Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File:                     ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier:          z/pOtfXubtnZrzMB0mO+IILk0I42SmorbBHoozoVnBw=
Subject key identifier:   ED:BF:C1:04:87:B0:79:6E:B0:14:81:71:1D:48:79:B3:03:FD:6C:81
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer:       /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial:       01A0D3F0B7FDDDE56FEA403BF010FC3BE275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number:          08E9
Signing time:             Thu 24 Sep 2026 15:02:43 +0000
Manifest this update:     Thu 24 Sep 2026 15:02:43 +0000
Manifest next update:     Fri 25 Sep 2026 15:02:43 +0000
Files and hashes:         1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: m3EOdA6uoXVo6meLDKZm5wPC6EbGzxzOShQvkQkTcM4=)
                          2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:f0:b7:fd:dd:e5:6f:ea:40:3b:f0:10:fc:3b:e2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
        Validity
            Not Before: Sep 24 15:02:43 2026 GMT
            Not After : Sep 25 15:02:43 2026 GMT
        Subject: CN=edbfc10487b0796eb01481711d4879b303fd6c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:39:a2:2d:a6:30:43:78:a6:27:4f:43:e8:
                    64:96:96:81:9c:b2:af:55:6d:49:e9:7c:89:79:fc:
                    67:e6:b7:c2:43:b6:2f:7d:d5:fc:64:1a:46:f7:36:
                    27:d7:3d:b5:aa:a8:24:75:88:df:c0:ca:fd:e2:fa:
                    2d:4a:df:0d:c1:75:58:f0:2a:a0:68:02:29:17:42:
                    09:59:5a:14:47:e7:2f:de:eb:bf:90:ef:4c:2c:ee:
                    84:27:1d:6e:91:2d:c5:ad:de:b2:c7:99:d6:41:a5:
                    fe:40:79:61:9d:6f:9c:db:08:02:ab:d6:ca:37:1f:
                    4f:ea:ee:90:8f:50:e5:94:35:70:93:ed:52:2f:64:
                    6b:02:a9:18:76:7c:d3:c3:eb:56:b4:6b:69:b6:aa:
                    09:24:8f:84:de:f2:e9:71:1f:79:ab:72:74:66:6b:
                    d4:37:70:8a:05:4b:92:fd:4f:57:ea:ec:a9:e7:4f:
                    41:7f:fd:a6:a7:0e:6b:bf:f0:a7:2e:5d:37:c1:9e:
                    0e:4b:11:1a:98:4f:5c:04:47:f3:f2:cf:7d:a2:7e:
                    bd:2c:cd:18:ca:ed:9c:b7:3e:15:dd:47:98:37:f6:
                    42:3e:83:48:a4:e1:7e:fa:85:a9:04:00:1f:c5:78:
                    16:f2:eb:b7:f2:d3:4a:f5:09:f4:f0:cc:1e:ca:2a:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BF:C1:04:87:B0:79:6E:B0:14:81:71:1D:48:79:B3:03:FD:6C:81
            X509v3 Authority Key Identifier:
                keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5a:9e:50:0f:2c:4a:fd:6a:b2:2b:cd:10:71:0c:dd:65:43:
         ad:ac:33:af:a4:47:74:b4:ee:2b:68:da:ed:6c:60:f8:bd:28:
         8e:e9:9d:ae:87:5f:d2:f4:12:8d:7e:44:12:11:b1:06:96:75:
         9d:12:ef:b6:f6:44:06:4f:d3:7e:9d:f1:6a:60:11:a1:41:2e:
         e6:61:c7:7d:7c:81:61:a4:5b:d5:4e:29:73:24:42:2e:3f:eb:
         43:c1:c5:70:3f:c0:90:98:e6:6d:05:ba:d6:4f:5d:ac:ed:e4:
         46:d7:cb:04:03:ac:65:ef:d3:7c:45:20:e2:91:64:da:99:5d:
         03:ae:4a:b6:6d:e9:d2:4f:96:21:ef:52:23:a1:49:48:26:87:
         3f:d5:32:33:73:de:d6:4f:c4:96:fa:59:2d:6c:cb:41:70:03:
         7f:f6:03:01:5a:9a:fa:7f:f9:c4:34:24:56:cc:72:3f:15:3c:
         62:4c:73:e9:22:fb:de:d0:ca:ab:ca:85:c7:76:e4:91:82:b2:
         a7:b5:4a:2e:34:20:96:df:e1:cc:4e:ab:93:b9:3e:88:a2:6b:
         06:99:d8:16:34:5a:4d:47:26:e1:a7:30:69:d1:ab:f9:03:71:
         ff:25:21:75:a1:2a:78:a5:2e:4a:52:5c:b0:9c:79:83:6c:be:
         12:f9:9d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8Lf93eVv6kA78BD8O+J1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTdhNGU2YWNmYjcyZDUxZDI5ZWU2MWE2MjgzNmY2NjA2
MDk3YTYwHhcNMjYwOTI0MTUwMjQzWhcNMjYwOTI1MTUwMjQzWjAzMTEwLwYDVQQD
EyhlZGJmYzEwNDg3YjA3OTZlYjAxNDgxNzExZDQ4NzliMzAzZmQ2YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ME5oi2mMEN4pidPQ+hklpaBnLKv
VW1J6XyJefxn5rfCQ7YvfdX8ZBpG9zYn1z21qqgkdYjfwMr94votSt8NwXVY8Cqg
aAIpF0IJWVoUR+cv3uu/kO9MLO6EJx1ukS3Frd6yx5nWQaX+QHlhnW+c2wgCq9bK
Nx9P6u6Qj1DllDVwk+1SL2RrAqkYdnzTw+tWtGtptqoJJI+E3vLpcR95q3J0ZmvU
N3CKBUuS/U9X6uyp509Bf/2mpw5rv/CnLl03wZ4OSxEamE9cBEfz8s99on69LM0Y
yu2ctz4V3UeYN/ZCPoNIpOF++oWpBAAfxXgW8uu38tNK9Qn08MweyipnlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2/wQSHsHlusBSBcR1IebMD/WyBMB8GA1UdIwQY
MBaAFGSXpOas+3LVHSnuYaYoNvZgYJemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYt
MDFjZDQ3YjZjYTBkLzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYtMDFjZDQ3YjZjYTBk
LzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVqeUA8s
Sv1qsivNEHEM3WVDrawzr6RHdLTuK2ja7Wxg+L0ojumdrodf0vQSjX5EEhGxBpZ1
nRLvtvZEBk/Tfp3xamARoUEu5mHHfXyBYaRb1U4pcyRCLj/rQ8HFcD/AkJjmbQW6
1k9drO3kRtfLBAOsZe/TfEUg4pFk2pldA65Ktm3p0k+WIe9SI6FJSCaHP9UyM3Pe
1k/ElvpZLWzLQXADf/YDAVqa+n/5xDQkVsxyPxU8Ykxz6SL73tDKq8qFx3bkkYKy
p7VKLjQglt/hzE6rk7k+iKJrBpnYFjRaTUcm4acwadGr+QNx/yUhdaEqeKUuSlJc
sJx5g2y+EvmdOQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:43:32 2026 by rpki-client