Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
File:                     xlodocsckgri-bdIJw_e2HN6kYQ.mft (raw, json)
Hash identifier:          G9oeqJP2E1VLo7FRfNzFIvDPkWveLqQzrdnFjvQSnKI=
Subject key identifier:   BF:6C:7B:B0:8C:A4:1F:0A:16:DF:ED:CB:33:04:89:7E:8D:47:CD:A2
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       01A1D9EEBAE3C31189EDA862B31E3E73924A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
Manifest number:          04CD
Signing time:             Sat 14 Nov 2026 12:01:03 +0000
Manifest this update:     Sat 14 Nov 2026 12:01:03 +0000
Manifest next update:     Sun 15 Nov 2026 12:01:03 +0000
Files and hashes:         1: 1-DD4o6xbuV6samukDs3vaP8tu6k.roa (hash: 7AU6fV8RAb68tAatAXOQGyf+DldTsJty373d6zKIAZc=)
                          2: 1-eFVKmGWJEdXxYxER_6NTgHg9nM.roa (hash: UWlmQISqK1Q3Nfe8AMftm7uDs9PdmCWhPYuq7XWFlJc=)
                          3: 1OK4aI4lxfRP_eKM46SeYukSIsI.roa (hash: XhpM1Qnz1pgC+nFBf4Pdgsfp6+CcaI13FUqYP4l5UT8=)
                          4: 2-ObHOSAvUZejEI4LOSazZywuO0.roa (hash: y04O8UiwwV/C1kllIfIubo9ZZMlwVCF4kFfmhnKuMM4=)
                          5: 2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa (hash: 7g2yMNDEh/3UCmJMu0HEy/ij+vuN812wmv5+67aeiXQ=)
                          6: 5t6PTadZE43Euve3C6nmqOiwrAA.roa (hash: 93vF8Zus7evIMnuxiFHayEmayIrMaA5Qn+QRMO2w3NU=)
                          7: 7E96DTfT004BumK2TWn6X-KStr0.roa (hash: 4dVQ5tEe28gAbBR2YECy/CnG4r5KNVR2jJdh36ss1Ro=)
                          8: AUJBwqUEGRl5pOinQQhewx3XNN4.roa (hash: 00r5IYJwyUKYgINfARqOjf3C3sp+DUhl/0cWO2KBAGQ=)
                          9: FdFBOG_czA7j6v6Y4dm7gddEJ7Y.roa (hash: 9YtYGIO+vZ5T2hyxv7HeDob3cHulk/JcKTCyZ2ktJl0=)
                          10: GLzvmrFZwtHFe9Z1yEG5XD0OvBw.roa (hash: QOv5YSca4ZcldTa0HFwimRbho38o3TvS8gmdTUQXDWI=)
                          11: HxhyebpoISLkTNvAN26qyvo2lmU.roa (hash: r7EULTQPIgeF2nZVGpXyKwYLuTpNhfprlRs+/lVLlTk=)
                          12: MEpnn_UIBaXHk3JMf7tw8C-sp0A.roa (hash: +buMoz8blTj/Jno2gmUOhshJfC2X8Bq4gZI/d0LapjU=)
                          13: NxfGjnYv0X5TZiVtdmRazkTCJKU.roa (hash: 2F7nVhKM/Vy9+cZwRIilURDoC5MPqcm98uuB2mAsMEE=)
                          14: ONAhF68kzovl__TiZAEXKrn9kng.roa (hash: dNIX8mLNXeOy+G95aMHlNkXPy77pqitRpC6n3Ixg9Ug=)
                          15: Q6caSqrd8P2RoWwdK-Fli6nzx1E.roa (hash: n8DKy+MaJq5/+1WDyrmoZQNGAU9+RaPzqYYWTqwKXkI=)
                          16: Spi55eI2JrifMv5ym0HwLqyglo8.roa (hash: Js2piaBVieot3w/NY7INh7FCYo3taWHPYAVu8oowvZc=)
