Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
File:                     e2nv5gFvctRZLxsLq5GGR2_zop0.mft (raw, json)
Hash identifier:          Kj/660eADZC+irHPPJM9xQXNNQN2MDKX9CR6ZQ+S76Q=
Subject key identifier:   B5:8F:B1:16:3F:48:B2:06:D3:2D:65:4E:09:F5:49:AE:8D:BF:4F:35
Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
Certificate issuer:       /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
Certificate serial:       01A0D493E57A1EA7E6AC1F89A23A4E3609A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
Manifest number:          027D
Signing time:             Thu 24 Sep 2026 18:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 18:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 18:00:57 +0000
Files and hashes:         1: DhhEzrCSvtlaHslOfzFqY95aZ90.roa (hash: VOvJoF9EWNuxMkJTKQzWpsIdU1FWWr51hxl56iJSfuY=)
                          2: ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa (hash: KJYnqYyOofOZzadxEkB/wfQ8LlG+IKUvm99MnwqJGO4=)
                          3: X1S1z6CrzJkdF4dCeCm-se-s4J8.roa (hash: Y5udF7iCsk7tkEh52H+ceEwvOnXrZWaMJVMZZgF25Vw=)
                          4: e2nv5gFvctRZLxsLq5GGR2_zop0.crl (hash: kaHomTaWvY2yxCKJnJPMiCYWb9Fyt251TB78OVkf5Y0=)
                          5: oNyVV9F-UayJsBNMERK1JiJ0D7o.roa (hash: k7jOjhLjlTb4tvt1HZS9xHgB6yHXR3vwiFuwHTGcB/0=)
                          6: pwN-2lFR66jS8tzjgg4a5hQ9SZc.roa (hash: vx5holsz8fk1dc3w+YKiWzzSNZ1ZzCCUAaCQLnUJmIY=)
                          7: r23QCb42Tz1gHCNmFF9MYh0kkS0.roa (hash: ULoM0qs6keKyvA3e5JZk0wAwuCLfnphbYK3aR4+GSfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:93:e5:7a:1e:a7:e6:ac:1f:89:a2:3a:4e:36:09:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
        Validity
            Not Before: Sep 24 18:00:57 2026 GMT
            Not After : Sep 25 18:00:57 2026 GMT
        Subject: CN=b58fb1163f48b206d32d654e09f549ae8dbf4f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a3:4a:a3:7f:46:91:25:03:f3:fa:2d:3a:9b:
                    31:4d:3d:c4:d7:20:4f:86:1d:6e:05:20:e5:a2:26:
                    29:21:5d:1d:77:80:53:d8:c6:e3:7a:10:2a:03:0d:
                    3a:44:ac:5f:9f:68:c3:f8:c3:36:ba:70:f5:44:a4:
                    7e:6b:e9:61:eb:08:e6:e0:e0:9c:a0:34:be:ee:e9:
                    e4:54:7c:a5:23:26:cb:58:e9:9e:48:2b:96:4d:9c:
                    93:89:22:7e:a5:fa:97:53:61:6b:84:f7:67:9a:d9:
                    f8:b6:04:c9:91:e1:f3:20:cf:07:93:09:93:f3:61:
                    7d:a7:0c:d8:6c:79:0f:91:01:b5:41:42:8b:53:50:
                    a0:c2:db:d4:2a:38:c8:31:c5:25:e4:19:01:9b:43:
                    1d:1e:8f:e9:94:de:ad:1f:b0:b1:07:77:07:46:a6:
                    9d:a6:84:1a:df:d3:d8:2f:ee:ac:0a:1f:0d:b7:67:
                    10:4c:20:44:58:30:80:b1:27:e0:2a:9c:5a:30:aa:
                    e4:33:0c:7d:27:4d:96:4f:19:47:94:52:56:21:59:
