Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          EA/B9FKtXH+rXm+C9xlQUr7R8z9Ca/QbEcajLnw83eM=
Subject key identifier:   F3:5C:98:53:97:E5:5D:57:7F:A1:1E:DC:0D:04:F8:18:DA:F3:B4:43
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       01A0C934740B956FCBC128596AE4A0221CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 13:00:52 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:52 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:52 +0000
Files and hashes:         1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: 1X1m5epSupIqDBYLl7eiGujBfZZha3b7/JGuSXxRiPs=)
                          2: h-DdB5q6o6vGcwUvYQjItuQoHSo.roa (hash: R0KxdO/E8HjCSvDapDPgguWBk+j+4g//kGxl/YMu2PE=)
                          3: raD7wvr0TvKrEvtYxhgDhDykZL0.roa (hash: ZH0H7QhGDMc2MvPc+MJKw1tOd2Aq2f2jOpFxkwLqpAI=)
                          4: y1-SGhZC7LSQ3xAFEOGz9QyG038.roa (hash: G+7mp0FPcfU99vlwCxTLgDF4pbzcHad2tCEvXbWZJ1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:74:0b:95:6f:cb:c1:28:59:6a:e4:a0:22:1c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Sep 22 13:00:52 2026 GMT
            Not After : Sep 23 13:00:52 2026 GMT
        Subject: CN=f35c985397e55d577fa11edc0d04f818daf3b443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:c9:9f:26:a4:d1:78:32:1b:28:1e:22:70:
                    35:aa:1c:b8:d1:d9:0e:2f:b0:b4:48:f0:98:38:2e:
                    74:ef:ed:77:0e:29:79:72:00:13:35:d9:58:6e:14:
                    36:26:26:53:a6:b1:f7:ca:d7:a4:e9:6b:18:68:e6:
                    78:c0:c0:8a:e9:c2:d3:d1:af:70:54:82:af:b9:80:
                    c5:8f:17:be:3d:94:dc:da:8c:46:93:9e:b1:7c:31:
                    64:21:16:78:24:3a:71:cf:02:a7:66:f9:41:2b:d6:
                    53:82:0b:a5:23:16:a3:23:36:41:36:dc:f8:a1:f2:
                    5d:e2:34:cd:3f:58:55:39:d8:f4:93:8c:3a:00:fe:
                    f0:c7:4e:08:aa:7c:86:47:93:2a:12:9b:78:e2:85:
                    3b:18:60:47:35:f5:f0:e0:bb:02:19:9c:82:a1:b8:
                    9b:ae:b5:d8:b4:9c:54:79:06:da:fd:4c:cc:d4:4d:
                    72:00:e5:13:81:8c:e0:61:39:7e:f9:8c:af:d8:f9:
                    63:12:8d:64:ac:ab:ba:d7:54:82:c4:2f:af:65:51:
                    95:f5:73:9a:17:13:47:8a:24:c7:24:f4:68:29:65:
                    e1:27:ca:ff:9d:a6:9f:9d:09:cd:be:8a:85:a2:6f:
                    7e:b3:79:25:39:ff:0d:1c:ab:b8:d7:55:14:e4:8e:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5C:98:53:97:E5:5D:57:7F:A1:1E:DC:0D:04:F8:18:DA:F3:B4:43
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:37:e8:ce:cc:9c:fc:44:a5:2e:41:d2:95:0b:1a:69:61:29:
         5e:f8:f2:71:39:ab:ce:a4:e3:7d:a1:88:db:d4:84:e2:0b:5d:
         b9:a2:43:c3:41:90:3f:77:f4:60:17:fe:72:b7:f8:6e:2b:1a:
         d0:30:dc:5e:e8:a1:24:5e:8f:84:83:a9:5d:10:d7:6d:78:29:
         52:96:48:77:b6:8a:15:9d:5f:c4:9c:3f:00:c9:c8:17:5f:2d:
         dc:f7:23:a1:0f:9f:ac:3e:12:6b:0a:f8:c8:07:90:0d:36:c7:
         0c:4d:cb:06:fa:0e:0d:bc:8b:4b:d3:12:84:28:65:88:d7:92:
         36:dd:0b:2c:48:d8:b7:c5:4f:49:45:85:24:84:4f:f9:1f:f2:
         37:71:89:2a:39:c6:83:3b:53:f6:c9:d8:f3:2b:e5:c2:a1:21:
         09:49:2e:82:57:b7:4f:84:27:96:9a:08:d4:de:b5:c0:a5:39:
         11:34:5a:89:ef:a3:2a:84:8e:93:9e:16:09:77:42:2e:2c:c0:
         34:7c:92:3e:fd:75:fc:f9:15:7f:3b:20:46:c9:b6:78:67:aa:
         69:62:b2:21:56:65:d7:c6:2e:af:3b:e3:de:7b:e5:25:e5:cc:
         16:fa:fa:47:2d:36:72:85:9c:f8:3d:ea:fb:d1:b9:78:01:de:
         49:ba:c9:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNHQLlW/LwShZauSgIhzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNhMWY5MDUxOGQ0MjUzZjMyNTk0N2Q3ZjMyZGI3ODcy
MTY0N2MwHhcNMjYwOTIyMTMwMDUyWhcNMjYwOTIzMTMwMDUyWjAzMTEwLwYDVQQD
EyhmMzVjOTg1Mzk3ZTU1ZDU3N2ZhMTFlZGMwZDA0ZjgxOGRhZjNiNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvnJnyak0XgyGygeInA1qhy40dkO
L7C0SPCYOC507+13Dil5cgATNdlYbhQ2JiZTprH3ytek6WsYaOZ4wMCK6cLT0a9w
VIKvuYDFjxe+PZTc2oxGk56xfDFkIRZ4JDpxzwKnZvlBK9ZTggulIxajIzZBNtz4
ofJd4jTNP1hVOdj0k4w6AP7wx04IqnyGR5MqEpt44oU7GGBHNfXw4LsCGZyCobib
rrXYtJxUeQba/UzM1E1yAOUTgYzgYTl++Yyv2PljEo1krKu611SCxC+vZVGV9XOa
FxNHiiTHJPRoKWXhJ8r/naafnQnNvoqFom9+s3klOf8NHKu411UU5I55bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNcmFOX5V1Xf6Ee3A0E+Bja87RDMB8GA1UdIwQY
MBaAFGRMofkFGNQlPzJZR9fzLbeHIWR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQt
YjkwZDk3NGU1ZmI1LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQtYjkwZDk3NGU1ZmI1
LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTfozsyc
/ESlLkHSlQsaaWEpXvjycTmrzqTjfaGI29SE4gtduaJDw0GQP3f0YBf+crf4bisa
0DDcXuihJF6PhIOpXRDXbXgpUpZId7aKFZ1fxJw/AMnIF18t3PcjoQ+frD4Sawr4
yAeQDTbHDE3LBvoODbyLS9MShChliNeSNt0LLEjYt8VPSUWFJIRP+R/yN3GJKjnG
gztT9snY8yvlwqEhCUkugle3T4QnlpoI1N61wKU5ETRaie+jKoSOk54WCXdCLizA
NHySPv11/PkVfzsgRsm2eGeqaWKyIVZl18Yurzvj3nvlJeXMFvr6Ry02coWc+D3q
+9G5eAHeSbrJCQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:23:09 2026 by rpki-client