Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
File:                     zo8eLNbLKBUKXInl-bCIeBE0zq8.mft (raw, json)
Hash identifier:          nw9bTLgGBCVmvuy1uYjCNJlxzFJuDg3JpYK+BEpLiqY=
Subject key identifier:   C0:8C:F5:0D:19:12:94:FD:4D:C8:DD:78:A1:C7:22:5D:30:A6:D8:23
Authority key identifier: CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF
Certificate issuer:       /CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
Certificate serial:       01A0CB2318EAD8949679389D13403B7920C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
Manifest number:          60
Signing time:             Tue 22 Sep 2026 22:01:09 +0000
Manifest this update:     Tue 22 Sep 2026 22:01:09 +0000
Manifest next update:     Wed 23 Sep 2026 22:01:09 +0000
Files and hashes:         1: Y3VzoJn-G6AotjVH8MvzLWEsGmc.roa (hash: NAemI75QGyX3xuubQFlHIzoJ5u9jYBV1F2kxkjMJ1Pk=)
                          2: zo8eLNbLKBUKXInl-bCIeBE0zq8.crl (hash: gDNz8jjNseC1YJBxmi1Knb3Re4+Qfrf7J0X52rSaQRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:23:18:ea:d8:94:96:79:38:9d:13:40:3b:79:20:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
        Validity
            Not Before: Sep 22 22:01:09 2026 GMT
            Not After : Sep 23 22:01:09 2026 GMT
        Subject: CN=c08cf50d191294fd4dc8dd78a1c7225d30a6d823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:bd:de:3b:37:b9:93:f5:9b:2d:69:6c:9f:
                    41:11:90:eb:96:30:7e:27:68:7e:f8:72:6c:4e:ba:
                    8d:53:85:89:57:8d:20:b8:36:47:41:77:73:fc:d2:
                    0f:7f:a5:04:11:55:4a:9f:c6:b7:15:32:50:8e:03:
                    2c:87:73:5f:77:46:c0:9d:52:71:33:81:52:60:f5:
                    13:4b:2e:91:38:78:71:60:68:b7:8f:dc:01:9f:43:
                    06:0a:af:57:02:61:41:5e:6a:b2:e5:96:c2:50:59:
                    60:b6:d5:41:39:e7:23:78:65:42:94:62:b0:37:d0:
                    de:e9:5c:c6:3d:0c:c9:2a:e2:aa:f7:a8:c0:0c:aa:
                    a1:3c:9e:40:68:93:c6:07:e9:9b:b4:1e:d7:a3:4d:
                    1d:7e:4f:68:15:2f:c6:e8:20:e2:6e:6b:79:a4:d8:
                    7e:0f:3b:53:1b:49:60:b4:f2:d8:37:78:0b:d9:ca:
                    3f:18:1c:65:04:8c:0c:a7:bc:11:53:62:e3:cf:e7:
                    7d:e3:be:a8:c0:a4:13:78:2b:77:7a:74:e7:ed:5a:
                    a7:fd:7a:6c:d8:d1:3f:5a:9b:71:c7:73:11:6d:2d:
                    96:05:f4:28:e7:0d:35:94:d8:0e:8e:de:82:b3:c2:
                    7f:12:f5:42:63:f8:db:9d:ba:29:16:ee:d0:b0:9e:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:F5:0D:19:12:94:FD:4D:C8:DD:78:A1:C7:22:5D:30:A6:D8:23
            X509v3 Authority Key Identifier:
