Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File:                     1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier:          9dStt3qNAVdrFk0j2hSMKhw+pJZRfpZNjKsAJrRZEwk=
Subject key identifier:   A1:8F:18:10:17:3B:59:A2:99:36:DA:D8:0B:53:42:74:7C:56:F8:68
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer:       /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial:       01A0C3693956D4CBB5FFC17886F9131A140F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number:          1460
Signing time:             Mon 21 Sep 2026 10:00:48 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:48 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:48 +0000
Files and hashes:         1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: 5aLzyiG5HJrvUEMrjydj1yMlT84JScesShJCJU311pY=)
                          2: CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa (hash: 6UG3E6BSMIFC2YC9VNs/S3EPWadhLSS97sUzfp/jObs=)
                          3: eNxkL16VsfbxNpT4qIe7Vwh1riY.asa (hash: ZmJ1Py74vcSNkNeWOaFBer3G+b9/WXs2+n2RLvj/wcM=)
                          4: mJoDlO3NR5D8OqKGLKWGSnN77Dc.roa (hash: 5iVJo/pmU4tCOmzWx6Yvb+04DOT0wTAh7Zm7gKM4+zQ=)
                          5: prY-rLIal9gwsZUoWucK1yyF1hs.asa (hash: NDjhtGqZMT7ro6hNfoHbI/n8/Z/kEUq2p2BLNvKXvjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:39:56:d4:cb:b5:ff:c1:78:86:f9:13:1a:14:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
        Validity
            Not Before: Sep 21 10:00:48 2026 GMT
            Not After : Sep 22 10:00:48 2026 GMT
        Subject: CN=a18f1810173b59a29936dad80b5342747c56f868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:5c:18:29:97:a4:a9:67:9f:78:a8:d3:59:
                    8d:79:39:04:9a:dc:49:8e:cf:12:5d:6e:06:57:e0:
                    99:49:0d:b6:7d:ef:2f:ea:38:6e:71:34:12:87:8b:
                    e5:f3:d0:67:97:83:ac:a0:d3:3d:78:18:61:a6:8e:
                    4f:0e:00:29:1b:61:b5:7c:ba:af:1f:f7:cf:69:27:
                    1a:a4:48:79:de:74:96:69:f6:57:62:1a:76:2a:3c:
                    cf:87:e0:db:b3:55:1f:3e:87:30:d8:bf:4a:2c:7b:
                    74:85:a2:d1:8c:09:a6:e2:98:bb:de:32:a5:f6:ec:
                    ef:6d:5e:66:e4:82:6a:76:8d:13:a4:da:88:7c:eb:
                    dd:1a:10:b7:26:d6:23:76:ec:7a:ce:ab:d8:f8:db:
                    e6:d9:bb:5b:e8:98:9d:ec:9d:ed:60:7e:34:42:71:
                    78:c7:9e:63:b2:0b:85:cf:94:7b:33:48:bf:0b:06:
                    c3:df:23:04:0e:6d:40:7c:c7:36:2c:a9:b3:f4:1d:
                    eb:78:ce:4a:5c:ab:5e:8a:fc:a6:3a:75:97:11:91:
                    79:78:ed:1d:3b:ec:d1:5c:c5:2b:e1:0e:9d:a4:65:
                    3e:a9:4f:d5:1c:30:4c:1a:d1:d1:a9:33:86:39:e2:
                    ec:f2:7d:9e:6e:1a:71:e0:1e:6e:de:33:c3:08:db:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8F:18:10:17:3B:59:A2:99:36:DA:D8:0B:53:42:74:7C:56:F8:68
            X509v3 Authority Key Identifier:
                keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:35:b8:b4:50:3d:64:80:53:d8:11:a2:df:d6:3d:da:96:bd:
         98:a3:a1:a9:09:aa:f3:ab:40:54:61:8a:8f:a3:93:30:66:f9:
         e4:1f:07:8f:3b:62:6d:44:04:8c:9c:3e:cd:a3:2c:2e:f9:fd:
         3d:66:50:68:33:6e:fa:18:dc:a3:83:ff:f7:3a:e3:b7:58:c4:
         d9:b2:85:1a:02:49:13:09:2a:9f:8d:08:c3:66:c0:e6:d3:dd:
         91:fe:77:65:a8:cd:93:5e:6a:89:21:ee:02:4b:00:9f:b3:88:
         e4:ea:f2:9f:73:de:c7:ce:38:24:77:10:97:ae:b4:ca:ac:f4:
         5e:f5:c8:ca:f6:d4:d8:74:11:58:ee:8b:09:97:51:19:f5:41:
         d2:50:10:37:59:0b:6c:56:95:39:59:e5:ce:a4:d1:c4:d6:61:
         a4:97:be:89:ef:16:a4:92:e6:c6:9a:34:3c:e3:19:98:d5:28:
         20:89:3a:2e:68:76:58:4a:e3:df:2a:9c:9b:7b:79:b3:ce:83:
         a9:16:28:57:dd:1c:c1:b9:09:ea:09:3a:3b:c6:b8:28:57:12:
         2f:24:86:76:62:55:df:d6:b0:64:49:fb:8b:67:aa:6d:7d:5a:
         98:c0:a6:f8:83:bb:20:b8:cb:92:14:fb:6b:6f:0a:b8:6b:52:
         e8:d5:75:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaTlW1Mu1/8F4hvkTGhQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh
NmNhMjgwHhcNMjYwOTIxMTAwMDQ4WhcNMjYwOTIyMTAwMDQ4WjAzMTEwLwYDVQQD
EyhhMThmMTgxMDE3M2I1OWEyOTkzNmRhZDgwYjUzNDI3NDdjNTZmODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IpcGCmXpKlnn3io01mNeTkEmtxJ
js8SXW4GV+CZSQ22fe8v6jhucTQSh4vl89Bnl4OsoNM9eBhhpo5PDgApG2G1fLqv
H/fPaScapEh53nSWafZXYhp2KjzPh+Dbs1UfPocw2L9KLHt0haLRjAmm4pi73jKl
9uzvbV5m5IJqdo0TpNqIfOvdGhC3JtYjdux6zqvY+Nvm2btb6Jid7J3tYH40QnF4
x55jsguFz5R7M0i/CwbD3yMEDm1AfMc2LKmz9B3reM5KXKteivymOnWXEZF5eO0d
O+zRXMUr4Q6dpGU+qU/VHDBMGtHRqTOGOeLs8n2ebhpx4B5u3jPDCNuldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGPGBAXO1mimTba2AtTQnR8VvhoMB8GA1UdIwQY
MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt
YjY4ZjVkOGY2NTFhLzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh
LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjW4tFA9
ZIBT2BGi39Y92pa9mKOhqQmq86tAVGGKj6OTMGb55B8HjztibUQEjJw+zaMsLvn9
PWZQaDNu+hjco4P/9zrjt1jE2bKFGgJJEwkqn40Iw2bA5tPdkf53ZajNk15qiSHu
AksAn7OI5Oryn3Pex844JHcQl660yqz0XvXIyvbU2HQRWO6LCZdRGfVB0lAQN1kL
bFaVOVnlzqTRxNZhpJe+ie8WpJLmxpo0POMZmNUoIIk6Lmh2WErj3yqcm3t5s86D
qRYoV90cwbkJ6gk6O8a4KFcSLySGdmJV39awZEn7i2eqbX1amMCm+IO7ILjLkhT7
a28KuGtS6NV1Mw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:39:24 2026 by rpki-client