Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File:                     ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier:          i4G2KDrSDHbEub0IjXuEMBKkUCgtbSMiMhyzYE2V6f4=
Subject key identifier:   1F:45:30:4A:C9:07:62:1A:ED:BC:39:CB:BE:75:57:DF:08:50:B9:CB
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer:       /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial:       01A0FE34E927638539198BAAD5E012516897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number:          120E
Signing time:             Fri 02 Oct 2026 20:01:15 +0000
Manifest this update:     Fri 02 Oct 2026 20:01:15 +0000
Manifest next update:     Sat 03 Oct 2026 20:01:15 +0000
Files and hashes:         1: GwZ9dNA86AIDNnsAq70FiAkZYj8.roa (hash: qnSiAyQRIBiRzYavimYlFJSyS25EakQKaTIGVx1R3tU=)
                          2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: hKrKGFxIaIVZ69jNIcnYHwUEeZQ6WDjE6BWq2XidZH8=)
                          3: irQyC0ot9r4PxzPSLvST2QH-X0Q.roa (hash: kwnqay2aLOiYKa/WS1eZrTNeCkIkn0WSXDieMB7/M7Y=)
                          4: yw5w5uCdPdnhgVsaZXUZ6mCgC8k.roa (hash: /944unZ7CSMOwiuR6yhIgpH4mt1fcLA58yVZkErRY/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fe:34:e9:27:63:85:39:19:8b:aa:d5:e0:12:51:68:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
        Validity
            Not Before: Oct  2 20:01:15 2026 GMT
            Not After : Oct  3 20:01:15 2026 GMT
        Subject: CN=1f45304ac907621aedbc39cbbe7557df0850b9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:a5:0e:44:0a:d9:7d:49:5a:ee:9a:86:f9:
                    a1:be:fd:18:16:90:56:d5:5b:a0:f3:62:69:10:0f:
                    77:91:5b:ff:5f:11:05:33:d4:35:64:32:1e:81:31:
                    89:7c:63:29:b9:12:5e:67:42:11:59:87:65:fe:67:
                    ac:14:5a:18:9b:8e:5a:89:90:42:a4:d0:48:38:1a:
                    7c:44:f8:34:b7:91:58:ef:7f:23:40:78:c2:fa:83:
                    36:34:f1:5d:a0:5c:25:47:b4:56:11:60:d8:01:8e:
                    29:3d:c6:b0:d1:42:fe:5f:7f:75:6b:af:fb:36:54:
                    88:66:7c:16:0e:66:aa:63:51:30:c6:40:8c:9b:0c:
                    09:39:1f:4d:2f:f8:2c:e4:61:d3:99:1d:06:42:22:
                    25:40:c9:93:04:50:a2:3f:f4:4d:70:32:05:93:b9:
                    dd:55:21:12:7c:79:05:ce:80:d5:f4:a8:c6:b6:a2:
                    aa:d4:fa:7a:be:67:0b:9c:da:76:29:48:ab:91:12:
                    f6:8a:80:6f:09:c6:79:5f:35:1b:a7:7b:23:a0:70:
                    4f:b6:58:fc:11:a1:9f:07:5a:09:71:ee:9e:31:38:
                    b4:53:25:13:c4:e0:a9:a6:e7:3e:80:9c:29:93:6c:
                    a5:cd:b3:2e:27:e2:18:a3:4b:91:4d:fd:66:1a:7a:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:45:30:4A:C9:07:62:1A:ED:BC:39:CB:BE:75:57:DF:08:50:B9:CB
