Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
File:                     Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json)
Hash identifier:          nn2yMkClr/wRBLdFQHLkucwGo36hpyB86OtA/hhKcts=
Subject key identifier:   2A:6A:98:8E:F5:E0:AB:75:77:3F:73:FD:D0:31:BE:EE:06:C8:00:CE
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Certificate issuer:       /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial:       01A13AB6E5B0686D7C3409E666F88913F913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
Manifest number:          0E10
Signing time:             Wed 14 Oct 2026 14:00:27 +0000
Manifest this update:     Wed 14 Oct 2026 14:00:27 +0000
Manifest next update:     Thu 15 Oct 2026 14:00:27 +0000
Files and hashes:         1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=)
                          2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=)
                          3: 6B6G2JKfebeDFN1P175OJ6aWis8.roa (hash: swWXMAtzWWgazaHMQDxgqtKidJX8kJHeuQhoAietQl4=)
                          4: 8jS75jCr3kyD49h3RwDHRKXbQUM.roa (hash: 7VTCQqmXyoi6eFQKQfXoq7RVIemzRyMgz7APg6Ck65o=)
                          5: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=)
                          6: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=)
                          7: CSmKTNAvawh8XsEkgkrFERa_yiY.roa (hash: uAIJ9ALdwfJ9g4zl3CS6Ug1EGzr6MThwz4GVhjHfCeo=)
                          8: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=)
                          9: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=)
                          10: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=)
                          11: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=)
                          12: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: iMzySxI7TvNLOQYpgMj2rLL4cH371FVGvOmhBLWg2jA=)
                          13: _KOoXuIy-JpSDDCszJO9wC3Bn4o.roa (hash: ev27sZHARHUebbK4YGLxKKHuyDx3oCAJQZgHXUBVYKk=)
                          14: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=)
                          15: l2IgZg0d0_JKN1ewzVfxUJWZvzk.roa (hash: 8p3Ow1BC3IyEN6V4cKS/NtLbfcoj764XTp5t/qdy/ck=)
                          16: o1UYE1jV5PblyZO2iNZ4-raUgSI.roa (hash: 27dqGZSaERzz4YwOJ962/KtMY8HRkVITXFCH3q2fZyY=)
                          17: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=)
                          18: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=)
                          19: w4pOS00-WT8ek8G2Mdr-YEPTPPU.roa (hash: NfeOWBwkuTv2O7eYqPzr/8E7DBvsLk+YN3z1wBrs2GE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:b6:e5:b0:68:6d:7c:34:09:e6:66:f8:89:13:f9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
        Validity
            Not Before: Oct 14 14:00:27 2026 GMT
            Not After : Oct 15 14:00:27 2026 GMT
        Subject: CN=2a6a988ef5e0ab75773f73fdd031beee06c800ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:40:db:84:f1:79:e6:52:90:2f:f5:9f:35:
                    7d:a6:4d:3f:25:d2:bb:04:f8:5f:13:11:10:59:3d:
                    85:db:60:40:40:c0:3c:bc:df:cc:f2:50:b9:ab:ab:
                    09:d5:ad:99:2b:da:85:8c:f7:5e:96:a0:2c:a4:5b:
                    86:6e:6a:83:99:28:ad:e0:b4:b0:1c:f8:95:4e:54:
                    45:ca:9a:6d:9a:fc:d6:59:05:a8:3a:b4:d4:99:a1:
                    20:94:4f:61:21:6f:86:3e:f0:08:ff:a3:22:ca:64:
                    00:62:6c:f7:17:af:2e:a6:71:f9:4a:11:4e:f6:28:
                    ad:fb:b7:11:2f:c6:a2:8a:20:e7:d9:f6:88:be:79:
                    88:39:84:d3:6f:75:e8:e5:c1:ac:b6:26:ba:1c:af:
                    34:55:83:b1:ca:b7:47:ae:dc:a5:5e:03:05:9d:d2:
                    dd:73:84:a3:2d:a9:24:77:8c:29:b3:6f:32:3a:1f:
                    9a:6e:2e:05:c3:bb:a5:c2:1d:be:99:fc:26:cf:a0:
                    e1:00:08:3e:92:2f:74:ed:1f:5d:49:c5:1c:ef:ad:
                    16:76:2e:04:03:ce:04:ca:2e:42:29:6e:84:18:40:
                    44:89:98:28:71:67:6f:33:0a:24:38:04:47:7e:c6:
                    f8:e6:7f:65:66:90:9e:1f:84:3d:3f:9b:52:2f:0f:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6A:98:8E:F5:E0:AB:75:77:3F:73:FD:D0:31:BE:EE:06:C8:00:CE
            X509v3 Authority Key Identifier:
                keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:35:98:a4:65:ab:8a:08:7f:1d:5f:10:85:eb:b3:9c:d3:41:
         12:50:38:f7:7c:1e:59:cd:5d:1b:52:9b:af:33:93:11:b6:e9:
         8d:ed:34:cf:a8:be:f1:d4:27:42:7b:d0:12:72:be:de:ac:99:
         cc:79:c3:de:2f:aa:30:36:ad:48:63:0a:1e:2f:df:43:8b:95:
         ca:ec:76:15:b5:53:65:74:e6:7a:71:4b:98:7e:83:f7:bd:3f:
         f4:82:86:fe:bd:62:f9:88:f1:fd:b3:d0:5e:0f:db:28:6d:42:
         85:33:cc:eb:c6:20:b8:4f:21:f1:ca:27:df:48:c6:26:93:39:
         c8:91:9b:47:ba:3d:ec:2d:cb:b9:57:f4:f6:30:ef:88:eb:1c:
         f7:6b:04:e8:36:a4:46:10:5f:cb:56:cd:7f:ab:b4:05:46:3e:
         2e:33:d9:8f:c2:5c:22:2f:7b:f2:8f:da:95:fe:c2:fc:c5:27:
         20:5c:92:da:6d:1b:6d:54:34:65:e9:f1:3e:2d:ee:e4:f5:24:
         e8:e2:2a:10:dd:c6:4b:46:98:ff:eb:45:f2:f2:16:34:61:1f:
         7c:59:23:93:81:dd:6c:46:15:37:3e:94:cf:39:de:f3:a2:af:
         ed:18:e7:d5:a1:a3:42:f1:3c:02:8b:58:78:69:55:c3:1a:b1:
         c4:63:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:07:35 2026 by rpki-client