Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
File:                     Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft (raw, json)
Hash identifier:          Nc8T0kwAplUL/bMnIGOpmdWucPH2Qo6J6vxooSkbsyw=
Subject key identifier:   73:D3:81:4A:A2:96:59:13:AF:A7:54:0B:D8:2E:67:98:66:43:02:CE
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Certificate issuer:       /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial:       01A0F0792E64F507886F8BB66A25E0AE3CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
Manifest number:          12F2
Signing time:             Wed 30 Sep 2026 04:01:08 +0000
Manifest this update:     Wed 30 Sep 2026 04:01:08 +0000
Manifest next update:     Thu 01 Oct 2026 04:01:08 +0000
Files and hashes:         1: OBJV77jZUl3CbDy5pjbemSFl4bU.roa (hash: nyePwRtRsoc5nokCJ5lCXsIn1r/OFhC2XRyD9kM7e2I=)
                          2: Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl (hash: NL+Gqnm1YRWSznMC5aBXBTrJAeLUTsAFsz2WZOX7Itc=)
                          3: llV-T5OHByUu8L74VWUv92cAzng.roa (hash: 9tBLuUshvL8XHJW+P3MzIrJyocKmZrwAHXHerORBago=)
                          4: zyXINCcnojqkQKE3guahN5uv38Y.roa (hash: DPlxLsCN1p1iaWTJ2LBLl11mIB17PTIscCM/Yrq2G9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:79:2e:64:f5:07:88:6f:8b:b6:6a:25:e0:ae:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
        Validity
            Not Before: Sep 30 04:01:08 2026 GMT
            Not After : Oct  1 04:01:08 2026 GMT
        Subject: CN=73d3814aa2965913afa7540bd82e6798664302ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:cf:e3:cb:35:80:64:18:3a:ef:89:58:30:
                    24:fa:11:c9:1a:d0:e7:b1:a2:39:db:d4:10:27:1a:
                    0a:65:68:3e:ee:c9:17:99:77:76:87:f0:bf:97:0d:
                    18:11:a5:46:f8:4f:ca:ff:93:96:4c:14:bc:59:ce:
                    d9:7a:21:3f:18:fc:80:6e:53:07:4f:97:f3:1e:71:
                    d1:f1:d5:2c:3b:e2:3f:df:eb:fc:7d:2e:ad:e2:27:
                    b6:5b:0c:40:d1:89:ae:c7:8d:dd:6b:6d:fe:aa:34:
                    88:e3:d2:38:b7:f4:64:bc:91:b2:de:f6:42:da:ae:
                    bf:67:2e:ea:9f:5d:ff:67:1e:bc:83:a5:47:bd:dd:
                    e8:a4:66:c8:52:9e:f3:e1:fc:c2:fc:d8:7d:2d:bd:
                    fb:c1:a4:16:01:fa:1c:6e:d0:82:8e:ad:74:f6:18:
                    f8:f0:89:b0:d9:c8:23:a8:8e:e2:db:fb:bf:1a:5e:
                    28:a7:72:b3:48:fe:23:76:65:ec:cd:e7:63:2a:39:
                    dc:9a:d2:20:e3:64:55:ef:73:83:dc:6f:00:45:a7:
                    2b:39:ab:8d:65:63:de:71:36:ec:31:91:01:a9:d4:
                    13:cf:4b:b3:d0:42:db:e4:71:3b:f3:6b:24:4e:13:
                    0c:8d:78:70:ba:29:36:92:08:00:66:34:0b:6c:56:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D3:81:4A:A2:96:59:13:AF:A7:54:0B:D8:2E:67:98:66:43:02:CE
            X509v3 Authority Key Identifier:
                keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:ea:55:bf:a4:67:ea:b4:ff:c2:ac:dc:71:d3:11:fe:10:
         6d:3e:e7:d7:87:bc:79:95:14:f9:2e:c5:a5:55:0c:3f:c6:41:
         ea:7d:77:e7:cd:a2:d2:89:07:9d:af:52:43:21:3a:ce:1c:81:
         2d:0b:b1:44:70:f0:67:56:27:ba:52:85:9e:7f:24:9d:db:76:
         c6:31:eb:9d:45:27:4a:08:5f:25:c7:09:09:30:3d:80:b2:6c:
         c3:c2:0b:c9:b7:61:94:90:d4:25:37:4b:cf:d8:0e:57:17:41:
         ef:90:34:16:d4:27:b5:42:18:5e:90:01:44:40:de:d4:a3:c7:
         91:fb:80:42:67:52:e8:97:e5:57:5e:1a:76:3c:55:8f:96:8a:
         14:dc:6b:ee:25:18:bf:1b:1d:c2:37:16:ba:19:af:fb:47:c1:
         31:d6:99:79:29:e9:a8:bc:42:36:bc:7c:00:e7:c8:61:41:16:
         6d:cc:71:96:c6:07:d6:19:aa:ff:ae:4d:60:61:e8:41:36:58:
         e7:28:64:48:80:6c:85:a6:71:1b:9a:d3:57:55:41:21:6d:79:
         c6:0a:90:48:81:3e:8b:90:ce:84:9e:ea:26:07:60:9d:7c:3a:
         b2:10:5d:99:a9:23:da:e4:f3:2e:2e:59:b0:69:a1:7b:fa:12:
         c5:71:e3:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDweS5k9QeIb4u2aiXgrjzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2QzNzdkZDRjODMwYzI0NmNiNDhhOTM0Njk5Njk5ZTRi
Mzc3NDEwHhcNMjYwOTMwMDQwMTA4WhcNMjYxMDAxMDQwMTA4WjAzMTEwLwYDVQQD
Eyg3M2QzODE0YWEyOTY1OTEzYWZhNzU0MGJkODJlNjc5ODY2NDMwMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0DP48s1gGQYOu+JWDAk+hHJGtDn
saI529QQJxoKZWg+7skXmXd2h/C/lw0YEaVG+E/K/5OWTBS8Wc7ZeiE/GPyAblMH
T5fzHnHR8dUsO+I/3+v8fS6t4ie2WwxA0Ymux43da23+qjSI49I4t/RkvJGy3vZC
2q6/Zy7qn13/Zx68g6VHvd3opGbIUp7z4fzC/Nh9Lb37waQWAfocbtCCjq109hj4
8Imw2cgjqI7i2/u/Gl4op3KzSP4jdmXszedjKjncmtIg42RV73OD3G8ARacrOauN
ZWPecTbsMZEBqdQTz0uz0ELb5HE782skThMMjXhwuik2kggAZjQLbFb7PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPTgUqillkTr6dUC9guZ5hmQwLOMB8GA1UdIwQY
MBaAFGZ9N33UyDDCRstIqTRplpnks3dBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lNjgxMmUtOTZhNC00OGI0LWFiNjEt
MTIxZmY0NjAxOGYzLzEvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lNjgxMmUtOTZhNC00OGI0LWFiNjEtMTIxZmY0NjAxOGYz
LzEvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyjqVb+k
Z+q0/8Ks3HHTEf4QbT7n14e8eZUU+S7FpVUMP8ZB6n13582i0okHna9SQyE6zhyB
LQuxRHDwZ1YnulKFnn8kndt2xjHrnUUnSghfJccJCTA9gLJsw8ILybdhlJDUJTdL
z9gOVxdB75A0FtQntUIYXpABREDe1KPHkfuAQmdS6JflV14adjxVj5aKFNxr7iUY
vxsdwjcWuhmv+0fBMdaZeSnpqLxCNrx8AOfIYUEWbcxxlsYH1hmq/65NYGHoQTZY
5yhkSIBshaZxG5rTV1VBIW15xgqQSIE+i5DOhJ7qJgdgnXw6shBdmakj2uTzLi5Z
sGmhe/oSxXHjjA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 12:05:15 2026 by rpki-client