Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          F1CqmHAqWp9K/jRNsdEH6yLVTiKVf+Bk8MEI3OtFu5Q=
Subject key identifier:   42:4C:17:C1:3D:11:DF:B5:0E:BC:6F:0A:0F:80:8A:FC:A2:42:04:17
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       01A0CFA498083414016542D7DCFC0FDDFAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0D2A
Signing time:             Wed 23 Sep 2026 19:01:05 +0000
Manifest this update:     Wed 23 Sep 2026 19:01:05 +0000
Manifest next update:     Thu 24 Sep 2026 19:01:05 +0000
Files and hashes:         1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
                          2: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
                          3: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          4: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          5: 98oECme-w_GgSaFmZh37RLhYD9g.roa (hash: iPDzJ3v3jfejnPGzBAdLpmHo920TlkgN96SVjOqNj5w=)
                          6: B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa (hash: wSwh8QpiS5FR1lWM/wQRbFfUYho9vYOx2FceddMQvps=)
                          7: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          8: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
                          9: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
                          10: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=)
                          11: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
                          12: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=)
                          13: SqdW3wEJdQI6pSiu6sKuLSekouM.roa (hash: rTImG/VwG887tYh4ok8g2ubTFK65bX66Ir6rONB+lXc=)
                          14: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          15: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
                          16: XRbYp6FDnp1AtNuZXLrfLub5nuc.roa (hash: SgUgHK8CB2wAUJD4MixZKl+/Cz+SEY/Xajfx5TX1zsA=)
                          17: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          18: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
                          19: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: WMnGNfdOi/r7s3Pb345rr9hR/Play7gxq2SKKWXl3V0=)
                          20: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          21: eEYECPuTAMSxPzkjToe-AsGHG0o.roa (hash: qvifZPjdOwY78+6g7aEHucIxOME1hkTUXil2N+iv3W0=)
                          22: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
                          23: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
                          24: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
                          27: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
                          28: rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa (hash: jO75JoginvMuRlRlIbd+oIuJpNIVudUke0+lCckHlKk=)
                          29: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
                          30: urz4_AKUeHVYjJAJbjRXtg7l6R0.roa (hash: Lc5cV4YVr/KMErRPjabqXug9W3uT5uCRR+WjWueC5dU=)
                          31: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
                          32: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=)
                          33: zrPBo584QAwD8wD1UiOiivzG-lY.roa (hash: AG1/xkS8rTZ2sL8uSI3tuRloFXAbUoEivjF0J/Yra5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:98:08:34:14:01:65:42:d7:dc:fc:0f:dd:fa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Sep 23 19:01:05 2026 GMT