                          17: ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa (hash: mbBMJSTyfI2VzBuWzMkS287FyWqD5btpEmqCqBM0tFM=)
                          18: _VYOUpqv4o4joYaBxdO3F4bAoRg.roa (hash: tHDLHpXhmtOqKAjh5AEdbcavLeB1OGgUYiTAMnUaTDk=)
                          19: dQmrc2nZuuJy6Aymy-Tf7oYZxRk.roa (hash: LO9nmR28aOPkgvny3ve66xJHuFE8oY1t9GbJIa1BiJk=)
                          20: gEZlw9k_VPv8GbA7WWzqaTy-BMI.roa (hash: Lv/SG4mgPTraUQbE/pWdnazB2KTWa/TOwivQEs3O12Y=)
                          21: gwpdq_NkP7xGLzmZAueCQIGLNMM.roa (hash: Zzjd6w649CZmKiqH/d7WSYa+l7hvrSIPU7guX3LLEFs=)
                          22: hcYPZ59WZi-anbRfSvSr8-J35v4.roa (hash: Y4dWvIarXCDOVHtCIvzKVilrHcqHEyC2CFxqeWiN97Q=)
                          23: iR63CY1kK3TiPhYx6WEO-yojkgY.roa (hash: yNqWBZbEljIAfAFMt1cH42zOzS6vcf4m1YoQHlDtmc0=)
                          24: icij8tzbCB1q5s1zQochnbGKB_k.roa (hash: 5ILc/a0dy416laIUvkxzERmHvyyFM6HRRoVjgXd6PRU=)
                          25: jAlspVhsLbiGMlpNROg-gDmQVcU.roa (hash: lJl5x7/MJSFqX0QAPfTwxLsZfHEp37/BIM0tRwHSWCU=)
                          26: kkdrwvtIm67mYRzUq0YY24XrUnQ.roa (hash: RflwSuE6iPYXKTGfn+ZXNNVA1p+hYP+EDtyv0xx/9xg=)
                          27: lIu0H0yuC3-BywTkSb56YA1zcUs.roa (hash: 3DBYGsn6K7uF1Bw9p2Jse1TYdY1cQKyXCA9E5NJekWw=)
                          28: mDxqVz7IppCgvOdtR7DjC7b9ypI.roa (hash: ay9aW1CuP8m9lxlqxiHtvKKFTkPdf9+ts1KUQSE2mIg=)
                          29: mU7XyF7L0DmrF8731YYYro6-uEg.roa (hash: gcneQESt75PGToGMlKl2Chs6hxc818rF/uTrFSCFX+M=)
                          30: n98z2qle9j9RoGcLrh06bUNoVZY.roa (hash: CBtwp7UwHlaVOr8fW2fX58/bDbCTIdB1ZHIKVtTlbvY=)
                          31: nMRk07dWYA4PNPWdy4_OneiQcnI.roa (hash: gaGvhwXNlPpT5FkktcjaXwA95hRcq8jNbzWzYSh3XX8=)
                          32: p4WvNDQ3Z0bJaFCTZO5FxYPeDjA.roa (hash: kAMjQBMCevRJPQ3xQ3upCSjuH0vkRwCESyxAvVo8NDI=)
                          33: v9u6c1G3uDUBNBW72AIeQsbMSkU.roa (hash: cSw29uaRCfhlXcjTUk/oJ6tL7PSBGFC6VZcRPpBUoGo=)
                          34: vNvu3CipEQ22NPrTCm5toxcdUV4.roa (hash: js4t+SXfMQKXRL4QtWfYNg6zeuXvSb2Q6gaWblLMLx0=)
                          35: x-kTaEAESwYmH0KJW_2H7OzcjCk.roa (hash: Bowt6kjqLi/RQZI6rUBP3F86k03YT2NTbSXMID97UJY=)
                          36: xlodocsckgri-bdIJw_e2HN6kYQ.crl (hash: 6gDhftjlLMIxT8bMLNDbRh4KNKmxLA7Jq2oewbda3+o=)
                          37: yC8o0t5UDnNXRm6QTNFQTnpxQD8.roa (hash: eCtoDPjAs6jJBhNNGbAO6VKk9WUzDPJ5D+MNjP1PPM4=)
                          38: yXSxy-Ud5hpYhDudle8jqsHgiLk.roa (hash: bQr1kj0qxfUykyK39RyOmaCXTRaX3QEOCZ9gmcczZvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:ee:ba:e3:c3:11:89:ed:a8:62:b3:1e:3e:73:92:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Nov 14 12:01:03 2026 GMT
