:d0:66:67:16:55:80:9a:15:7c:c3:
         f6:9d:06:1c:4e:f1:63:ef:6a:a8:8c:e4:47:e5:5a:a2:9c:9f:
         aa:bb:8c:d1:f3:37:b1:b6:f5:51:46:d5:6b:b0:99:88:81:61:
         9e:18:63:87:59:5d:94:23:30:6b:56:26:c2:80:39:94:8c:2c:
         94:7f:e0:03:17:a1:f4:90:10:43:a4:2e:47:d4:25:2e:d5:9d:
         8a:4a:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:51:59 2026 by rpki-client