Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File:                     zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier:          ITyZSAtsjQeUTxZq4VXNV0EpPrzGAEsjCE823MhGRj4=
Subject key identifier:   8B:90:8C:0A:09:97:6C:91:FD:6C:AD:90:F8:C3:A6:F9:CF:D2:58:1C
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer:       /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial:       01A118CFC5E8A56DB9A355206B43D5A99CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number:          04A4
Signing time:             Thu 08 Oct 2026 00:00:32 +0000
Manifest this update:     Thu 08 Oct 2026 00:00:32 +0000
Manifest next update:     Fri 09 Oct 2026 00:00:32 +0000
Files and hashes:         1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
                          2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: fvFJDMfjBPbdeXkIZpjp30d74q8Z/0P2GfQ12Lt1BrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:cf:c5:e8:a5:6d:b9:a3:55:20:6b:43:d5:a9:9c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
        Validity
            Not Before: Oct  8 00:00:32 2026 GMT
            Not After : Oct  9 00:00:32 2026 GMT
        Subject: CN=8b908c0a09976c91fd6cad90f8c3a6f9cfd2581c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:74:ff:a5:d7:05:bc:3e:f7:d1:ae:d4:4f:
                    b2:6d:99:2e:d7:4e:3a:2f:a6:b3:4a:6b:18:30:98:
                    fc:31:62:dd:ec:a1:03:0d:3b:a3:e9:19:81:52:57:
                    4f:2a:bb:dc:2a:fd:d2:92:7a:86:14:d2:b9:98:34:
                    37:2f:d5:e9:b5:5b:f3:3f:a9:4a:4e:12:49:2c:24:
                    f8:82:33:4a:a5:a9:26:21:f6:22:52:07:8b:1c:db:
                    23:9e:b4:a4:15:8b:a8:4f:65:11:4e:a2:0b:5c:ba:
                    be:fb:4f:c2:37:6d:ac:63:9a:23:fb:fc:a7:8a:b6:
                    37:6d:c5:1d:79:a9:22:cb:08:2d:e2:e9:30:51:59:
                    d6:aa:4c:01:3c:b4:73:3a:28:c5:54:92:09:bb:05:
                    aa:29:81:69:7e:0a:9e:28:64:7e:87:42:44:9d:77:
                    c3:22:09:20:26:ed:c7:eb:3c:48:6d:f8:2d:1b:73:
                    33:1b:63:26:8f:72:e4:4e:a8:d4:80:ae:b4:2d:80:
                    44:82:ec:ec:1c:e1:6b:8e:3b:ba:d2:e5:1b:63:e0:
                    4c:7c:6e:46:cf:82:51:ce:2e:1a:00:46:0b:3f:b8:
                    b3:f9:c8:7b:86:ac:8f:e1:13:91:e3:b0:23:c4:61:
                    6e:6e:aa:a8:1e:41:52:3a:24:dc:6b:69:8e:bf:57:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:90:8C:0A:09:97:6C:91:FD:6C:AD:90:F8:C3:A6:F9:CF:D2:58:1C
            X509v3 Authority Key Identifier:
                keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:54:ba:1e:09:f4:ba:f8:2c:1f:fc:5e:cb:72:b9:cf:cf:
         d0:db:a3:f6:b6:fb:9f:d6:c9:cd:d8:49:d4:eb:c7:18:5d:2e:
         24:9e:80:55:82:eb:e5:47:91:9f:5e:9b:10:a4:b5:93:11:57:
         a6:a0:d7:fc:56:7a:b4:30:b8:34:12:30:aa:d3:5f:86:74:49:
         80:3c:c8:fc:08:38:1a:10:d2:bc:69:58:05:0b:53:6e:38:a7:
         bd:da:a6:ee:93:85:17:7e:51:6f:29:de:95:eb:9a:2d:0b:1c:
         05:6b:e6:0f:c6:81:a4:ad:51:8e:88:26:be:13:8f:97:9c:42:
         aa:72:08:4f:69:c3:92:0a:95:2d:96:2c:13:26:ab:ab:c3:ff:
         25:31:06:da:b7:8a:1a:5a:7d:f4:a8:a2:a1:29:72:24:72:8c:
         26:13:1b:e0:80:8d:01:51:e6:19:81:cf:76:ed:35:bd:12:d3:
         32:54:a1:17:37:f3:e0:45:09:32:8b:78:7d:cc:4c:cc:99:fe:
         34:cf:41:bb:45:39:f6:43:ca:de:dc:61:f2:da:93:ce:6d:ff:
         6f:86:3a:86:14:70:eb:b6:18:35:92:29:36:37:7f:93:c2:29:
         60:fa:3e:af:f6:c7:e0:bb:38:b0:55:f3:b1:be:7b:27:92:c4:
         b0:d3:a9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYz8XopW25o1Uga0PVqZzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjhlZmQzZTMxNjZlODFhYWNmMTU4MGUyZjBiOTRkYTI5
YjNkYjQwHhcNMjYxMDA4MDAwMDMyWhcNMjYxMDA5MDAwMDMyWjAzMTEwLwYDVQQD
Eyg4YjkwOGMwYTA5OTc2YzkxZmQ2Y2FkOTBmOGMzYTZmOWNmZDI1ODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV50/6XXBbw+99Gu1E+ybZku1046
L6azSmsYMJj8MWLd7KEDDTuj6RmBUldPKrvcKv3SknqGFNK5mDQ3L9XptVvzP6lK
ThJJLCT4gjNKpakmIfYiUgeLHNsjnrSkFYuoT2URTqILXLq++0/CN22sY5oj+/yn
irY3bcUdeakiywgt4ukwUVnWqkwBPLRzOijFVJIJuwWqKYFpfgqeKGR+h0JEnXfD
IgkgJu3H6zxIbfgtG3MzG2Mmj3LkTqjUgK60LYBEguzsHOFrjju60uUbY+BMfG5G
z4JRzi4aAEYLP7iz+ch7hqyP4ROR47AjxGFubqqoHkFSOiTca2mOv1dBnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuQjAoJl2yR/WytkPjDpvnP0lgcMB8GA1UdIwQY
MBaAFM3479PjFm6Bqs8VgOLwuU2imz20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMt
YTAzYWQ1Mjk5OTdjLzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMtYTAzYWQ1Mjk5OTdj
LzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVRUuh4J
9Lr4LB/8Xstyuc/P0Nuj9rb7n9bJzdhJ1OvHGF0uJJ6AVYLr5UeRn16bEKS1kxFX
pqDX/FZ6tDC4NBIwqtNfhnRJgDzI/Ag4GhDSvGlYBQtTbjinvdqm7pOFF35Rbyne
leuaLQscBWvmD8aBpK1RjogmvhOPl5xCqnIIT2nDkgqVLZYsEyarq8P/JTEG2reK
Glp99KiioSlyJHKMJhMb4ICNAVHmGYHPdu01vRLTMlShFzfz4EUJMot4fcxMzJn+
NM9Bu0U59kPK3txh8tqTzm3/b4Y6hhRw67YYNZIpNjd/k8IpYPo+r/bH4Ls4sFXz
sb57J5LEsNOpcg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:44:49 2026 by rpki-client