Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          II5N8CwUNtKGTYM3QS87CulzXaH2yhdj2rTlw4n2CV4=
Subject key identifier:   CB:CD:0F:44:0B:EE:91:1F:30:4A:53:78:83:5B:80:C6:90:35:A1:69
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       01A1AA83897AB6E67E6BB5274F5F4D37C898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          0501
Signing time:             Thu 05 Nov 2026 07:01:49 +0000
Manifest this update:     Thu 05 Nov 2026 07:01:49 +0000
Manifest next update:     Fri 06 Nov 2026 07:01:49 +0000
Files and hashes:         1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=)
                          2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=)
                          3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=)
                          4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=)
                          5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=)
                          6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=)
                          7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: EhWUrsGhx52RjqohxMNUv3VtZJkxaavS9zeMoM62kso=)
                          8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=)
                          9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=)
                          10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:83:89:7a:b6:e6:7e:6b:b5:27:4f:5f:4d:37:c8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Nov  5 07:01:49 2026 GMT
            Not After : Nov  6 07:01:49 2026 GMT
        Subject: CN=cbcd0f440bee911f304a5378835b80c69035a169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:1d:53:b5:70:a6:d5:98:5d:73:4f:36:4f:
                    59:a4:e1:86:45:fa:4b:a7:50:87:2e:ff:89:d1:12:
                    c3:07:dd:b3:de:a2:49:6d:e6:6a:ec:75:60:b9:d2:
                    d8:89:31:8e:b1:2b:bf:f6:95:f9:67:1e:60:cf:cb:
                    e5:21:fa:e4:0f:c6:22:16:e7:4a:10:29:18:30:62:
                    99:af:84:8f:12:f7:e3:da:7d:b5:15:63:10:5b:ab:
                    62:19:e9:7f:0c:17:10:02:a0:f1:1f:70:ad:b3:19:
                    55:90:11:50:47:0e:9b:f7:a9:84:86:95:35:83:f2:
                    31:d8:6c:26:79:bb:af:61:6c:5e:99:b2:2e:b5:46:
                    96:f8:88:0b:01:55:15:a1:f7:ef:d7:de:69:e1:5a:
                    d8:65:25:61:70:6f:a0:00:8b:c0:8c:f9:16:22:32:
                    2f:1a:0a:6c:31:d3:c4:72:77:fd:f9:6f:c5:5b:18:
                    06:96:82:8b:6e:a2:93:87:1a:f2:69:55:9a:92:9c:
                    b9:0c:6c:da:36:6d:83:66:87:8c:73:a8:31:89:51:
                    28:24:60:0f:fb:7b:d7:f0:bc:eb:7b:99:e9:2b:6a:
                    4e:4e:db:dd:bc:50:4a:7d:67:7b:cc:9a:c3:a3:b4:
                    f2:1d:f5:d4:3b:32:39:f8:f4:b0:eb:06:9f:d0:c6:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:0F:44:0B:EE:91:1F:30:4A:53:78:83:5B:80:C6:90:35:A1:69
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5c:d3:19:4c:97:53:21:37:42:ed:35:ba:e0:ce:c1:f7:af:
         09:d7:ba:82:fa:45:22:39:2e:70:cc:8f:24:32:b1:f9:63:31:
         3c:61:6e:5e:d3:42:e3:64:40:63:17:cf:c4:c2:fd:a4:6d:98:
         0f:c5:75:31:09:cf:76:56:5a:b3:27:92:e6:06:37:ee:6f:9b:
         0c:43:d5:f9:e4:5d:ba:c5:5b:b4:0f:87:7f:66:c5:84:7e:08:
         e2:90:b2:2f:82:2c:29:ce:ec:8c:d7:40:e1:b6:8f:81:ff:da:
         92:61:00:9d:37:aa:f9:07:bd:fd:32:55:92:f1:58:2c:0e:98:
         0a:03:0f:f7:e8:5b:03:55:2c:41:06:30:c2:ba:6b:72:89:fe:
         08:0c:fa:1e:59:55:2c:13:9f:71:83:f3:8c:3d:da:91:01:b1:
         4b:a9:f4:53:17:9b:43:37:d6:96:76:59:24:1c:a7:9d:95:b5:
         a3:28:48:e1:ff:21:49:d3:95:be:3d:39:37:09:77:6a:50:0e:
         f3:cf:e3:ec:53:c2:ff:89:9f:df:e7:01:84:80:85:4a:4c:bf:
         89:ad:6d:6f:35:2d:3b:09:46:eb:74:f3:06:19:22:95:89:ec:
         30:f6:eb:8a:d7:3b:6c:b1:b7:94:1e:9d:d8:87:05:0d:24:54:
         be:50:e9:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGqg4l6tuZ+a7UnT19NN8iYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx
N2YwZWEwHhcNMjYxMTA1MDcwMTQ5WhcNMjYxMTA2MDcwMTQ5WjAzMTEwLwYDVQQD
EyhjYmNkMGY0NDBiZWU5MTFmMzA0YTUzNzg4MzViODBjNjkwMzVhMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuesdU7VwptWYXXNPNk9ZpOGGRfpL
p1CHLv+J0RLDB92z3qJJbeZq7HVgudLYiTGOsSu/9pX5Zx5gz8vlIfrkD8YiFudK
ECkYMGKZr4SPEvfj2n21FWMQW6tiGel/DBcQAqDxH3CtsxlVkBFQRw6b96mEhpU1
g/Ix2GwmebuvYWxembIutUaW+IgLAVUVoffv195p4VrYZSVhcG+gAIvAjPkWIjIv
GgpsMdPEcnf9+W/FWxgGloKLbqKThxryaVWakpy5DGzaNm2DZoeMc6gxiVEoJGAP
+3vX8Lzre5npK2pOTtvdvFBKfWd7zJrDo7TyHfXUOzI5+PSw6waf0MYxrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvND0QL7pEfMEpTeINbgMaQNaFpMB8GA1UdIwQY
MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt
Y2UxYmJhNjkxYjM3LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3
LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClzTGUyX
UyE3Qu01uuDOwfevCde6gvpFIjkucMyPJDKx+WMxPGFuXtNC42RAYxfPxML9pG2Y
D8V1MQnPdlZasyeS5gY37m+bDEPV+eRdusVbtA+Hf2bFhH4I4pCyL4IsKc7sjNdA
4baPgf/akmEAnTeq+Qe9/TJVkvFYLA6YCgMP9+hbA1UsQQYwwrprcon+CAz6HllV
LBOfcYPzjD3akQGxS6n0UxebQzfWlnZZJBynnZW1oyhI4f8hSdOVvj05Nwl3alAO
88/j7FPC/4mf3+cBhICFSky/ia1tbzUtOwlG63TzBhkilYnsMPbritc7bLG3lB6d
2IcFDSRUvlDp9w==
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:53 2026 by rpki-client