Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          Eeqv7yRD5byOqMeNU3H/WGPrToQz+3gdhdT6GKKhPvc=
Subject key identifier:   5B:B9:A1:D3:EA:A9:84:BD:AF:2B:78:C0:0F:AD:AD:21:13:06:1D:9E
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       019E1DFE7D26165889E4F96FB1FA0614E0A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0BAF
Signing time:             Tue 12 May 2026 21:01:17 +0000
Manifest this update:     Tue 12 May 2026 21:01:17 +0000
Manifest next update:     Wed 13 May 2026 21:01:17 +0000
Files and hashes:         1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
                          2: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
                          3: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=)
                          4: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          5: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          6: BLbEGnHlodnp79q9soB7X47HKdw.roa (hash: YLxcybOGPbSncNQUcEA27OYyYsdtahC0bwUM37mtR0U=)
                          7: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          8: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
                          9: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
                          10: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
                          11: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=)
                          12: QSmZ1EAuBflnfjeVfuOnxgoHbRo.roa (hash: xJ2YfVUINNeEYTnAowsXWuUvfUAahaZckwya27zpePw=)
                          13: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          14: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
                          15: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          16: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
                          17: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: A0NGwqE9Tb2wfOGm6S5HdbnbYNOmvg9Gw8dCMXV6RQU=)
                          18: _VGCfSLVW2xdJN6JGmh9iEsjqVg.roa (hash: tkrgNphI56yShQNt5RlRqqWTglZrf57Ok9IMT/BDMV8=)
                          19: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          20: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
                          21: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
                          22: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          23: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=)
                          24: m6PbjFFs9wz8BPUxE8SwTOq3MFw.roa (hash: /mS4b0kizxWZ6Jeies/uIRMo0XfdIZr717g4eRPUQYw=)
                          25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
                          27: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
                          28: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:7d:26:16:58:89:e4:f9:6f:b1:fa:06:14:e0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: May 12 21:01:17 2026 GMT
            Not After : May 13 21:01:17 2026 GMT
        Subject: CN=5bb9a1d3eaa984bdaf2b78c00fadad2113061d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:02:a9:0f:4d:07:81:8f:b4:cb:88:b1:c8:
                    6e:70:aa:a8:26:4a:7d:b7:c2:f8:9d:cf:e9:9c:03:
                    ad:58:6d:d2:f0:d3:c1:68:73:91:42:a9:91:54:43:
                    06:f8:ad:4f:bd:a3:3c:69:a0:fb:9e:a2:a5:73:16:
                    0c:52:22:07:c5:3d:bd:ab:ab:b9:8a:45:d2:30:f3:
                    e1:b1:dc:73:dc:8e:6a:d6:5e:57:ce:31:59:cd:bd:
                    d1:3f:f9:11:a5:a7:e8:03:4b:39:cb:c9:b0:eb:20:
                    46:4f:67:1c:19:bf:17:6b:36:57:f3:52:40:63:f2:
                    02:ff:6b:ab:6c:2d:81:9e:cc:b0:41:7d:8f:98:db:
                    b1:fb:d2:9f:80:90:2b:e3:90:7b:f3:2d:a4:34:4e:
                    2c:1f:39:ab:3c:01:b1:43:f5:ed:8b:08:92:0a:99:
                    ab:04:40:27:8f:8f:cd:59:67:9f:57:f5:67:31:32:
                    84:1a:6e:5d:54:56:55:7f:5d:c7:8c:09:68:f7:d5:
                    2f:a9:e0:28:9c:31:a4:e2:90:da:0d:fa:85:a0:6d:
                    94:fd:bb:2a:33:f2:08:17:6a:9e:d0:13:5e:88:a1:
                    5c:86:f8:07:da:7e:fd:0b:2b:37:a0:c6:56:fb:c3:
                    76:89:4e:57:5c:14:96:98:b2:9e:5b:b0:b6:bb:0b:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:A1:D3:EA:A9:84:BD:AF:2B:78:C0:0F:AD:AD:21:13:06:1D:9E
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6d:9a:86:1e:fc:18:fa:66:86:1c:b0:6f:dd:37:84:30:48:
         ce:28:57:00:50:ba:fe:1b:0b:b6:2b:82:b4:ae:64:0f:c3:a6:
         64:fb:82:a7:ac:10:5b:64:8e:a7:ac:af:f9:f9:9d:89:44:c8:
         29:2f:be:d2:28:1c:44:e0:53:2b:ab:e6:2c:0f:d8:89:43:b6:
         51:a4:fc:09:7c:a3:08:0a:b5:7f:e9:0c:6f:69:b1:0b:9b:f6:
         da:a4:a0:55:fe:e3:72:20:1b:75:3c:96:ee:fa:9c:4f:be:2f:
         83:06:3e:12:81:9f:43:88:2c:43:df:1c:96:f7:82:9d:6a:24:
         f3:e1:28:5f:6c:0a:d8:d2:1c:6a:95:cb:8b:3c:c4:32:b9:ac:
         47:45:ba:df:c7:72:78:1b:5a:af:8e:fb:33:f0:f7:99:22:40:
         00:88:02:bf:6a:32:30:24:70:fd:12:27:65:83:51:f9:1b:17:
         25:c7:90:57:29:08:80:0e:3b:54:b0:15:88:20:64:8c:c5:53:
         77:f2:6c:bd:04:b4:3b:b7:61:bf:4c:e9:1d:49:67:42:90:df:
         fd:23:83:a6:44:8d:f7:40:33:de:8a:3e:55:33:c0:5d:ab:59:
         49:ee:fa:34:5d:e3:47:30:12:e2:48:84:e5:94:b0:b7:bc:44:
         d9:aa:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:37 2026 by rpki-client