                keyid:CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:60:48:61:a4:68:e9:cb:c7:18:c3:e7:39:07:27:f0:c5:82:
         7f:fe:07:c0:7c:5e:57:38:4d:59:4e:31:d0:52:da:96:ec:b6:
         2f:df:81:de:2f:c2:58:a8:b9:d3:05:a5:4f:3a:f0:91:51:8d:
         99:90:e2:7e:1c:08:af:b9:33:04:dc:48:53:14:0a:4b:e4:46:
         57:8a:57:ff:db:da:ae:ce:67:e4:d4:ac:5e:20:af:a0:98:ea:
         6d:17:dc:28:0c:4f:7a:8a:e7:35:f3:9a:59:a9:38:09:fd:0f:
         44:9d:02:5f:b4:81:8b:fc:7b:3d:c2:84:02:98:4f:37:14:d1:
         9b:36:b1:f9:80:5e:18:05:4c:a9:3e:fd:c6:d8:4a:f1:02:fe:
         90:cd:25:de:ed:49:48:08:ee:d6:2d:9b:e3:70:df:6a:4b:83:
         0a:16:d2:ee:e6:a3:f7:6e:2a:2a:54:21:ca:a6:9b:87:f9:68:
         41:d1:cc:c6:19:98:69:e4:d5:9d:e2:96:47:a8:51:73:12:a5:
         63:3f:8a:86:7f:ab:27:35:b7:d3:cb:a9:5e:af:96:d3:97:a0:
         b0:9f:7d:0a:cd:1a:b5:33:b8:bf:2d:bf:d7:80:ca:86:a4:14:
         4a:ff:77:27:05:ae:84:3d:b6:6c:ab:c4:0e:58:f6:e9:bd:b3:
         fe:2c:cc:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIxjq2JSWeTidE0A7eSDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGYxZTJjZDZjYjI4MTUwYTVjODllNWY5YjA4ODc4MTEz
NGNlYWYwHhcNMjYwOTIyMjIwMTA5WhcNMjYwOTIzMjIwMTA5WjAzMTEwLwYDVQQD
EyhjMDhjZjUwZDE5MTI5NGZkNGRjOGRkNzhhMWM3MjI1ZDMwYTZkODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z693js3uZP1my1pbJ9BEZDrljB+
J2h++HJsTrqNU4WJV40guDZHQXdz/NIPf6UEEVVKn8a3FTJQjgMsh3Nfd0bAnVJx
M4FSYPUTSy6ROHhxYGi3j9wBn0MGCq9XAmFBXmqy5ZbCUFlgttVBOecjeGVClGKw
N9De6VzGPQzJKuKq96jADKqhPJ5AaJPGB+mbtB7Xo00dfk9oFS/G6CDibmt5pNh+
DztTG0lgtPLYN3gL2co/GBxlBIwMp7wRU2Ljz+d9476owKQTeCt3enTn7Vqn/Xps
2NE/Wptxx3MRbS2WBfQo5w01lNgOjt6Cs8J/EvVCY/jbnbopFu7QsJ6/qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCM9Q0ZEpT9TcjdeKHHIl0wptgjMB8GA1UdIwQY
MBaAFM6PHizWyygVClyJ5fmwiHgRNM6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem84ZUxOYkxLQlVLWElubC1iQ0llQkUwenE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9iZDYyMjktYmI2ZC00NWM3LTljMmQt
NmYzOTU3ZmZjNGFlLzEvem84ZUxOYkxLQlVLWElubC1iQ0llQkUwenE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9iZDYyMjktYmI2ZC00NWM3LTljMmQtNmYzOTU3ZmZjNGFl
LzEvem84ZUxOYkxLQlVLWElubC1iQ0llQkUwenE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGBIYaRo
6cvHGMPnOQcn8MWCf/4HwHxeVzhNWU4x0FLaluy2L9+B3i/CWKi50wWlTzrwkVGN
mZDifhwIr7kzBNxIUxQKS+RGV4pX/9vars5n5NSsXiCvoJjqbRfcKAxPeornNfOa
Wak4Cf0PRJ0CX7SBi/x7PcKEAphPNxTRmzax+YBeGAVMqT79xthK8QL+kM0l3u1J
SAju1i2b43DfakuDChbS7uaj924qKlQhyqabh/loQdHMxhmYaeTVneKWR6hRcxKl
Yz+Khn+rJzW308upXq+W05egsJ99Cs0atTO4vy2/14DKhqQUSv93JwWuhD22bKvE
Dlj26b2z/izMFw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:01:21 2026 by rpki-client