Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          LBalIky5e0W+2C8ZyyJykuoiz0m8NNbgU3u4uLBfwiE=
Subject key identifier:   55:9D:FE:E3:01:2A:87:EB:F1:A0:08:86:BF:E7:18:86:4A:C2:E1:46
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       01A0D0119F92EC1DD082378BCCCBA253B0A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          135A
Signing time:             Wed 23 Sep 2026 21:00:10 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:10 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:10 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: T0NfvYjIeFXCFJDSTAs/Tz5WoShZfBF5/TxoP2Atrus=)
                          2: A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa (hash: ZJ8TUlGdBNBoCbzk5y55t6BbjVatJaYuCVCQyVMAmI0=)
                          3: Z03CvgZnFdZytl33-YciJtYTgkU.roa (hash: QAeqd5R10qGg/87fO27tsqGhGaG/xmcTXnHVP0UeCmo=)
                          4: mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa (hash: M+cnkCbpwUSVeDkZOpqH/x6dTTigBQw7I8bx8zhShTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:9f:92:ec:1d:d0:82:37:8b:cc:cb:a2:53:b0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Sep 23 21:00:10 2026 GMT
            Not After : Sep 24 21:00:10 2026 GMT
        Subject: CN=559dfee3012a87ebf1a00886bfe718864ac2e146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:70:03:b4:0e:e0:ed:d6:96:f3:8e:0b:8b:
                    07:45:91:97:50:e0:22:4a:e1:28:48:44:51:99:e5:
                    ba:ab:5b:2b:28:3c:86:e1:0e:b2:1d:05:84:6f:f8:
                    5b:95:25:cf:11:bc:25:6f:b6:4c:99:51:de:ee:f3:
                    e7:3d:68:c4:7a:42:1b:a6:cf:60:ed:f5:1f:7c:67:
                    42:39:6c:f2:db:bd:47:b1:05:82:d8:76:5b:c0:eb:
                    66:9f:5f:bb:2a:84:d1:3d:01:bc:ec:bf:8c:ca:05:
                    9b:f7:48:0d:cd:1a:ab:65:86:da:df:5a:33:bb:c9:
                    c0:10:59:83:ce:dd:a1:89:41:99:5f:56:2d:3e:57:
                    a4:73:b1:c8:6c:94:46:bd:52:2f:dd:6a:cd:12:c1:
                    86:92:ff:a5:26:68:19:23:95:15:38:dc:08:b8:74:
                    fe:01:71:00:11:d8:85:d3:eb:08:f7:ab:1f:f8:09:
                    a3:27:91:4a:09:8c:ef:a0:76:ae:32:7b:b3:84:b9:
                    31:0f:e1:67:ce:d5:99:20:31:66:f7:d2:5c:29:b6:
                    5e:fd:dd:10:7c:9a:8a:85:e0:c6:25:69:f6:51:de:
                    03:7a:62:d4:16:46:b4:40:62:e4:85:0e:70:5b:c7:
                    d6:dc:d5:e7:28:10:f8:48:be:f1:3b:cf:15:ca:d6:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9D:FE:E3:01:2A:87:EB:F1:A0:08:86:BF:E7:18:86:4A:C2:E1:46
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:96:d5:d5:b0:dd:c7:6b:ac:2f:86:15:12:c8:b3:40:89:
         7f:6e:2d:9b:81:70:b2:2b:60:82:3e:61:3b:27:cc:d6:55:83:
         b1:0a:97:7d:35:96:3c:ea:24:d2:bb:fa:ef:78:9b:5b:31:cb:
         30:d8:df:2b:d1:a2:a2:0e:14:4d:39:61:fd:bf:ba:b9:50:b9:
         f9:6e:08:08:8f:94:8d:0d:7a:db:aa:20:65:f0:52:1e:f8:0e:
         98:c3:06:65:99:c7:f0:a9:17:d1:8e:56:fe:de:71:d3:2e:70:
         b3:86:fb:f1:80:a6:e4:e9:98:f5:fc:e0:6b:ec:41:21:42:f4:
         58:40:59:ce:59:10:b5:9f:30:d2:db:78:02:45:be:05:30:f7:
         ef:ce:e5:db:65:28:89:5d:b3:47:05:2e:40:7f:7c:05:5b:c2:
         62:ae:3d:21:49:3f:8a:55:ff:dc:b7:e9:27:1e:5f:83:5c:48:
         e4:61:a0:d7:6b:ee:34:d5:0d:62:12:de:88:81:00:1a:5a:9a:
         ec:ac:cb:59:ec:5a:9c:98:eb:83:95:38:24:46:90:5b:dd:b8:
         3e:0f:ad:8f:44:38:e6:1f:94:69:4e:80:04:e8:c0:1b:5c:18:
         90:11:9f:c5:02:70:68:65:8b:2c:31:71:20:95:d5:bf:ad:5f:
         47:06:9a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEZ+S7B3QgjeLzMuiU7CiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5
NzM2MGEwHhcNMjYwOTIzMjEwMDEwWhcNMjYwOTI0MjEwMDEwWjAzMTEwLwYDVQQD
Eyg1NTlkZmVlMzAxMmE4N2ViZjFhMDA4ODZiZmU3MTg4NjRhYzJlMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVVwA7QO4O3WlvOOC4sHRZGXUOAi
SuEoSERRmeW6q1srKDyG4Q6yHQWEb/hblSXPEbwlb7ZMmVHe7vPnPWjEekIbps9g
7fUffGdCOWzy271HsQWC2HZbwOtmn1+7KoTRPQG87L+MygWb90gNzRqrZYba31oz
u8nAEFmDzt2hiUGZX1YtPlekc7HIbJRGvVIv3WrNEsGGkv+lJmgZI5UVONwIuHT+
AXEAEdiF0+sI96sf+AmjJ5FKCYzvoHauMnuzhLkxD+FnztWZIDFm99JcKbZe/d0Q
fJqKheDGJWn2Ud4DemLUFka0QGLkhQ5wW8fW3NXnKBD4SL7xO88VytatdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWd/uMBKofr8aAIhr/nGIZKwuFGMB8GA1UdIwQY
MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt
ZGVjMjFlZWZhMzhiLzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi
LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUCW1dWw
3cdrrC+GFRLIs0CJf24tm4Fwsitggj5hOyfM1lWDsQqXfTWWPOok0rv673ibWzHL
MNjfK9Giog4UTTlh/b+6uVC5+W4ICI+UjQ1626ogZfBSHvgOmMMGZZnH8KkX0Y5W
/t5x0y5ws4b78YCm5OmY9fzga+xBIUL0WEBZzlkQtZ8w0tt4AkW+BTD3787l22Uo
iV2zRwUuQH98BVvCYq49IUk/ilX/3LfpJx5fg1xI5GGg12vuNNUNYhLeiIEAGlqa
7KzLWexanJjrg5U4JEaQW924Pg+tj0Q45h+UaU6ABOjAG1wYkBGfxQJwaGWLLDFx
IJXVv61fRwaaqA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:04 2026 by rpki-client