Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          FyedmEW1d6h080r190HIWPVRuaYP+nPWfmTl/i9lOMg=
Subject key identifier:   AF:7F:E4:D8:8C:05:22:C9:14:71:9D:3B:CC:F7:F8:46:35:6C:B6:6D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       01A1DE02C7EE6ACF87EBDEDCA70619AFCA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0DC4
Signing time:             Sun 15 Nov 2026 07:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:26 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:26 +0000
Files and hashes:         1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
                          2: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          3: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          4: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          5: CtHauIzgAIBJTflz-yD7WJD8Jn8.roa (hash: A1Vbm6qIGCatC5soS3/Q/VMSpCtDW9k9MFyR+Iv51Z4=)
                          6: F6XAWB5BenQ_IRSOPZqea5DhGsE.roa (hash: laLP0bQhgvqPp4c71EMMvM4i0CgopiYv4IW5b17N234=)
                          7: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
                          8: HY438S56NJo7jnpyMDIqB6pm114.roa (hash: HNkuzKEBNuYMXckbNBvuPho2yIIGarJpOf9USFXOCns=)
                          9: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
                          10: I83LmOCq0Q7jKASx5s4D5OhXAEo.roa (hash: S3yaU9iB2vl3p17kdv6YU1CS1VGstt8pHISUYVBE82s=)
                          11: Q-3-0TNJytYK6If-MWwuST5lLaw.roa (hash: RZu60EU0M3f05aCbCyptmyFU+O1SBSaaivxjH6s8lJU=)
                          12: SqdW3wEJdQI6pSiu6sKuLSekouM.roa (hash: rTImG/VwG887tYh4ok8g2ubTFK65bX66Ir6rONB+lXc=)
                          13: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          14: XRbYp6FDnp1AtNuZXLrfLub5nuc.roa (hash: SgUgHK8CB2wAUJD4MixZKl+/Cz+SEY/Xajfx5TX1zsA=)
                          15: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          16: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: b1GlzQL1gsiTlQe2SN2uSzDeTXtZH6iW6pb9tPSA1Jw=)
                          17: blCm_VY-L-Ayb__tLUtnX8aLCCM.roa (hash: 2TXN5mXAseG1VAZlSQFr+L8jTvtN8UO+Mp/UJNjb+iw=)
                          18: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          19: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
                          20: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          21: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          22: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
                          23: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
                          24: rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa (hash: jO75JoginvMuRlRlIbd+oIuJpNIVudUke0+lCckHlKk=)
                          25: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
                          26: urz4_AKUeHVYjJAJbjRXtg7l6R0.roa (hash: Lc5cV4YVr/KMErRPjabqXug9W3uT5uCRR+WjWueC5dU=)
                          27: vXMtu1Wo6mSip5Dof12QWHyxcuM.roa (hash: v08MaULqsvB6ISRPTa4UIts0zhVX/06uVwnHtRDcFeg=)
                          28: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
                          29: y7fOO1NmSJE7GSqPjU_4fI7t060.roa (hash: Jjdoj6FyfTkE9lNUOvHtsLygpGmiP6ZXSNtLmTfi8lw=)
                          30: z6eKX9rPrR-Jotih3lC-lDWfO1c.roa (hash: Gcw505EXhaVyBpZjVP1nNILT0ztLHH56xsK2op5yMWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:c7:ee:6a:cf:87:eb:de:dc:a7:06:19:af:ca:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Nov 15 07:01:26 2026 GMT
            Not After : Nov 16 07:01:26 2026 GMT
        Subject: CN=af7fe4d88c0522c914719d3bccf7f846356cb66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:09:d3:21:be:31:1e:78:e2:0b:6a:0c:af:
                    49:77:2b:7d:22:db:45:7e:ad:9e:4e:3a:e0:f1:73:
                    6d:07:13:98:c3:11:61:14:aa:0b:c9:7c:98:c2:17:
                    76:7c:5f:53:12:9c:d1:3d:5d:ce:40:c5:fc:80:e5:
                    88:de:de:9f:c4:1f:38:75:c1:16:3c:de:af:86:c7:
                    a2:50:c6:80:6d:4c:a5:21:43:6d:6a:a0:b2:2a:d4:
                    a9:da:91:cf:2f:42:10:08:5c:47:bb:ac:96:4e:5d:
                    f7:5a:72:22:3d:de:d5:9c:19:91:d7:b7:6d:61:23:
                    47:67:47:ad:ec:f7:2e:62:45:f6:f0:9d:b8:88:8c:
                    32:64:1f:db:6c:ac:2d:1f:8e:55:8c:ca:c2:48:ed:
                    55:3a:de:80:cc:4d:36:e7:ab:86:f5:a9:06:ea:89:
                    bf:a4:b3:ba:31:71:ba:a1:c2:42:9c:e8:81:6a:24:
                    c1:fa:44:fa:52:ad:bd:7a:d6:c4:05:2a:9b:41:b0:
                    41:cc:88:7b:eb:3a:d9:f1:e2:bd:1c:99:7f:55:c5:
                    f2:87:9b:dc:60:30:c4:ca:09:22:67:4d:cf:c2:94:
                    d1:cf:90:b1:29:5f:85:22:a9:be:17:64:69:40:41:
                    6f:29:73:4a:95:d4:40:18:f3:7b:bb:12:5c:ef:ee:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7F:E4:D8:8C:05:22:C9:14:71:9D:3B:CC:F7:F8:46:35:6C:B6:6D
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:fe:ae:82:af:4d:44:61:fa:d1:7c:c2:e0:13:36:51:42:
         a5:3d:c5:4d:62:a2:6e:5c:8b:b4:0b:69:21:b6:61:55:95:b0:
         f5:6d:81:03:e9:e0:cb:7c:15:fd:fb:b7:94:84:25:1d:e3:6e:
         2d:22:d9:e8:dd:a2:c1:e2:2b:76:31:27:88:4a:31:31:dd:8a:
         4e:f5:a9:a6:c2:01:e6:e1:08:6b:a3:62:e5:36:c5:93:9d:bc:
         8e:53:ce:df:73:04:a4:21:e8:90:31:24:be:05:1c:bf:42:4e:
         35:47:4e:91:9c:5a:da:dd:c8:3b:f3:3f:3a:0f:30:76:1f:6a:
         63:76:b8:83:cd:44:28:48:1d:d0:ec:cc:d5:3a:d1:53:73:c0:
         0f:0d:e3:fa:af:50:75:89:c2:0c:7b:52:92:ec:d6:e8:83:b1:
         aa:8c:b8:57:4c:20:e8:4f:d4:10:6a:95:2d:0e:98:71:1e:44:
         db:e6:43:d2:5d:62:16:9a:5f:5d:1c:1e:10:e4:8a:8a:70:46:
         17:15:8c:a2:a7:bc:77:68:2f:8a:f8:4d:0e:56:50:86:d3:bc:
         d6:83:b2:25:2d:05:b7:d8:54:80:ad:5b:ef:8f:fd:89:b0:df:
         39:35:41:b1:2d:45:88:97:dc:4d:e1:34:e7:bc:99:14:03:73:
         cc:aa:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:23:12 2026 by rpki-client