Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
File:                     Zzs6cc93J1Wj34ztXXNRb4ccChE.mft (raw, json)
Hash identifier:          yw/IzqGSl538RtIwriZPjQ+LyNTmeAl7L4o2UimU0+k=
Subject key identifier:   98:68:EC:C7:24:BD:A2:95:FA:97:F1:75:CE:26:07:D6:3C:04:9A:E1
Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
Certificate issuer:       /CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Certificate serial:       01A0D94D144F762C1F93E240042649E1FBBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
Manifest number:          1A6E
Signing time:             Fri 25 Sep 2026 16:01:42 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:42 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:42 +0000
Files and hashes:         1: 8N34BaOhCoqWV6oqyyGnFC-M71k.roa (hash: iUxBbVztuFkPmYPKyF2deLjAauBd8PuICTkelG44e04=)
                          2: VUz0tSFCX_BRFTEGFOahzM8Zpf0.roa (hash: Cecy3QpWVDEErZPxgAgQ0Koma/ZxEa66HTh9jYt45cI=)
                          3: Zzs6cc93J1Wj34ztXXNRb4ccChE.crl (hash: kzNXTmQ6jP3PB39Gpyvf2XwC+Cx35f6AfDyNUFSbptM=)
                          4: qwSTgi7oKerWlObPanrG2B5_x68.roa (hash: GvOd9VfOiwpS8uCFOwxjkDN1qBagT24LpIgJ30wO6Pw=)
                          5: xIxV3QV0-KrN7rSzr-0HLG1i190.roa (hash: 8Bgn1Ips0oqsProytAnDAz5ffPqB6GHNefvHzifH3aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:14:4f:76:2c:1f:93:e2:40:04:26:49:e1:fb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11
        Validity
            Not Before: Sep 25 16:01:42 2026 GMT
            Not After : Sep 26 16:01:42 2026 GMT
        Subject: CN=9868ecc724bda295fa97f175ce2607d63c049ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:d5:7c:2b:1f:62:5e:26:f4:01:b6:fa:a5:
                    cd:42:da:0a:e8:e0:38:b8:fb:04:78:5e:4a:fc:22:
                    b4:81:35:28:52:fa:fc:71:36:76:c5:77:9c:8a:bc:
                    86:a7:2a:c0:ef:29:fd:56:10:8d:00:23:05:e8:56:
                    36:fe:9a:e6:b4:bf:1a:28:23:53:b9:08:6c:eb:86:
                    eb:74:e5:3e:bd:f6:53:a9:04:d7:cc:49:03:f9:ec:
                    53:54:1f:f8:f8:55:97:f2:07:c3:bc:f0:a3:02:aa:
                    75:7a:30:a4:20:e8:9b:1f:72:ca:99:8a:bc:81:63:
                    17:5f:b0:ce:7e:d5:0d:52:b0:6c:e9:86:22:a9:c0:
                    22:de:ab:85:bd:81:15:65:22:ca:c3:8b:83:31:ba:
                    53:30:26:4a:46:c2:20:8f:38:a9:0b:73:9a:89:cd:
                    b1:2d:ed:4b:5e:75:7b:ff:13:dc:e2:bc:c7:d2:25:
                    ce:c6:7c:55:35:08:3c:6d:98:a6:51:11:00:fe:12:
                    5e:7e:48:52:eb:21:96:0e:03:58:00:c7:e6:9a:3f:
                    d2:1a:06:2b:59:f3:d8:98:b1:4e:c8:76:d8:93:ac:
