Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
File:                     ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft (raw, json)
Hash identifier:          Vga9JxaaSPggOxVGXLK3GnRWdXFGM+cvZQ3y2PE+cnU=
Subject key identifier:   1F:72:8B:86:06:2D:AE:78:7D:0E:58:A2:2E:8D:C8:59:38:41:97:95
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Certificate issuer:       /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial:       019E1E35AF7AD463AFE269C4129FB8E12B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
Manifest number:          0D15
Signing time:             Tue 12 May 2026 22:01:35 +0000
Manifest this update:     Tue 12 May 2026 22:01:35 +0000
Manifest next update:     Wed 13 May 2026 22:01:35 +0000
Files and hashes:         1: ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl (hash: KY+wiPRMoDnPZlsyYoChcImJsVB/mgUoTP8j+8XUv4Q=)
                          2: oAsWXs4gepUgdtyVum1Sl5zQ0yQ.roa (hash: On+gGjr8rTU+wqF8jInBbdR1DrtmCg/UcweFh0kLfjU=)
                          3: shLbklZTsl4AZPGv5XqOqviR4Fs.roa (hash: 3mVV646n9CiCww0apd2ZXdr2biN6kuu9VtbZKzpMXDk=)
                          4: wNWaeIo1EAzWYqKEsMEX14uNfGQ.roa (hash: pEDt/E1EsF0TWRhexvZPmk3z2Y8kiJZTlwVkYrWgB0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:af:7a:d4:63:af:e2:69:c4:12:9f:b8:e1:2b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
        Validity
            Not Before: May 12 22:01:35 2026 GMT
            Not After : May 13 22:01:35 2026 GMT
        Subject: CN=1f728b86062dae787d0e58a22e8dc85938419795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:a4:03:cd:a2:50:7b:09:52:ec:66:f0:24:
                    73:86:5a:96:e5:e6:6b:f5:64:fa:be:75:71:04:5c:
                    e1:46:4d:c6:a2:aa:b4:c4:9e:74:70:7c:a2:fd:68:
                    81:e0:3c:a7:4f:45:4b:1d:80:1a:1a:c0:27:84:77:
                    70:26:ee:3b:1b:45:17:41:e3:5b:a5:a3:73:15:03:
                    82:f2:b7:46:5a:f0:63:e3:d2:0b:5d:5c:ae:aa:5a:
                    2c:0d:34:58:1c:05:2c:53:f7:64:66:03:c9:e7:a6:
                    93:35:82:c9:58:33:ba:0c:92:65:8e:30:5a:29:66:
                    d1:b8:a1:fc:b1:57:70:e6:d5:25:dc:0a:17:87:6d:
                    cb:ea:ed:c0:51:ae:9b:cb:1f:4b:24:37:be:47:66:
                    44:47:14:43:c3:5d:8b:e7:14:18:5e:d7:8b:5f:65:
                    98:44:bd:44:d9:ec:35:65:a0:e4:b5:65:57:43:46:
                    41:c0:91:19:7a:80:37:ff:da:b5:a7:ac:47:ae:1f:
                    77:80:f7:bb:69:26:2c:53:52:21:25:b5:3f:07:78:
                    fc:63:bb:54:e4:03:47:3e:cb:78:c1:7e:42:ad:fa:
                    c9:fa:45:ab:69:1b:0f:e6:19:54:ed:68:d8:1d:42:
                    71:a4:ef:f7:13:a6:9d:2f:d2:a5:19:be:30:40:74:
