Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          +IQsDZsloxarPgbf7UHP5TADEllSLWmW2a/doXU5KOU=
Subject key identifier:   7D:CD:72:A6:11:37:B3:62:5D:84:33:9F:FD:1F:6E:32:2E:13:E0:90
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       01A0BCF8CB4F364F8213A64C301710B67F0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          0486
Signing time:             Sun 20 Sep 2026 04:00:16 +0000
Manifest this update:     Sun 20 Sep 2026 04:00:16 +0000
Manifest next update:     Mon 21 Sep 2026 04:00:16 +0000
Files and hashes:         1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=)
                          2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=)
                          3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=)
                          4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=)
                          5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=)
                          6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=)
                          7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: GVecf6gbUHvpOgy4lfEf2QsX49ded0MbZ3bZXKGaxlQ=)
                          8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=)
                          9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=)
                          10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:f8:cb:4f:36:4f:82:13:a6:4c:30:17:10:b6:7f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Sep 20 04:00:16 2026 GMT
            Not After : Sep 21 04:00:16 2026 GMT
        Subject: CN=7dcd72a61137b3625d84339ffd1f6e322e13e090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:5f:2a:11:c7:75:8f:14:51:bd:3d:12:c8:
                    ce:1b:d0:66:49:58:86:c3:93:d6:4a:31:5a:c4:12:
                    ad:8e:a9:d2:27:fd:e4:d3:dc:3d:b4:e9:15:46:45:
                    2b:d5:25:31:db:f4:13:13:7f:d6:e1:24:38:8f:50:
                    85:28:6c:34:b0:e5:65:a3:d1:58:6e:cb:7f:09:6e:
                    30:26:f9:52:95:60:3b:d0:97:a0:2a:ae:8e:ad:cd:
                    0d:10:10:c7:d4:a7:e4:d8:9c:36:fa:71:fc:f5:75:
                    c6:1f:22:66:6a:24:2f:f0:0d:16:ae:0d:d5:a4:ab:
                    ba:e3:6a:70:32:b3:33:a2:f5:99:32:e1:d8:36:2b:
                    68:46:9a:b6:85:74:3e:0f:34:af:bb:2a:e4:05:72:
                    b2:6d:0e:80:2b:74:66:a8:d2:bb:87:dc:51:cb:cf:
                    7b:32:dd:68:97:05:06:57:1a:d2:34:f9:0e:aa:56:
                    73:a8:27:d1:27:88:51:74:07:8f:fb:9c:b9:e6:7c:
                    04:4e:3a:ff:39:03:56:29:61:04:3c:27:bd:8c:33:
                    65:3a:c6:77:33:8c:2a:15:17:5b:f3:0f:01:77:23:
                    9a:b0:6e:cc:cf:a7:1b:19:60:46:ff:f4:58:21:2e:
                    58:2c:3c:30:bc:3d:7e:14:72:53:64:ca:df:6c:d4:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:72:A6:11:37:B3:62:5D:84:33:9F:FD:1F:6E:32:2E:13:E0:90
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2c:01:fc:49:0b:ae:c8:55:8e:19:98:a6:d5:2f:93:97:e1:
         a0:2a:3a:0b:eb:07:00:94:c9:54:8a:a1:97:43:45:4c:d9:79:
         95:a2:fd:f9:2f:b6:67:e6:91:a6:ab:f0:5b:3e:56:e9:08:ee:
         8f:fd:87:66:86:83:27:2a:8c:c0:c6:b5:b0:38:8c:24:78:97:
         cf:1b:ca:6e:8b:5a:f0:b0:8f:74:2f:6c:08:e5:85:8c:46:91:
         5a:5f:ed:e9:26:10:86:c4:b8:43:c8:bd:01:40:0d:2f:5e:6d:
         a1:1c:18:c1:1b:64:f5:3d:7e:34:e7:65:5e:a6:c7:fb:00:cc:
         46:d0:09:f2:85:b0:96:cf:fe:07:89:b3:dd:65:11:dc:5e:ae:
         19:0e:13:e4:33:f6:09:18:67:ca:94:9d:2f:95:82:fb:ca:e3:
         64:36:69:ab:ec:55:25:7d:47:95:c8:1b:f0:03:80:f2:ad:7b:
         ba:e3:86:d8:01:3a:18:27:b7:ad:ea:41:24:ba:32:a6:d0:e6:
         e6:2c:dd:c7:9f:75:c1:64:a3:e1:09:01:a2:c0:32:d8:68:0f:
         5a:1a:99:ef:2d:4b:4f:5a:81:14:4d:c3:60:8d:11:fb:1e:7e:
         ed:b0:b4:6a:2d:46:9a:58:88:b9:ab:20:72:11:7b:e6:76:94:
         3d:8d:68:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8+MtPNk+CE6ZMMBcQtn8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx
N2YwZWEwHhcNMjYwOTIwMDQwMDE2WhcNMjYwOTIxMDQwMDE2WjAzMTEwLwYDVQQD
Eyg3ZGNkNzJhNjExMzdiMzYyNWQ4NDMzOWZmZDFmNmUzMjJlMTNlMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s9fKhHHdY8UUb09EsjOG9BmSViG
w5PWSjFaxBKtjqnSJ/3k09w9tOkVRkUr1SUx2/QTE3/W4SQ4j1CFKGw0sOVlo9FY
bst/CW4wJvlSlWA70JegKq6Orc0NEBDH1Kfk2Jw2+nH89XXGHyJmaiQv8A0Wrg3V
pKu642pwMrMzovWZMuHYNitoRpq2hXQ+DzSvuyrkBXKybQ6AK3RmqNK7h9xRy897
Mt1olwUGVxrSNPkOqlZzqCfRJ4hRdAeP+5y55nwETjr/OQNWKWEEPCe9jDNlOsZ3
M4wqFRdb8w8BdyOasG7Mz6cbGWBG//RYIS5YLDwwvD1+FHJTZMrfbNTNkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3NcqYRN7NiXYQzn/0fbjIuE+CQMB8GA1UdIwQY
MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt
Y2UxYmJhNjkxYjM3LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3
LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSwB/EkL
rshVjhmYptUvk5fhoCo6C+sHAJTJVIqhl0NFTNl5laL9+S+2Z+aRpqvwWz5W6Qju
j/2HZoaDJyqMwMa1sDiMJHiXzxvKbota8LCPdC9sCOWFjEaRWl/t6SYQhsS4Q8i9
AUANL15toRwYwRtk9T1+NOdlXqbH+wDMRtAJ8oWwls/+B4mz3WUR3F6uGQ4T5DP2
CRhnypSdL5WC+8rjZDZpq+xVJX1Hlcgb8AOA8q17uuOG2AE6GCe3repBJLoyptDm
5izdx591wWSj4QkBosAy2GgPWhqZ7y1LT1qBFE3DYI0R+x5+7bC0ai1GmliIuasg
chF75naUPY1ojA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:53:25 2026 by rpki-client