                    66:1d:a9:77:1f:dc:27:91:66:1d:57:05:d2:18:b2:
                    d9:f2:a6:be:46:62:ee:9b:49:8d:9e:ef:8b:52:a3:
                    5d:53:8b:ca:e7:cf:58:b9:d0:c9:22:bd:e8:3c:8a:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:B1:16:3F:48:B2:06:D3:2D:65:4E:09:F5:49:AE:8D:BF:4F:35
            X509v3 Authority Key Identifier:
                keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:a2:f2:45:04:ad:83:27:b3:85:98:49:a3:bb:48:da:41:
         8e:75:c4:9f:72:5e:32:37:65:6f:ba:29:7e:d7:22:b4:b7:1b:
         32:82:f8:48:3d:89:21:bf:b6:32:82:b8:cf:eb:67:de:a1:b8:
         c2:b8:81:38:4a:d7:04:cc:76:8d:ed:f9:46:c5:9b:1a:5b:1e:
         08:48:6b:39:60:0f:a9:4e:ed:a9:cf:e0:ab:02:4f:50:5e:6e:
         6c:64:33:7d:05:00:ce:fc:9a:7e:d9:10:9d:6b:31:28:a2:ce:
         b2:7a:c4:30:25:6c:a3:3b:26:36:64:a3:6d:b5:33:f8:ab:73:
         15:6b:20:ad:ec:e9:39:ef:73:d9:3e:ad:f2:39:63:11:11:1b:
         74:93:39:06:5f:a3:bc:f3:b9:bf:d7:78:d2:9f:6b:aa:81:e7:
         d8:49:70:19:d6:bf:d6:97:2d:ce:3c:26:72:69:25:14:83:13:
         1f:ac:10:35:da:f4:9e:45:70:92:39:2c:91:83:27:7b:21:6d:
         00:4f:13:7e:f7:1b:28:4a:d5:29:60:29:f8:5d:cc:33:66:8d:
         f9:fc:dd:ea:e2:f4:0d:12:10:c0:70:56:87:62:45:1a:2d:e8:
         d4:dc:18:81:b0:8e:dc:50:94:4c:a6:ca:b4:19:b8:d6:64:6c:
         df:b8:23:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUk+V6HqfmrB+JojpONgmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNjllZmU2MDE2ZjcyZDQ1OTJmMWIwYmFiOTE4NjQ3NmZm
M2EyOWQwHhcNMjYwOTI0MTgwMDU3WhcNMjYwOTI1MTgwMDU3WjAzMTEwLwYDVQQD
EyhiNThmYjExNjNmNDhiMjA2ZDMyZDY1NGUwOWY1NDlhZThkYmY0ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46NKo39GkSUD8/otOpsxTT3E1yBP
hh1uBSDloiYpIV0dd4BT2MbjehAqAw06RKxfn2jD+MM2unD1RKR+a+lh6wjm4OCc
oDS+7unkVHylIybLWOmeSCuWTZyTiSJ+pfqXU2FrhPdnmtn4tgTJkeHzIM8HkwmT
82F9pwzYbHkPkQG1QUKLU1CgwtvUKjjIMcUl5BkBm0MdHo/plN6tH7CxB3cHRqad
poQa39PYL+6sCh8Nt2cQTCBEWDCAsSfgKpxaMKrkMwx9J02WTxlHlFJWIVlmHal3
H9wnkWYdVwXSGLLZ8qa+RmLum0mNnu+LUqNdU4vK589YudDJIr3oPIoRVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWPsRY/SLIG0y1lTgn1Sa6Nv081MB8GA1UdIwQY
MBaAFHtp7+YBb3LUWS8bC6uRhkdv86KdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYt
MWQ4YjlhMWFhNGFkLzEvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYtMWQ4YjlhMWFhNGFk
LzEvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2ii8kUE
rYMns4WYSaO7SNpBjnXEn3JeMjdlb7opftcitLcbMoL4SD2JIb+2MoK4z+tn3qG4
wriBOErXBMx2je35RsWbGlseCEhrOWAPqU7tqc/gqwJPUF5ubGQzfQUAzvyaftkQ
nWsxKKLOsnrEMCVsozsmNmSjbbUz+KtzFWsgrezpOe9z2T6t8jljEREbdJM5Bl+j
vPO5v9d40p9rqoHn2ElwGda/1pctzjwmcmklFIMTH6wQNdr0nkVwkjkskYMneyFt
AE8TfvcbKErVKWAp+F3MM2aN+fzd6uL0DRIQwHBWh2JFGi3o1NwYgbCO3FCUTKbK
tBm41mRs37gjLQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:13:14 2026 by rpki-client