                    85:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:8B:86:06:2D:AE:78:7D:0E:58:A2:2E:8D:C8:59:38:41:97:95
            X509v3 Authority Key Identifier:
                keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:13:bb:a0:8f:c1:e9:13:60:ef:3e:80:d5:c7:90:fc:3f:b8:
         0a:59:df:6d:8d:df:be:c4:45:de:56:1b:e7:5f:23:a5:d7:60:
         3d:6e:7d:91:f9:17:40:46:38:3a:96:88:54:20:5c:27:80:23:
         b0:2d:d5:2f:b9:13:8b:27:75:96:73:cf:71:5b:44:70:93:d6:
         63:2e:d2:0b:35:b1:a0:d2:55:68:96:18:cc:a2:88:aa:b6:e2:
         8d:1f:3f:05:aa:d4:f5:b1:b0:cd:51:03:03:0f:86:bb:a1:2b:
         37:b6:b7:11:e7:a9:25:79:8c:a3:0d:2c:22:07:b3:f3:a6:d9:
         25:80:ee:1e:42:34:30:6c:f1:50:41:7e:1f:30:60:f0:6e:6d:
         17:2a:61:80:83:08:3e:59:33:73:e2:1d:84:04:ba:fa:66:da:
         8a:06:58:3b:76:1e:26:e3:2e:c4:5a:6f:64:55:8f:50:8f:33:
         73:53:09:7f:17:13:9b:e7:ac:dc:e1:d4:20:dd:50:29:96:7c:
         8a:12:d4:55:71:98:b3:12:d6:d2:bf:58:ef:25:ed:59:e5:fd:
         f8:09:48:10:aa:96:71:cf:c9:7e:aa:04:75:a5:80:47:5d:a1:
         75:b1:0c:4d:86:fe:b6:b6:71:2b:c4:44:5d:7d:ab:2a:5d:e6:
         7b:cb:2d:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNa961GOv4mnEEp+44SuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NTJkMmNiNWE5ZThkNTY4OWZhZDY3YTk2MDUxNDljNmQ1
ZWY3YmEwHhcNMjYwNTEyMjIwMTM1WhcNMjYwNTEzMjIwMTM1WjAzMTEwLwYDVQQD
EygxZjcyOGI4NjA2MmRhZTc4N2QwZTU4YTIyZThkYzg1OTM4NDE5Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgSkA82iUHsJUuxm8CRzhlqW5eZr
9WT6vnVxBFzhRk3Goqq0xJ50cHyi/WiB4DynT0VLHYAaGsAnhHdwJu47G0UXQeNb
paNzFQOC8rdGWvBj49ILXVyuqlosDTRYHAUsU/dkZgPJ56aTNYLJWDO6DJJljjBa
KWbRuKH8sVdw5tUl3AoXh23L6u3AUa6byx9LJDe+R2ZERxRDw12L5xQYXteLX2WY
RL1E2ew1ZaDktWVXQ0ZBwJEZeoA3/9q1p6xHrh93gPe7aSYsU1IhJbU/B3j8Y7tU
5ANHPst4wX5CrfrJ+kWraRsP5hlU7WjYHUJxpO/3E6adL9KlGb4wQHSF7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9yi4YGLa54fQ5Yoi6NyFk4QZeVMB8GA1UdIwQY
MBaAFGVS0stano1WifrWepYFFJxtXve6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZMU3kxcWVqVmFKLXRaNmxnVVVuRzFlOTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kMWZhYzctN2M1Yi00ZmE2LWI3ZTUt
OWE1ZDhiYTdkODAzLzEvWlZMU3kxcWVqVmFKLXRaNmxnVVVuRzFlOTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kMWZhYzctN2M1Yi00ZmE2LWI3ZTUtOWE1ZDhiYTdkODAz
LzEvWlZMU3kxcWVqVmFKLXRaNmxnVVVuRzFlOTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRO7oI/B
6RNg7z6A1ceQ/D+4ClnfbY3fvsRF3lYb518jpddgPW59kfkXQEY4OpaIVCBcJ4Aj
sC3VL7kTiyd1lnPPcVtEcJPWYy7SCzWxoNJVaJYYzKKIqrbijR8/BarU9bGwzVED
Aw+Gu6ErN7a3EeepJXmMow0sIgez86bZJYDuHkI0MGzxUEF+HzBg8G5tFyphgIMI
Plkzc+IdhAS6+mbaigZYO3YeJuMuxFpvZFWPUI8zc1MJfxcTm+es3OHUIN1QKZZ8
ihLUVXGYsxLW0r9Y7yXtWeX9+AlIEKqWcc/JfqoEdaWAR12hdbEMTYb+trZxK8RE
XX2rKl3me8stBA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:06:56 2026 by rpki-client