            Not After : Nov 15 12:01:03 2026 GMT
        Subject: CN=bf6c7bb08ca41f0a16dfedcb3304897e8d47cda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:04:b1:2d:00:95:0b:bd:a3:2f:fd:d1:cf:
                    98:a6:e5:92:33:f8:3b:20:12:df:e5:a3:9e:1b:54:
                    5f:a3:f0:49:8f:fd:25:24:4d:4b:a4:7b:74:33:98:
                    d8:ad:c3:e9:91:91:44:26:aa:cc:a6:35:33:1e:cc:
                    08:24:99:53:05:f7:7c:24:70:bf:15:8c:6c:0b:ef:
                    43:f2:a6:be:06:0a:26:3f:71:79:6b:67:b4:f7:b0:
                    14:19:03:30:b3:43:4e:4d:c0:0c:93:ba:8a:f7:9a:
                    7b:66:d9:92:af:71:5d:ba:9d:7f:23:92:c0:47:d7:
                    63:aa:05:dc:d0:7d:51:90:8d:13:85:63:b5:93:33:
                    92:e8:56:75:44:a7:41:ea:cd:09:aa:46:c5:cc:fa:
                    04:a7:56:64:db:03:67:76:5c:0e:fa:80:4c:09:73:
                    f1:ab:4b:5b:30:74:e8:bf:56:90:5a:8c:56:1f:d2:
                    59:e2:c8:9e:49:11:1a:80:07:75:a7:b0:19:25:ba:
                    a5:9f:ed:e8:16:fe:5e:2f:17:34:13:62:b5:c9:1d:
                    d8:0c:e0:22:68:50:a7:e7:67:17:8e:5e:93:b8:c7:
                    03:9c:ff:2c:1a:06:b6:fb:25:ed:f1:f3:3d:98:6d:
                    8f:d8:9f:fd:e7:4c:4e:e5:bd:06:8e:12:e4:27:ba:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6C:7B:B0:8C:A4:1F:0A:16:DF:ED:CB:33:04:89:7E:8D:47:CD:A2
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:54:f5:b4:53:a8:ea:c2:93:ea:c6:c1:18:4d:4c:0c:ab:a8:
         db:8f:b8:bb:fe:67:19:7d:5c:2b:d2:fc:cc:a4:82:d5:2c:15:
         2a:09:03:6e:1d:cd:35:53:01:74:d2:7a:45:35:0d:88:d3:ec:
         dc:59:9c:12:ba:67:c3:78:50:ae:9d:2e:a6:6e:dd:e1:9a:64:
         ec:09:7b:a1:f2:1e:0b:ad:78:fb:05:18:11:f0:0e:98:82:b3:
         8b:22:0c:f8:96:03:17:03:dc:f8:d4:6e:58:c1:c4:0d:2f:5f:
         96:74:27:33:c6:3c:0b:01:8e:2c:65:22:34:5e:9c:01:6a:11:
         74:ff:8f:78:29:1e:6c:c4:f1:b5:86:c2:3f:87:2f:70:a7:f4:
         5d:9c:80:6d:1d:08:14:90:2c:b1:a7:cf:d2:ff:14:76:98:d4:
         32:59:cb:f7:40:56:71:c2:50:67:fe:0c:e1:94:dd:0f:12:2c:
         02:a9:fc:99:4c:19:73:46:27:4d:68:6a:e7:ae:80:28:38:55:
         bd:3d:06:9e:04:1b:92:ef:c4:64:a0:66:ab:ea:c4:65:47:b3:
         9b:a0:6e:33:5b:6f:5e:c5:29:4e:e4:2a:da:56:6c:21:f0:cb:
         5a:02:01:3a:3e:67:48:d8:25:4e:66:4f:08:77:fb:dd:02:5e:
         ca:2a:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:36 2026 by rpki-client