Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File:                     ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier:          +hQQa98URmuBiU8IJTu5WYwHd2HJJ9CEbJIpGqYygMY=
Subject key identifier:   23:8D:BF:23:EC:E4:72:C3:52:CD:36:3F:4B:0F:91:5C:52:71:DE:E4
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer:       /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial:       01A0D3B8ABF8B00011DB901A2319633F5294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number:          0E57
Signing time:             Thu 24 Sep 2026 14:01:30 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:30 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:30 +0000
Files and hashes:         1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
                          2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: J7ZW21yt/owwRlNt3UsfIr9ajkpmWrh1BjW4MO/YBb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:ab:f8:b0:00:11:db:90:1a:23:19:63:3f:52:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
        Validity
            Not Before: Sep 24 14:01:30 2026 GMT
            Not After : Sep 25 14:01:30 2026 GMT
        Subject: CN=238dbf23ece472c352cd363f4b0f915c5271dee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:c0:a8:b3:97:09:36:87:02:c6:ab:10:ed:
                    1a:33:b8:bd:81:91:31:bb:51:f8:71:43:ec:e7:ed:
                    39:83:e0:b4:4c:cd:54:7e:42:ab:d3:f0:98:0c:32:
                    63:d5:02:d4:33:17:57:d5:f9:2e:fe:fc:d1:71:52:
                    f4:de:26:0f:0c:1e:38:35:94:a3:0c:1d:8c:0e:56:
                    0e:23:66:8c:3e:6c:8a:ea:d2:08:e7:05:07:50:22:
                    31:98:0f:25:7f:b8:0e:b0:31:3a:6d:29:17:62:84:
                    ae:6c:4b:c4:17:29:81:c0:29:e2:40:53:15:f4:e6:
                    bc:e7:40:45:fa:10:53:03:62:e5:cc:e6:92:1e:3b:
                    8d:34:fd:6c:bd:7d:fe:ef:7b:74:85:06:6e:42:6e:
                    10:3c:8d:5d:05:36:77:07:dc:5c:e8:33:f7:6e:fc:
                    02:25:33:62:b7:e5:5e:ec:d7:72:5d:20:f5:85:87:
                    dc:2b:69:45:59:f9:38:9b:27:48:57:d7:ed:bf:9f:
                    7b:76:5d:1a:45:85:eb:7d:0c:41:22:c3:d2:be:60:
                    29:11:63:8b:c1:f6:b8:15:56:8a:8b:af:ed:b2:9d:
                    47:c8:c8:61:cf:05:7d:af:40:8d:e3:73:19:4f:aa:
                    ba:7d:81:4c:28:f0:a3:e5:7e:b9:50:1b:27:c2:4b:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8D:BF:23:EC:E4:72:C3:52:CD:36:3F:4B:0F:91:5C:52:71:DE:E4
            X509v3 Authority Key Identifier:
                keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:be:29:11:2d:eb:ff:a9:ed:d3:12:71:e5:e7:5a:8e:fb:f4:
         d1:ea:40:4b:0f:a4:ed:96:5e:96:6c:fd:4c:0c:0c:5c:90:fe:
         4d:54:e8:fc:62:96:ca:81:6a:fd:eb:d8:cb:4f:5d:a8:be:a6:
         19:b2:7d:26:36:81:64:01:e7:a7:1d:03:6f:3f:68:b2:d5:d4:
         b0:d6:9c:ca:8a:1f:72:93:9d:6d:fb:b0:2b:b5:58:ed:81:9f:
         bc:a5:17:c8:27:37:60:0e:9a:3d:58:19:a1:ea:39:15:fa:57:
         c7:e4:66:c4:25:0d:6f:bc:4a:a2:4e:b8:53:dc:93:b9:0a:46:
         d5:33:01:fb:08:ae:db:7c:15:a4:9d:30:e2:da:aa:cc:09:3b:
         8a:80:87:12:b7:08:28:80:3a:ac:52:b4:37:0d:8f:28:45:18:
         b9:2f:61:3f:be:f2:b0:84:12:4c:e7:83:de:eb:0d:52:34:cc:
         51:17:e6:97:6d:c2:07:74:00:1d:dd:79:33:43:f5:b7:fb:b7:
         30:57:36:80:96:c7:fb:2f:58:1c:d6:48:a2:97:7f:50:a0:d7:
         4a:9f:51:ff:85:fa:90:72:57:e0:03:83:a3:48:06:e5:9b:ec:
         3c:65:3b:44:1e:99:30:9a:68:70:78:f8:05:0e:97:23:71:6a:
         a4:89:41:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuKv4sAAR25AaIxljP1KUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy
NTIxYzcwHhcNMjYwOTI0MTQwMTMwWhcNMjYwOTI1MTQwMTMwWjAzMTEwLwYDVQQD
EygyMzhkYmYyM2VjZTQ3MmMzNTJjZDM2M2Y0YjBmOTE1YzUyNzFkZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF/AqLOXCTaHAsarEO0aM7i9gZEx
u1H4cUPs5+05g+C0TM1UfkKr0/CYDDJj1QLUMxdX1fku/vzRcVL03iYPDB44NZSj
DB2MDlYOI2aMPmyK6tII5wUHUCIxmA8lf7gOsDE6bSkXYoSubEvEFymBwCniQFMV
9Oa850BF+hBTA2LlzOaSHjuNNP1svX3+73t0hQZuQm4QPI1dBTZ3B9xc6DP3bvwC
JTNit+Ve7NdyXSD1hYfcK2lFWfk4mydIV9ftv597dl0aRYXrfQxBIsPSvmApEWOL
wfa4FVaKi6/tsp1HyMhhzwV9r0CN43MZT6q6fYFMKPCj5X65UBsnwkulYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCONvyPs5HLDUs02P0sPkVxScd7kMB8GA1UdIwQY
MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt
ZGVmZmZhNWYwNmUxLzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx
LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAb4pES3r
/6nt0xJx5edajvv00epASw+k7ZZelmz9TAwMXJD+TVTo/GKWyoFq/evYy09dqL6m
GbJ9JjaBZAHnpx0Dbz9ostXUsNacyoofcpOdbfuwK7VY7YGfvKUXyCc3YA6aPVgZ
oeo5FfpXx+RmxCUNb7xKok64U9yTuQpG1TMB+wiu23wVpJ0w4tqqzAk7ioCHErcI
KIA6rFK0Nw2PKEUYuS9hP77ysIQSTOeD3usNUjTMURfml23CB3QAHd15M0P1t/u3
MFc2gJbH+y9YHNZIopd/UKDXSp9R/4X6kHJX4AODo0gG5ZvsPGU7RB6ZMJpocHj4
BQ6XI3FqpIlBVA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:10:57 2026 by rpki-client