Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File:                     zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier:          g/1SHkvh1GDco/f31GL2Non7GxIvkkvJdA2CFXZtAME=
Subject key identifier:   EE:38:0F:F4:25:9D:0A:E4:FA:BB:D0:69:B3:E9:BC:38:AF:40:C5:3E
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer:       /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial:       019E1F7ED516BC0F7DE789418E6803465A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number:          0F97
Signing time:             Wed 13 May 2026 04:01:06 +0000
Manifest this update:     Wed 13 May 2026 04:01:06 +0000
Manifest next update:     Thu 14 May 2026 04:01:06 +0000
Files and hashes:         1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
                          2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
                          3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: GwNeVlnZZZRNgIcZROkdarf6x17HC7Ewm7z9c/nc6+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:d5:16:bc:0f:7d:e7:89:41:8e:68:03:46:5a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
        Validity
            Not Before: May 13 04:01:06 2026 GMT
            Not After : May 14 04:01:06 2026 GMT
        Subject: CN=ee380ff4259d0ae4fabbd069b3e9bc38af40c53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:b0:80:95:72:dd:20:bc:2e:d2:56:2d:3f:
                    31:72:e3:2c:b2:28:53:3e:a6:d4:c7:bb:1f:be:87:
                    3c:d4:61:fe:2b:6c:32:58:c7:d7:a7:f1:73:35:cf:
                    0e:41:6c:bf:d8:eb:58:8b:78:dc:91:52:1a:14:ca:
                    3f:bc:2a:5e:f1:ae:df:44:d4:96:c2:fa:9a:1a:73:
                    7c:ab:ca:20:4d:c2:1e:a7:60:96:4c:06:c5:d3:64:
                    0b:8a:58:75:a8:d8:79:8c:d5:a6:49:e0:1f:ea:d9:
                    43:c7:ce:13:0a:f5:df:ad:83:56:2b:f9:c3:85:56:
                    a4:4b:47:19:69:0a:cf:4e:6c:97:72:88:0e:ea:99:
                    07:52:a5:9f:1b:b4:6f:0b:c2:26:92:c3:11:2e:72:
                    c5:0c:c7:30:04:d8:45:75:f6:d2:0c:de:e7:21:c9:
                    72:d8:f9:ac:26:6a:63:da:41:3a:f1:30:7d:76:de:
                    dd:bd:9b:25:bd:3f:7d:f3:e6:9b:5f:9f:4b:b5:63:
                    a0:4e:db:7f:55:e4:2c:23:28:da:4e:df:32:67:24:
                    10:44:28:aa:9a:ce:03:56:cf:e2:84:4e:d3:6a:34:
                    6a:56:41:10:b4:fc:58:9b:5f:f2:cc:e3:97:10:7f:
                    d2:c4:ba:02:64:ef:84:88:aa:ea:c1:3b:9c:65:97:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:38:0F:F4:25:9D:0A:E4:FA:BB:D0:69:B3:E9:BC:38:AF:40:C5:3E
            X509v3 Authority Key Identifier:
                keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:76:79:2b:2b:24:8d:1e:f3:4e:23:35:59:9d:6d:bb:88:7f:
         17:c7:c5:14:64:22:c4:88:e4:c5:c5:6b:fa:29:0b:3d:db:00:
         8e:9d:79:02:1f:0f:b1:54:3e:6d:2a:ee:a7:ef:9d:4a:05:aa:
         d5:a8:34:df:5a:90:bd:39:52:10:e5:33:a8:38:51:cf:79:a9:
         47:9d:47:8e:2d:69:c4:43:2e:f2:a5:93:33:6f:d8:be:4b:28:
         6c:bb:0d:0f:cc:35:2d:a4:fa:40:65:1d:41:5c:cd:c3:74:40:
         de:7d:b0:1b:8a:11:46:33:d6:02:ed:a2:f0:34:e5:cc:93:dd:
         e5:d0:69:de:ea:c9:78:83:69:1e:35:55:b0:a1:84:11:e9:76:
         bd:d4:9c:4b:50:5d:c7:d5:ab:99:48:4b:c8:c5:59:61:94:60:
         69:db:31:64:ed:75:f0:4b:d5:3d:44:83:2c:f5:93:ba:04:60:
         ba:8a:0f:03:9a:d1:a3:ef:c0:b6:40:70:77:7c:36:5a:fb:4a:
         bf:05:dd:a5:79:ad:68:49:79:cc:2c:1f:7d:62:9b:f5:2a:30:
         b8:e0:df:16:54:6b:25:87:ad:6c:30:00:f6:2f:37:50:c4:f6:
         2f:61:1f:bc:a9:6c:da:64:54:a1:18:79:5a:46:10:7b:fa:bb:
         7a:4f:36:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fftUWvA9954lBjmgDRlpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDYwMjM4ZDA2NjhkNDVhMDQxNjE4YWM1ZGY3NjdmNTlh
MGM0YWUwHhcNMjYwNTEzMDQwMTA2WhcNMjYwNTE0MDQwMTA2WjAzMTEwLwYDVQQD
EyhlZTM4MGZmNDI1OWQwYWU0ZmFiYmQwNjliM2U5YmMzOGFmNDBjNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1ywgJVy3SC8LtJWLT8xcuMssihT
PqbUx7sfvoc81GH+K2wyWMfXp/FzNc8OQWy/2OtYi3jckVIaFMo/vCpe8a7fRNSW
wvqaGnN8q8ogTcIep2CWTAbF02QLilh1qNh5jNWmSeAf6tlDx84TCvXfrYNWK/nD
hVakS0cZaQrPTmyXcogO6pkHUqWfG7RvC8ImksMRLnLFDMcwBNhFdfbSDN7nIcly
2PmsJmpj2kE68TB9dt7dvZslvT998+abX59LtWOgTtt/VeQsIyjaTt8yZyQQRCiq
ms4DVs/ihE7TajRqVkEQtPxYm1/yzOOXEH/SxLoCZO+EiKrqwTucZZfc/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO44D/QlnQrk+rvQabPpvDivQMU+MB8GA1UdIwQY
MBaAFM0GAjjQZo1FoEFhisXfdn9ZoMSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYt
N2ZiNmVhODk2MzdmLzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYtN2ZiNmVhODk2Mzdm
LzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHZ5Kysk
jR7zTiM1WZ1tu4h/F8fFFGQixIjkxcVr+ikLPdsAjp15Ah8PsVQ+bSrup++dSgWq
1ag031qQvTlSEOUzqDhRz3mpR51Hji1pxEMu8qWTM2/YvksobLsND8w1LaT6QGUd
QVzNw3RA3n2wG4oRRjPWAu2i8DTlzJPd5dBp3urJeINpHjVVsKGEEel2vdScS1Bd
x9WrmUhLyMVZYZRgadsxZO118EvVPUSDLPWTugRguooPA5rRo+/AtkBwd3w2WvtK
vwXdpXmtaEl5zCwffWKb9SowuODfFlRrJYetbDAA9i83UMT2L2EfvKls2mRUoRh5
WkYQe/q7ek824A==
-----END CERTIFICATE-----
Generated at Wed May 13 10:02:59 2026 by rpki-client