Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
File:                     ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft (raw, json)
Hash identifier:          oHPSnjpvEbzMaOaRFlg2uVW6zQ8vdLMOB3g9/WtlcI4=
Subject key identifier:   7E:53:53:9B:2D:1D:C0:C9:BC:76:32:FD:FD:B3:59:93:23:60:52:D1
Authority key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Certificate issuer:       /CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Certificate serial:       01A0DFBC8C5D7ACA08E672E47FFB0C5CEE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
Manifest number:          01EF
Signing time:             Sat 26 Sep 2026 22:01:10 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:10 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:10 +0000
Files and hashes:         1: 7ZqISZcCHbaHwtwLkUD_r8agXsw.asa (hash: dl1w2jg1byW481fc0haGqfo1j34GohFywTi+hYY0kWc=)
                          2: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl (hash: iFH6YAQhsdc6pfUAb4V+gdp25OF9n634BnYesz7haXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:8c:5d:7a:ca:08:e6:72:e4:7f:fb:0c:5c:ee:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
        Validity
            Not Before: Sep 26 22:01:10 2026 GMT
            Not After : Sep 27 22:01:10 2026 GMT
        Subject: CN=7e53539b2d1dc0c9bc7632fdfdb35993236052d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:54:28:b7:dc:95:d2:aa:6a:c0:eb:3d:b7:
                    9c:dc:30:ca:13:34:a5:c0:2a:87:e6:d0:46:40:de:
                    52:49:b6:94:51:53:78:cf:70:a7:dc:f4:4b:63:25:
                    97:25:38:59:71:b1:e7:38:66:91:45:d4:40:22:76:
                    3b:3f:88:9e:1c:bd:73:f1:59:71:73:a2:99:c5:a9:
                    6c:52:ae:1b:61:f5:38:85:d0:71:7b:44:26:cd:80:
                    ff:7b:50:4a:ad:a1:2c:b0:0d:50:22:d3:a1:49:32:
                    8c:8d:c0:6c:f6:8a:88:34:a4:2a:e0:ab:9e:34:0e:
                    dc:33:e9:59:ca:55:5a:8e:ce:40:be:70:55:d6:c6:
                    49:1c:92:f6:a0:81:e6:23:02:59:3c:22:63:4b:a7:
                    64:5c:2e:7a:42:63:03:c1:6c:91:8d:58:cb:75:ea:
                    43:d8:94:22:cb:aa:a1:00:ba:a1:4d:d2:27:2c:70:
                    e1:6d:45:5e:30:42:c0:46:04:68:1f:93:78:53:7a:
                    df:ed:80:73:ed:b7:39:a5:d3:32:fc:0e:62:af:92:
                    15:c5:8b:51:10:01:13:89:56:cb:db:b0:ee:d1:5a:
                    11:12:25:3c:4a:0a:4f:c7:c5:24:a3:02:8f:d6:19:
                    be:62:bd:d7:0b:c7:a5:c0:71:4d:17:c5:ec:5a:42:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:53:9B:2D:1D:C0:C9:BC:76:32:FD:FD:B3:59:93:23:60:52:D1
            X509v3 Authority Key Identifier:
                keyid:65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:28:71:cb:d3:c3:56:da:c5:8e:54:1b:4e:28:bf:97:5b:a5:
         4b:fa:75:d0:55:7f:a8:db:e7:77:6c:1c:03:eb:8d:27:dd:c0:
         95:a3:16:da:34:95:f1:ab:b4:1c:7a:7c:50:eb:86:f7:0d:e2:
         2c:d1:04:6f:7e:e2:83:e0:a6:7e:f0:91:f0:f5:91:e6:42:09:
         e2:d0:0d:88:b9:06:41:fa:88:fa:54:c7:3a:24:6b:4f:1a:5d:
         25:c5:2b:ad:22:1c:c1:cd:6c:eb:74:2e:ff:94:5d:2f:71:c9:
         b1:22:8b:07:f8:4f:88:a3:3e:2e:a3:cf:44:2c:91:7a:eb:62:
         4a:49:33:81:74:d5:f8:4c:b5:76:f5:31:72:82:e6:d2:cb:55:
         f7:36:90:e8:26:09:62:9e:cc:19:fa:95:eb:b8:c0:f9:6d:79:
         71:a9:c1:8d:55:d1:0c:99:9a:f6:8c:af:2e:34:0a:e7:84:c4:
         ab:72:eb:24:98:78:cf:d3:4f:b4:bc:f1:8d:7a:8e:e6:fd:61:
         5e:1d:b3:45:dd:fe:63:b7:09:7f:87:e0:d6:b2:65:1e:3e:95:
         85:40:5a:ca:03:88:66:97:4d:c4:79:43:96:9d:4c:9a:50:65:
         80:38:47:f1:ca:c6:de:74:00:2e:3c:e1:2f:3a:db:16:f8:c1:
         b5:5c:19:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvIxdesoI5nLkf/sMXO6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDQ4ODUwZTYxMmNkMjNkNmYwZjRlNGE0MTIzYzk4NGFh
OWY2ZWEwHhcNMjYwOTI2MjIwMTEwWhcNMjYwOTI3MjIwMTEwWjAzMTEwLwYDVQQD
Eyg3ZTUzNTM5YjJkMWRjMGM5YmM3NjMyZmRmZGIzNTk5MzIzNjA1MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGRUKLfcldKqasDrPbec3DDKEzSl
wCqH5tBGQN5SSbaUUVN4z3Cn3PRLYyWXJThZcbHnOGaRRdRAInY7P4ieHL1z8Vlx
c6KZxalsUq4bYfU4hdBxe0QmzYD/e1BKraEssA1QItOhSTKMjcBs9oqINKQq4Kue
NA7cM+lZylVajs5AvnBV1sZJHJL2oIHmIwJZPCJjS6dkXC56QmMDwWyRjVjLdepD
2JQiy6qhALqhTdInLHDhbUVeMELARgRoH5N4U3rf7YBz7bc5pdMy/A5ir5IVxYtR
EAETiVbL27Du0VoREiU8SgpPx8UkowKP1hm+Yr3XC8elwHFNF8XsWkJYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5TU5stHcDJvHYy/f2zWZMjYFLRMB8GA1UdIwQY
MBaAFGUEiFDmEs0j1vD05KQSPJhKqfbqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFTSVVPWVN6U1BXOFBUa3BCSThtRXFwOXVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xNDFmMDItMzI0OS00YmRiLTllNWYt
NTVjYzg3NjVlODQwLzEvWlFTSVVPWVN6U1BXOFBUa3BCSThtRXFwOXVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8xNDFmMDItMzI0OS00YmRiLTllNWYtNTVjYzg3NjVlODQw
LzEvWlFTSVVPWVN6U1BXOFBUa3BCSThtRXFwOXVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZihxy9PD
VtrFjlQbTii/l1ulS/p10FV/qNvnd2wcA+uNJ93AlaMW2jSV8au0HHp8UOuG9w3i
LNEEb37ig+CmfvCR8PWR5kIJ4tANiLkGQfqI+lTHOiRrTxpdJcUrrSIcwc1s63Qu
/5RdL3HJsSKLB/hPiKM+LqPPRCyReutiSkkzgXTV+Ey1dvUxcoLm0stV9zaQ6CYJ
Yp7MGfqV67jA+W15canBjVXRDJma9oyvLjQK54TEq3LrJJh4z9NPtLzxjXqO5v1h
Xh2zRd3+Y7cJf4fg1rJlHj6VhUBaygOIZpdNxHlDlp1MmlBlgDhH8crG3nQALjzh
LzrbFvjBtVwZjw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:45:44 2026 by rpki-client