                    6b:06:f2:4f:13:c2:68:4e:24:ab:5f:3a:6b:45:eb:
                    4e:d7:d4:cb:ec:1f:c6:f9:f3:33:fd:45:4b:3b:58:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:68:EC:C7:24:BD:A2:95:FA:97:F1:75:CE:26:07:D6:3C:04:9A:E1
            X509v3 Authority Key Identifier:
                keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e8:43:fb:88:5a:38:4e:06:ee:62:6d:3c:07:3c:cb:bf:1e:
         2b:94:1f:b1:be:c7:44:52:16:51:7c:be:90:c8:75:88:c0:dd:
         cd:68:96:65:50:c8:3b:be:36:14:ab:60:bd:fb:a1:80:4b:a4:
         64:aa:a8:2b:62:37:c4:b2:e9:5f:cd:d1:bb:1e:03:da:28:11:
         52:1a:71:23:1a:10:b7:5e:c9:9e:55:a9:74:48:eb:2b:71:b3:
         2e:1a:11:ee:a6:67:5b:8c:4b:aa:57:4c:e6:b5:24:e1:38:86:
         f2:45:3b:19:52:c4:5d:0f:61:2e:a9:ae:d0:4e:81:d5:13:70:
         6b:53:36:48:02:d0:c6:7c:8e:f7:6a:fd:47:ba:89:55:e3:f7:
         76:4d:b5:fe:14:b7:79:7b:cc:7f:17:87:cf:1c:6f:4d:ec:13:
         16:d9:d9:88:8e:2b:b3:f6:10:e1:e3:be:6e:48:7c:3d:3c:65:
         fc:df:ba:07:31:3a:0e:9d:17:d1:3c:65:c0:b8:ff:5d:d0:af:
         9a:47:d8:2d:33:32:3e:bf:e7:be:cd:61:19:1b:d3:aa:5b:dd:
         7b:a7:a2:7a:45:39:d1:cc:49:88:17:14:70:e5:24:07:89:4e:
         2a:5f:33:87:c2:40:76:2e:60:72:b8:43:d3:98:a0:71:88:32:
         04:18:56:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTRRPdiwfk+JABCZJ4fu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3M2IzYTcxY2Y3NzI3NTVhM2RmOGNlZDVkNzM1MTZmODcx
YzBhMTEwHhcNMjYwOTI1MTYwMTQyWhcNMjYwOTI2MTYwMTQyWjAzMTEwLwYDVQQD
Eyg5ODY4ZWNjNzI0YmRhMjk1ZmE5N2YxNzVjZTI2MDdkNjNjMDQ5YWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YPVfCsfYl4m9AG2+qXNQtoK6OA4
uPsEeF5K/CK0gTUoUvr8cTZ2xXeciryGpyrA7yn9VhCNACMF6FY2/prmtL8aKCNT
uQhs64brdOU+vfZTqQTXzEkD+exTVB/4+FWX8gfDvPCjAqp1ejCkIOibH3LKmYq8
gWMXX7DOftUNUrBs6YYiqcAi3quFvYEVZSLKw4uDMbpTMCZKRsIgjzipC3Oaic2x
Le1LXnV7/xPc4rzH0iXOxnxVNQg8bZimUREA/hJefkhS6yGWDgNYAMfmmj/SGgYr
WfPYmLFOyHbYk6xrBvJPE8JoTiSrXzprRetO19TL7B/G+fMz/UVLO1iGoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJho7MckvaKV+pfxdc4mB9Y8BJrhMB8GA1UdIwQY
MBaAFGc7OnHPdydVo9+M7V1zUW+HHAoRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEt
NmZlMWYyOTRlNjI3LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEtNmZlMWYyOTRlNjI3
LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuhD+4ha
OE4G7mJtPAc8y78eK5Qfsb7HRFIWUXy+kMh1iMDdzWiWZVDIO742FKtgvfuhgEuk
ZKqoK2I3xLLpX83Rux4D2igRUhpxIxoQt17JnlWpdEjrK3GzLhoR7qZnW4xLqldM
5rUk4TiG8kU7GVLEXQ9hLqmu0E6B1RNwa1M2SALQxnyO92r9R7qJVeP3dk21/hS3
eXvMfxeHzxxvTewTFtnZiI4rs/YQ4eO+bkh8PTxl/N+6BzE6Dp0X0TxlwLj/XdCv
mkfYLTMyPr/nvs1hGRvTqlvde6eiekU50cxJiBcUcOUkB4lOKl8zh8JAdi5gcrhD
05igcYgyBBhWiw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:39:42 2026 by rpki-client