            Not After : Sep 24 19:01:05 2026 GMT
        Subject: CN=424c17c13d11dfb50ebc6f0a0f808afca2420417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:7a:11:29:10:06:b0:6b:cc:6b:65:8e:72:
                    f7:0b:48:e5:95:2e:fb:4a:2a:84:3e:fc:63:de:e3:
                    7d:bd:cb:6b:7a:f2:3f:ac:4f:b4:c9:6f:16:88:97:
                    73:8c:c6:10:01:8c:c0:f2:f1:0f:65:33:46:16:b8:
                    b2:5c:ca:33:f2:d3:06:e1:d9:e1:f2:6e:dc:c6:00:
                    a7:da:d0:27:97:1d:3c:e0:8d:3a:92:0f:cd:28:f9:
                    cb:c3:ec:0e:71:d0:65:ac:2d:a5:e5:d3:60:73:0d:
                    70:89:e4:91:4c:51:11:db:8f:2e:8b:92:cc:d9:6d:
                    26:eb:9b:31:bd:ca:0a:ab:81:65:f3:26:72:fa:41:
                    46:47:a8:80:ef:da:3d:0b:33:ea:a8:3f:34:52:8d:
                    1e:45:04:9f:e6:f7:33:c5:58:7f:3b:ad:dd:ce:8b:
                    e1:60:2f:9a:38:b9:22:79:34:de:e6:62:ee:eb:77:
                    96:1a:dd:9f:20:93:d5:92:9e:58:cb:15:84:90:66:
                    9b:cb:5c:36:8a:dd:da:7c:34:e2:cb:80:9c:69:34:
                    ab:70:12:09:7b:81:69:94:37:96:3f:83:eb:ee:c7:
                    25:6c:39:3c:36:4e:2b:55:63:b6:86:35:fa:ef:bc:
                    e2:9d:e0:4d:7f:ed:36:13:47:2c:33:d1:21:29:10:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:17:C1:3D:11:DF:B5:0E:BC:6F:0A:0F:80:8A:FC:A2:42:04:17
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:15:84:40:5f:f2:00:d2:07:72:9c:86:c3:03:81:78:f8:e2:
         a7:66:24:97:b8:17:c0:a5:1d:2b:1d:99:45:58:ea:24:45:7c:
         0f:ff:f8:77:c6:cc:a7:2f:88:03:3d:d8:a5:8c:c6:2d:f6:5e:
         ff:c6:68:c3:e0:63:86:01:69:cf:97:79:13:02:e2:5e:3d:f0:
         c5:93:70:a2:cc:aa:f4:75:16:6d:b1:7b:c5:23:17:f1:75:44:
         85:39:69:0f:c3:56:49:c2:46:4d:b5:97:32:2a:74:8f:cf:33:
         4e:c1:93:08:eb:5a:0f:19:36:17:98:ae:57:0b:d2:9e:bf:33:
         d0:45:c4:58:18:69:f7:27:8c:f4:d7:78:f8:b1:b4:3a:55:4b:
         96:84:b2:0c:fe:aa:59:08:31:ee:b4:53:ee:6c:7b:5b:70:53:
         a6:1d:5f:38:16:4f:33:53:30:b5:bd:db:1d:82:91:3c:03:44:
         86:70:ae:74:d8:0c:91:06:d5:13:c3:be:34:99:59:7b:12:d7:
         8b:6c:a8:df:5c:b9:ee:65:5e:ce:fb:8b:d7:e0:d9:04:89:1a:
         e5:b9:dc:f7:73:48:1f:1b:23:75:45:78:bd:5d:62:53:93:52:
         70:ef:d0:7b:69:b6:87:94:f8:28:1b:f0:65:73:25:43:46:d6:
         2d:2d:3a:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpJgINBQBZULX3PwP3frUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjYwOTIzMTkwMTA1WhcNMjYwOTI0MTkwMTA1WjAzMTEwLwYDVQQD
Eyg0MjRjMTdjMTNkMTFkZmI1MGViYzZmMGEwZjgwOGFmY2EyNDIwNDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3796ESkQBrBrzGtljnL3C0jllS77
SiqEPvxj3uN9vctrevI/rE+0yW8WiJdzjMYQAYzA8vEPZTNGFriyXMoz8tMG4dnh
8m7cxgCn2tAnlx084I06kg/NKPnLw+wOcdBlrC2l5dNgcw1wieSRTFER248ui5LM
2W0m65sxvcoKq4Fl8yZy+kFGR6iA79o9CzPqqD80Uo0eRQSf5vczxVh/O63dzovh
YC+aOLkieTTe5mLu63eWGt2fIJPVkp5YyxWEkGaby1w2it3afDTiy4CcaTSrcBIJ
e4FplDeWP4Pr7sclbDk8Nk4rVWO2hjX677zineBNf+02E0csM9EhKRCy3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJMF8E9Ed+1DrxvCg+AivyiQgQXMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhWEQF/y
ANIHcpyGwwOBePjip2Ykl7gXwKUdKx2ZRVjqJEV8D//4d8bMpy+IAz3YpYzGLfZe
/8Zow+BjhgFpz5d5EwLiXj3wxZNwosyq9HUWbbF7xSMX8XVEhTlpD8NWScJGTbWX
Mip0j88zTsGTCOtaDxk2F5iuVwvSnr8z0EXEWBhp9yeM9Nd4+LG0OlVLloSyDP6q
WQgx7rRT7mx7W3BTph1fOBZPM1Mwtb3bHYKRPANEhnCudNgMkQbVE8O+NJlZexLX
i2yo31y57mVezvuL1+DZBIka5bnc93NIHxsjdUV4vV1iU5NScO/Qe2m2h5T4KBvw
ZXMlQ0bWLS062A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:06:18 2026 by rpki-client