            X509v3 Authority Key Identifier:
                keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:5e:0d:0b:a2:ab:14:0b:89:ab:54:70:df:f7:ae:99:0c:
         a4:2f:c4:6e:24:43:23:26:3d:e3:22:38:8c:e6:74:fd:21:30:
         15:3e:d7:75:7a:db:19:71:b9:5c:45:45:26:ff:64:b1:5d:81:
         85:f4:60:f6:c4:04:6e:56:2b:40:ae:4b:b8:c2:f5:45:82:79:
         e1:5f:89:68:0d:37:99:a2:a1:7b:e9:d7:1c:8e:a8:70:c4:10:
         42:8d:52:72:8a:d6:d2:1c:f5:f5:db:93:ba:bd:58:d2:b7:da:
         2d:bf:67:bc:5a:60:22:20:9a:e9:a3:d7:bf:d2:30:a1:37:98:
         24:5d:c6:77:6c:36:a2:83:10:8e:a4:8f:93:e8:a9:0b:cc:ff:
         da:72:1b:cb:d9:9e:67:4e:d5:f3:a2:bf:d5:a6:1f:af:6e:e7:
         3d:7b:4e:c6:60:a8:54:7c:a1:37:85:cb:7c:29:4c:bd:68:19:
         30:e3:de:66:fc:a0:6e:10:cc:a5:90:d0:44:91:67:26:c3:f8:
         1b:b1:62:fb:6c:6f:b6:e2:c5:5e:ac:40:88:2f:b8:77:02:f1:
         2b:4c:ec:59:da:5e:d8:f0:ae:f4:0e:2d:17:0e:27:c0:31:ee:
         bf:11:e6:f4:c2:27:f5:56:de:1b:9c:ed:61:50:58:81:e7:31:
         35:e2:01:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD+NOknY4U5GYuq1eASUWiXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OGMwYzQ5OWE4ZTY5ZDk3OTVmNGJkMGI1YmYxNjgyYjFm
MDBmOWEwHhcNMjYxMDAyMjAwMTE1WhcNMjYxMDAzMjAwMTE1WjAzMTEwLwYDVQQD
EygxZjQ1MzA0YWM5MDc2MjFhZWRiYzM5Y2JiZTc1NTdkZjA4NTBiOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIalDkQK2X1JWu6ahvmhvv0YFpBW
1Vug82JpEA93kVv/XxEFM9Q1ZDIegTGJfGMpuRJeZ0IRWYdl/mesFFoYm45aiZBC
pNBIOBp8RPg0t5FY738jQHjC+oM2NPFdoFwlR7RWEWDYAY4pPcaw0UL+X391a6/7
NlSIZnwWDmaqY1EwxkCMmwwJOR9NL/gs5GHTmR0GQiIlQMmTBFCiP/RNcDIFk7nd
VSESfHkFzoDV9KjGtqKq1Pp6vmcLnNp2KUirkRL2ioBvCcZ5XzUbp3sjoHBPtlj8
EaGfB1oJce6eMTi0UyUTxOCppuc+gJwpk2ylzbMuJ+IYo0uRTf1mGnrDvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9FMErJB2Ia7bw5y751V98IULnLMB8GA1UdIwQY
MBaAFGWMDEmajmnZeV9L0LW/FoKx8A+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWll3TVNacU9hZGw1WDB2UXRiOFdnckh3RDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNjY5MTMtOGY1Zi00N2VmLWE3MzAt
MzJjMWIyY2VlNTkzLzEvWll3TVNacU9hZGw1WDB2UXRiOFdnckh3RDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNjY5MTMtOGY1Zi00N2VmLWE3MzAtMzJjMWIyY2VlNTkz
LzEvWll3TVNacU9hZGw1WDB2UXRiOFdnckh3RDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkpeDQui
qxQLiatUcN/3rpkMpC/EbiRDIyY94yI4jOZ0/SEwFT7XdXrbGXG5XEVFJv9ksV2B
hfRg9sQEblYrQK5LuML1RYJ54V+JaA03maKhe+nXHI6ocMQQQo1ScorW0hz19duT
ur1Y0rfaLb9nvFpgIiCa6aPXv9IwoTeYJF3Gd2w2ooMQjqSPk+ipC8z/2nIby9me
Z07V86K/1aYfr27nPXtOxmCoVHyhN4XLfClMvWgZMOPeZvygbhDMpZDQRJFnJsP4
G7Fi+2xvtuLFXqxAiC+4dwLxK0zsWdpe2PCu9A4tFw4nwDHuvxHm9MIn9VbeG5zt
YVBYgecxNeIB2w==
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:28:49 2026 by rpki-client