Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File:                     1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier:          IPHpWSb9Q6wZnjWQzEm7Si8TDg+nM7cO/DuTGMUF7Lg=
Subject key identifier:   13:58:64:E7:14:0C:20:89:B7:7C:99:5F:64:D2:82:5C:55:9B:D7:5B
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer:       /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial:       01A0C33257107FC7F242462CC11CE4AFA3BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 09:00:51 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:51 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:51 +0000
Files and hashes:         1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: HRXHFlJq4s5eg1QtQAa9yQplHAbFirT/P0jofv1bFM4=)
                          2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
                          3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
                          4: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:32:57:10:7f:c7:f2:42:46:2c:c1:1c:e4:af:a3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
        Validity
            Not Before: Sep 21 09:00:51 2026 GMT
            Not After : Sep 22 09:00:51 2026 GMT
        Subject: CN=135864e7140c2089b77c995f64d2825c559bd75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:3b:64:70:bd:e3:ff:c7:6f:28:6e:bb:b6:
                    62:ba:31:8a:16:27:af:78:88:e4:62:27:e4:de:5a:
                    3b:4a:2f:89:b2:2c:d7:6d:0d:af:d2:53:e1:ab:30:
                    1e:fa:c8:a1:35:10:d8:50:6a:a5:2a:19:f2:7a:6e:
                    48:c4:5c:88:04:f4:ef:2f:ab:39:09:01:0b:87:47:
                    17:b0:02:31:f4:b9:33:5e:07:31:ff:02:ad:70:a9:
                    fc:fa:ee:b2:da:a8:af:be:c5:27:25:14:9a:d0:f5:
                    44:1e:e3:c8:0c:63:3e:b2:48:16:a0:85:96:74:37:
                    b3:2c:c1:29:ff:3e:11:44:5c:1d:8d:0a:cf:b3:bc:
                    02:ce:9e:be:1f:64:8b:e7:ba:4e:7b:2a:08:59:6c:
                    83:ac:75:be:0f:13:02:18:a7:52:65:8a:6d:0e:94:
                    e2:f2:e6:83:25:54:06:33:a9:24:2b:8f:9e:b9:36:
                    2e:8c:3e:03:ac:f4:57:d6:4f:88:d7:43:61:0f:15:
                    78:07:c8:72:99:3b:a6:cb:6b:06:07:55:f7:62:05:
                    5e:98:2b:c4:15:58:b6:c2:0f:15:56:fa:69:b6:15:
                    d4:58:8b:30:50:06:ce:d9:59:96:15:a8:b7:39:b0:
                    a9:24:52:82:37:28:1a:31:60:2d:aa:75:b8:4d:55:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:58:64:E7:14:0C:20:89:B7:7C:99:5F:64:D2:82:5C:55:9B:D7:5B
            X509v3 Authority Key Identifier:
                keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:11:a1:0b:b2:74:81:8f:96:4d:ec:1d:b0:be:09:b4:4f:d5:
         46:e4:17:3b:56:a8:06:3a:e3:27:69:fa:50:c4:c2:93:77:8d:
         5d:b8:29:bf:a7:85:c8:fb:19:a0:0c:71:9e:03:7d:07:44:0d:
         bb:57:59:20:47:a3:c8:1f:84:dd:98:d6:6a:4a:7e:43:16:73:
         b0:82:b6:4e:9e:82:40:57:8e:8f:a8:fa:cd:c2:15:44:54:94:
         24:08:2f:95:21:7a:79:28:43:8a:0d:06:bc:39:7a:79:e6:43:
         65:1a:08:5c:b4:90:83:e0:c4:6b:00:f4:d5:12:39:c8:7b:99:
         44:54:65:72:aa:c2:a3:0a:9b:34:86:a2:cc:ee:a7:24:e5:23:
         06:3e:13:1c:21:3e:b9:ec:0e:e0:7a:97:d9:07:5f:ed:32:87:
         04:70:49:64:51:28:30:45:d5:ca:c2:c6:55:0b:9a:3d:bf:5d:
         6e:76:63:94:10:05:de:33:4d:3d:00:b4:e9:5a:7d:10:15:ff:
         87:c7:4d:af:e9:61:7c:2e:fb:0f:3c:cc:3e:13:cd:a9:8d:27:
         44:f2:46:9d:77:b4:d7:6f:f2:22:37:e1:70:d6:7c:16:2a:c1:
         87:59:90:25:83:91:26:9d:b2:eb:af:33:a0:9e:10:9e:d3:ca:
         f6:14:9a:a1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDDMlcQf8fyQkYswRzkr6O/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw
MGViY2YwHhcNMjYwOTIxMDkwMDUxWhcNMjYwOTIyMDkwMDUxWjAzMTEwLwYDVQQD
EygxMzU4NjRlNzE0MGMyMDg5Yjc3Yzk5NWY2NGQyODI1YzU1OWJkNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgk7ZHC94//Hbyhuu7ZiujGKFiev
eIjkYifk3lo7Si+JsizXbQ2v0lPhqzAe+sihNRDYUGqlKhnyem5IxFyIBPTvL6s5
CQELh0cXsAIx9LkzXgcx/wKtcKn8+u6y2qivvsUnJRSa0PVEHuPIDGM+skgWoIWW
dDezLMEp/z4RRFwdjQrPs7wCzp6+H2SL57pOeyoIWWyDrHW+DxMCGKdSZYptDpTi
8uaDJVQGM6kkK4+euTYujD4DrPRX1k+I10NhDxV4B8hymTumy2sGB1X3YgVemCvE
FVi2wg8VVvppthXUWIswUAbO2VmWFai3ObCpJFKCNygaMWAtqnW4TVWmGQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBNYZOcUDCCJt3yZX2TSglxVm9dbMB8GA1UdIwQY
MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk
LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1
NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxGh
C7J0gY+WTewdsL4JtE/VRuQXO1aoBjrjJ2n6UMTCk3eNXbgpv6eFyPsZoAxxngN9
B0QNu1dZIEejyB+E3ZjWakp+QxZzsIK2Tp6CQFeOj6j6zcIVRFSUJAgvlSF6eShD
ig0GvDl6eeZDZRoIXLSQg+DEawD01RI5yHuZRFRlcqrCowqbNIaizO6nJOUjBj4T
HCE+uewO4HqX2Qdf7TKHBHBJZFEoMEXVysLGVQuaPb9dbnZjlBAF3jNNPQC06Vp9
EBX/h8dNr+lhfC77DzzMPhPNqY0nRPJGnXe012/yIjfhcNZ8FirBh1mQJYORJp2y
668zoJ4QntPK9hSaoQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:04:31 2026 by rpki-client