Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
File:                     Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json)
Hash identifier:          8yAFRJeqHkkGH6aY8IAO4PJCl34FQDOvACva9CpZU98=
Subject key identifier:   C7:85:EE:E0:2F:42:2F:E7:3A:B3:03:D8:E1:CA:2D:16:EE:7C:70:35
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Certificate issuer:       /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial:       01A1DE7049484612A520A11986EFD17A2772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
Manifest number:          1830
Signing time:             Sun 15 Nov 2026 09:01:03 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:03 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:03 +0000
Files and hashes:         1: 0BfNXiDldo_liimaTypuMTcMOSA.roa (hash: qvgGIW8CiOWBIcpNa0moqJ+GSYLQ2vJbJF4fgORjC18=)
                          2: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (hash: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0=)
                          3: 1-DJULH3ZwYfARcWJFOAy7L08L0o.roa (hash: uzSvKMA/ek9jjzwiFTQKtBUiZnp+CdlB8u/4bLmjAWk=)
                          4: 2aBOuFf59wEBwbLziedpbp6FKYk.roa (hash: ZSpI5dlzWjQXy3Cna9NEiVVPFJtukMRorD24Z+VlJdk=)
                          5: 5ThevNNgZHzDF50h6krEfv1b2To.roa (hash: CbU07lcvi4HJ1brlMc0otrEIMctgZ4JB+I2bCfPEqZk=)
                          6: MqZHWBmMNelEjKHD9rL777ZFFPQ.roa (hash: JT8l5waJdgBD+v5IZbCIxziinVIIlhSs3+boP+bJ1mw=)
                          7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: G+qAyXT1M85HzAeP5U68PSJPrtocowNXAh8QbpEthWk=)
                          8: aL6bUGTHkpcHHWs-Po3_bkcw8N0.roa (hash: ri9rtr5v6mxkEnUcDShGl6eVFOsXr78RXTrqI9KwgSM=)
                          9: jVIXwWQgWKZwGuSur5EA3NGOqW0.roa (hash: TF50UjRhC15wTuIUutY/LAyF28bPXMS3BlWJSGn8Kts=)
                          10: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (hash: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY=)
                          11: uTfCplkKF4NNKr9z0oAQOp5Z6bQ.roa (hash: lIrYsFTfLPn7qzWjWmqg9roRmjTFishbKowqgCzglJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:49:48:46:12:a5:20:a1:19:86:ef:d1:7a:27:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
        Validity
            Not Before: Nov 15 09:01:03 2026 GMT
            Not After : Nov 16 09:01:03 2026 GMT
        Subject: CN=c785eee02f422fe73ab303d8e1ca2d16ee7c7035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:03:2a:ad:9e:24:21:e0:2d:1a:17:8b:10:
                    de:b3:fd:cd:e6:36:57:cb:cd:22:a9:03:b6:da:02:
                    6d:2b:a0:07:35:2b:04:c1:f0:ac:16:3b:7f:9d:9f:
                    ad:c7:69:92:cf:f5:9d:69:ad:5b:e1:61:ce:ae:c7:
                    9f:2e:a7:a8:00:de:f1:60:6f:53:0b:37:1d:95:31:
                    99:e0:c3:f0:06:2c:fa:c1:f2:c1:96:b6:7b:ac:58:
                    61:4f:02:fb:00:7b:d1:72:c9:8b:ab:49:aa:c9:44:
                    f0:6d:47:ef:5e:c5:53:45:6a:a0:a9:15:13:c1:27:
                    56:de:25:46:19:58:6a:56:b3:5f:76:c6:09:a9:6b:
                    31:09:e6:04:8b:3c:e8:61:2c:bb:63:af:b6:44:b3:
                    dd:9f:53:62:32:0f:a1:65:b0:d2:dc:67:1b:59:83:
                    5f:f4:5d:bc:cf:e9:6c:7b:5e:59:6b:e3:5e:4c:06:
                    db:08:ef:e1:5f:fe:d3:c2:c5:3d:84:fa:ff:5c:46:
                    8e:6d:0d:97:cd:67:4e:c9:ab:60:f5:86:8a:29:c2:
                    38:47:02:64:3f:15:51:53:6f:6b:4b:c0:20:bb:8d:
                    0e:16:03:2f:2e:74:c1:e9:19:20:27:e5:33:57:09:
                    1f:a7:9b:16:17:5e:4e:3b:e6:0e:2e:8e:e0:18:63:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:EE:E0:2F:42:2F:E7:3A:B3:03:D8:E1:CA:2D:16:EE:7C:70:35
            X509v3 Authority Key Identifier:
                keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ba:6a:16:1f:70:7a:80:cc:3c:8b:9a:6d:af:3b:a0:f0:32:
         9d:f4:82:c8:f1:6e:ff:ac:c5:a8:fd:d0:22:c9:62:2c:e5:6c:
         4c:ed:9e:41:63:50:d9:00:88:20:6f:14:d1:dd:7c:9f:9f:f9:
         f0:a3:12:8b:6e:69:ef:b0:c5:5e:0e:7e:25:35:1a:d2:29:34:
         16:21:51:2e:40:4e:71:ee:f5:6d:8e:a3:c1:66:d5:35:34:a6:
         53:c0:44:a0:17:00:1f:e4:95:a4:d9:91:9f:66:22:3d:e7:15:
         52:e1:65:c1:da:81:ec:73:8f:a0:98:86:10:1f:42:5a:07:98:
         ae:1a:e3:66:cf:17:33:51:9d:92:33:b8:b6:2c:55:1d:13:e1:
         5c:6b:55:67:78:f3:8f:b9:5e:a8:74:dc:8e:49:76:64:fa:72:
         8e:89:1d:43:8b:e2:fb:a4:ff:f0:b5:d4:a9:b9:d2:a8:c1:a6:
         25:f5:eb:d8:1e:a4:5e:77:cd:f8:aa:82:4c:35:80:e5:26:45:
         03:8a:ff:4e:c2:cb:0c:61:68:eb:c7:c2:32:06:c7:8a:f9:fd:
         cd:0a:eb:d8:dd:f3:88:ec:c0:0b:20:9f:46:d3:ad:4a:05:59:
         9d:21:44:2e:71:3e:50:e4:63:9a:01:bf:a4:d6:b4:82:35:8d:
         54:ac:87:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecElIRhKlIKEZhu/ReidyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5
ZDcwNmEwHhcNMjYxMTE1MDkwMTAzWhcNMjYxMTE2MDkwMTAzWjAzMTEwLwYDVQQD
EyhjNzg1ZWVlMDJmNDIyZmU3M2FiMzAzZDhlMWNhMmQxNmVlN2M3MDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9QDKq2eJCHgLRoXixDes/3N5jZX
y80iqQO22gJtK6AHNSsEwfCsFjt/nZ+tx2mSz/Wdaa1b4WHOrsefLqeoAN7xYG9T
CzcdlTGZ4MPwBiz6wfLBlrZ7rFhhTwL7AHvRcsmLq0mqyUTwbUfvXsVTRWqgqRUT
wSdW3iVGGVhqVrNfdsYJqWsxCeYEizzoYSy7Y6+2RLPdn1NiMg+hZbDS3GcbWYNf
9F28z+lse15Za+NeTAbbCO/hX/7TwsU9hPr/XEaObQ2XzWdOyatg9YaKKcI4RwJk
PxVRU29rS8Agu40OFgMvLnTB6RkgJ+UzVwkfp5sWF15OO+YOLo7gGGO16QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeF7uAvQi/nOrMD2OHKLRbufHA1MB8GA1UdIwQY
MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt
YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3
LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7pqFh9w
eoDMPIuaba87oPAynfSCyPFu/6zFqP3QIsliLOVsTO2eQWNQ2QCIIG8U0d18n5/5
8KMSi25p77DFXg5+JTUa0ik0FiFRLkBOce71bY6jwWbVNTSmU8BEoBcAH+SVpNmR
n2YiPecVUuFlwdqB7HOPoJiGEB9CWgeYrhrjZs8XM1GdkjO4tixVHRPhXGtVZ3jz
j7leqHTcjkl2ZPpyjokdQ4vi+6T/8LXUqbnSqMGmJfXr2B6kXnfN+KqCTDWA5SZF
A4r/TsLLDGFo68fCMgbHivn9zQrr2N3ziOzACyCfRtOtSgVZnSFELnE+UORjmgG/
pNa0gjWNVKyH7g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:33:34 2026 by rpki-client