Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File:                     ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier:          8E9KwjHDO0KhB2GlV9ZybPeFdItJaYGsV2XZOhNFW18=
Subject key identifier:   B4:FE:AB:2D:FF:2C:06:DE:6F:3E:66:11:AB:09:D6:FA:09:E9:EA:C0
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer:       /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial:       019E1FEC47572B32AC7746C48AA3687D8BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number:          0BF9
Signing time:             Wed 13 May 2026 06:00:38 +0000
Manifest this update:     Wed 13 May 2026 06:00:38 +0000
Manifest next update:     Thu 14 May 2026 06:00:38 +0000
Files and hashes:         1: 4Kqssfz45wqKl4Y5usAP2cryF-s.roa (hash: VtsQh8EBUySqJ+8n7XXtvvG+r8GbNYVy0DLEl3LAFic=)
                          2: PlJpj7jP73E4zbfMxQODYMcp_7s.roa (hash: 6ejhDKH+4IAoIUxzT6kMmGZlbm0mSbrfcniUm7Rso6I=)
                          3: Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa (hash: Rrtw6rU9+BgwK1Mhs6SeDqlpBkER/cCVfCVvQJ88CfE=)
                          4: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: 0oCPSdYz8h2gQwPCdrjgyRvqZCL9n+cBEAcoJHA6dso=)
                          5: b1C1K0R4SsuxHJd-26aSi9G1s-s.roa (hash: UdNuNIgIX4vDZ6cHekj/pIxiG7gV3J4SuyTuh3WadyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:47:57:2b:32:ac:77:46:c4:8a:a3:68:7d:8b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
        Validity
            Not Before: May 13 06:00:38 2026 GMT
            Not After : May 14 06:00:38 2026 GMT
        Subject: CN=b4feab2dff2c06de6f3e6611ab09d6fa09e9eac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:dd:0a:b0:c6:a6:78:da:9b:4c:7b:96:66:
                    32:a7:71:63:f6:d0:dd:74:15:e3:6a:43:fe:9e:32:
                    35:71:98:d1:d7:28:c3:04:3c:6b:94:d3:e8:7b:5b:
                    91:17:5f:ef:8d:cc:ce:e9:f2:f9:85:42:8b:03:98:
                    15:a9:8b:ce:83:55:3c:fe:15:fe:ea:1a:b4:57:6c:
                    3d:b6:6e:81:6c:69:26:40:1e:f5:32:df:48:8f:67:
                    36:db:74:bf:40:7d:2c:76:16:f0:07:27:d9:14:f0:
                    be:94:b9:62:fe:8a:6b:a5:e9:e0:43:8f:ae:68:7a:
                    20:52:f3:98:a4:e6:d8:e3:13:09:10:2a:bb:d4:d9:
                    78:b0:fd:e4:8b:55:eb:84:ca:43:f2:36:6b:1c:74:
                    40:e1:1f:7a:14:6e:a1:0b:d8:ec:3a:8c:05:e9:59:
                    c3:6a:c8:21:e8:49:33:63:88:19:88:e4:f9:12:72:
                    f3:4c:5a:33:de:8f:e1:c2:1c:62:88:e3:38:45:27:
                    bd:c9:06:75:9a:38:ca:b4:b6:be:76:e2:b8:fa:28:
                    b5:9f:4a:46:40:3c:fc:4a:6f:6d:cc:e5:64:30:6f:
                    f3:88:01:44:34:8c:98:55:d5:be:f4:3a:5d:08:de:
                    c8:18:7a:d2:d5:a0:8a:c8:93:29:a3:f1:45:ff:49:
                    22:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:AB:2D:FF:2C:06:DE:6F:3E:66:11:AB:09:D6:FA:09:E9:EA:C0
            X509v3 Authority Key Identifier:
                keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:6b:e2:aa:2b:e8:57:80:9e:80:f4:6d:58:55:41:e9:76:
         be:46:5a:34:e3:94:c7:ba:64:9f:bf:b6:7a:aa:70:0c:70:53:
         2c:67:b5:1e:6f:93:ae:f1:36:47:3f:7e:ff:a3:81:44:9a:1b:
         2d:bd:5e:9f:0c:20:1e:8e:e1:75:89:49:b4:dd:20:5d:e2:52:
         48:03:41:80:cc:26:83:75:41:9b:5b:eb:f7:40:36:f6:e8:f7:
         e4:b9:7c:9c:7f:be:d0:5b:f1:34:9b:22:f9:30:e2:ee:e3:31:
         78:bf:ea:f7:1f:71:cf:d8:25:77:48:89:5a:74:26:00:c4:4d:
         d5:e7:d7:2c:c3:57:0a:2b:c6:02:f8:b6:82:e2:14:af:3d:60:
         8b:bf:66:7a:0b:22:c8:4a:35:5b:f4:a0:60:67:cc:17:f0:5f:
         fb:9c:c7:0e:6b:3c:38:85:ea:51:c3:79:e9:d9:fb:4c:bd:f5:
         44:4e:be:3f:54:ce:38:c8:35:4a:a6:27:ca:91:09:ef:ef:a5:
         57:4f:63:84:d9:a9:1d:d9:c0:a4:bc:06:94:f7:56:1a:70:17:
         35:1a:4a:49:58:ac:c7:53:85:99:db:62:73:32:74:75:26:a2:
         34:1f:e6:a7:ed:db:e0:d2:b0:81:36:e3:11:94:a7:6b:27:ae:
         6c:45:18:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7EdXKzKsd0bEiqNofYvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw
NGU1MzgwHhcNMjYwNTEzMDYwMDM4WhcNMjYwNTE0MDYwMDM4WjAzMTEwLwYDVQQD
EyhiNGZlYWIyZGZmMmMwNmRlNmYzZTY2MTFhYjA5ZDZmYTA5ZTllYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6/dCrDGpnjam0x7lmYyp3Fj9tDd
dBXjakP+njI1cZjR1yjDBDxrlNPoe1uRF1/vjczO6fL5hUKLA5gVqYvOg1U8/hX+
6hq0V2w9tm6BbGkmQB71Mt9Ij2c223S/QH0sdhbwByfZFPC+lLli/oprpengQ4+u
aHogUvOYpObY4xMJECq71Nl4sP3ki1XrhMpD8jZrHHRA4R96FG6hC9jsOowF6VnD
asgh6EkzY4gZiOT5EnLzTFoz3o/hwhxiiOM4RSe9yQZ1mjjKtLa+duK4+ii1n0pG
QDz8Sm9tzOVkMG/ziAFENIyYVdW+9DpdCN7IGHrS1aCKyJMpo/FF/0kigwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT+qy3/LAbebz5mEasJ1voJ6erAMB8GA1UdIwQY
MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt
NDIyYWVkM2E3NzAyLzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy
LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcdr4qor
6FeAnoD0bVhVQel2vkZaNOOUx7pkn7+2eqpwDHBTLGe1Hm+TrvE2Rz9+/6OBRJob
Lb1enwwgHo7hdYlJtN0gXeJSSANBgMwmg3VBm1vr90A29uj35Ll8nH++0FvxNJsi
+TDi7uMxeL/q9x9xz9gld0iJWnQmAMRN1efXLMNXCivGAvi2guIUrz1gi79megsi
yEo1W/SgYGfMF/Bf+5zHDms8OIXqUcN56dn7TL31RE6+P1TOOMg1SqYnypEJ7++l
V09jhNmpHdnApLwGlPdWGnAXNRpKSVisx1OFmdticzJ0dSaiNB/mp+3b4NKwgTbj
EZSnayeubEUYwg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:27:40 2026 by rpki-client