Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File:                     ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier:          Cw2S+8fdaB4cyWEG6RlqMOIrewSeKu7riLdWdL1iqxo=
Subject key identifier:   E6:86:AF:AD:2D:2B:D6:97:1E:F4:FD:82:BE:0A:BE:5E:94:6D:4A:F3
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer:       /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial:       019D9B87818EE89936595C6615691C86F9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number:          07FA
Signing time:             Fri 17 Apr 2026 13:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:42 +0000
Files and hashes:         1: YDyC5kBhNI8thKV1LynCzapFE7Q.roa (hash: QeALQ6HX+21WYDZockRGHmyT4aXfggw6UzIeai2uvuw=)
                          2: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: 2Me6cxlgT1Io9sqdf6gYf12z4Qf22SgKVno/BYPwGds=)
                          3: uhkofDxDROlcHCvXKtjXZmbwMcM.roa (hash: VNaYu0cLAzaNZcXisiMMcDQwN9FyAi7e1kpMVNW8PJk=)
                          4: v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa (hash: HE5E+h78gyc1LIpKVk4+W1mq58iu0Ssx5TmwVEIggic=)
                          5: wOkpHSGw-U8KI9tK8aag-rxFIFI.roa (hash: eMuVT13Zj6Uew2bZcSNq7VO8ffPMy9zKzbd96LA2Eac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:81:8e:e8:99:36:59:5c:66:15:69:1c:86:f9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
        Validity
            Not Before: Apr 17 13:00:42 2026 GMT
            Not After : Apr 18 13:00:42 2026 GMT
        Subject: CN=e686afad2d2bd6971ef4fd82be0abe5e946d4af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:35:fe:14:78:5f:44:6a:82:30:16:9e:40:
                    31:d3:33:d0:16:e0:2e:62:76:8e:0c:03:4b:cc:e8:
                    09:99:51:7e:bc:3a:9d:a7:85:fe:52:44:93:80:1f:
                    b9:69:54:db:93:6a:8a:ac:c8:1d:c2:f4:34:e7:08:
                    ad:00:48:03:f6:74:28:6b:86:7c:28:70:38:a3:11:
                    ee:f4:40:91:95:4b:41:75:45:3a:bd:4b:2a:4f:87:
                    8e:67:9a:d9:1e:de:d0:8e:dd:6d:85:58:d5:5b:e5:
                    b2:a9:71:b5:4e:df:2f:a6:6e:49:e8:08:29:5f:aa:
                    0a:a7:94:54:9b:f2:ba:4d:98:5e:c8:5b:5f:55:f8:
                    9f:74:12:a9:cb:62:1d:d8:59:e2:34:d4:7b:d6:e2:
                    81:81:2f:cb:cc:d6:be:26:5d:d0:cc:8c:43:66:78:
                    5f:56:e6:40:c7:a8:c7:06:60:38:e2:8d:6c:24:38:
                    ae:9c:46:d3:85:58:b8:84:82:aa:b0:ff:1f:7c:eb:
                    3b:95:a0:08:5a:74:e6:27:ca:71:5c:e7:23:ed:f7:
                    09:84:a4:09:9c:a9:72:4b:30:df:5a:65:20:9a:47:
                    91:01:75:27:5b:9f:a6:05:78:de:24:7f:de:8c:6f:
                    e3:39:39:28:4d:39:54:7b:56:ce:01:e3:45:f6:38:
                    3d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:86:AF:AD:2D:2B:D6:97:1E:F4:FD:82:BE:0A:BE:5E:94:6D:4A:F3
            X509v3 Authority Key Identifier:
                keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:34:fa:c4:00:bd:86:29:bd:96:fc:01:5b:83:9d:ed:f2:
         39:8a:d8:0f:bc:24:57:cf:8f:b5:fe:2d:63:ec:d3:bb:e4:5c:
         54:d0:f6:44:7f:40:5a:63:2a:2d:c0:87:6f:7f:50:1c:07:c1:
         7e:48:6a:0b:c6:fe:46:f4:f4:73:b7:38:2c:99:af:97:c8:13:
         e9:19:db:f5:c8:9b:b1:6a:5d:33:9d:7c:e4:f9:49:7b:ac:53:
         4b:76:10:6f:19:bc:66:93:5e:95:9d:9c:92:7a:76:28:40:b5:
         45:9c:4e:d0:50:3d:fe:a8:7a:35:69:9f:5d:c0:9a:f4:f8:17:
         d1:1e:fa:47:0d:54:36:d6:68:e1:6a:8f:69:55:1e:b6:44:0f:
         3d:dd:57:e6:05:df:87:b0:98:6f:c4:76:42:32:7e:32:76:cb:
         49:c3:4d:ab:dc:ff:ad:92:51:e7:57:ed:b8:8b:7e:5a:f3:fb:
         41:e7:d6:bf:4e:be:e1:58:ff:de:f1:86:d5:62:3f:03:97:e1:
         da:75:5d:fa:e0:07:d3:ef:23:cd:26:a1:68:17:09:db:db:6b:
         73:84:d1:f0:66:86:22:1d:c5:8a:5d:6d:16:cd:5e:9b:e7:70:
         29:a1:94:9b:46:46:76:ef:e2:4a:f3:e8:26:20:0d:03:4a:f3:
         c6:68:9c:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh4GO6Jk2WVxmFWkchvm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTdiMWUxM2QzMmVkM2E2NGE3YzM1MjI3NTE2MjNlZWZh
YmU1ZjMwHhcNMjYwNDE3MTMwMDQyWhcNMjYwNDE4MTMwMDQyWjAzMTEwLwYDVQQD
EyhlNjg2YWZhZDJkMmJkNjk3MWVmNGZkODJiZTBhYmU1ZTk0NmQ0YWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2U1/hR4X0RqgjAWnkAx0zPQFuAu
YnaODANLzOgJmVF+vDqdp4X+UkSTgB+5aVTbk2qKrMgdwvQ05witAEgD9nQoa4Z8
KHA4oxHu9ECRlUtBdUU6vUsqT4eOZ5rZHt7Qjt1thVjVW+WyqXG1Tt8vpm5J6Agp
X6oKp5RUm/K6TZheyFtfVfifdBKpy2Id2FniNNR71uKBgS/LzNa+Jl3QzIxDZnhf
VuZAx6jHBmA44o1sJDiunEbThVi4hIKqsP8ffOs7laAIWnTmJ8pxXOcj7fcJhKQJ
nKlySzDfWmUgmkeRAXUnW5+mBXjeJH/ejG/jOTkoTTlUe1bOAeNF9jg9/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaGr60tK9aXHvT9gr4Kvl6UbUrzMB8GA1UdIwQY
MBaAFGQXseE9Mu06ZKfDUidRYj7vq+XzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NDUyMjgtYjQ0Mi00ZTE2LWFkNjkt
OGZmZGRiNWUzYzI2LzEvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80NDUyMjgtYjQ0Mi00ZTE2LWFkNjktOGZmZGRiNWUzYzI2
LzEvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGX80+sQA
vYYpvZb8AVuDne3yOYrYD7wkV8+Ptf4tY+zTu+RcVND2RH9AWmMqLcCHb39QHAfB
fkhqC8b+RvT0c7c4LJmvl8gT6Rnb9cibsWpdM5185PlJe6xTS3YQbxm8ZpNelZ2c
knp2KEC1RZxO0FA9/qh6NWmfXcCa9PgX0R76Rw1UNtZo4WqPaVUetkQPPd1X5gXf
h7CYb8R2QjJ+MnbLScNNq9z/rZJR51ftuIt+WvP7QefWv06+4Vj/3vGG1WI/A5fh
2nVd+uAH0+8jzSahaBcJ29trc4TR8GaGIh3Fil1tFs1em+dwKaGUm0ZGdu/iSvPo
JiANA0rzxmicIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:39:30 2026 by rpki-client