Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
File:                     DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json)
Hash identifier:          px89e2JFadvmn586i9B5iL0wL0Ojk8RR/C90h1qCGLk=
Subject key identifier:   45:70:47:BA:D0:DD:B0:28:0C:38:3E:B8:F9:F4:F3:CB:27:CB:6C:2C
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Certificate issuer:       /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial:       01A1DA5C8949B81778248F743805B0E49032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
Manifest number:          0366
Signing time:             Sat 14 Nov 2026 14:00:59 +0000
Manifest this update:     Sat 14 Nov 2026 14:00:59 +0000
Manifest next update:     Sun 15 Nov 2026 14:00:59 +0000
Files and hashes:         1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=)
                          2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=)
                          3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=)
                          4: 9CPMn8n9A5mjkPe1SFXuL0mKi4I.roa (hash: D4EraHxT4/ppNGkdi8N5s7eEH3KKmP9mBFsVKAr04RU=)
                          5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: 1uRa/2VunVISGGtjj6LXxzJhuv0/91GzRbkTJzqCTCU=)
                          6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=)
                          7: LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa (hash: saQHmdyeeE4qKDwnXpH56fkp0rFvJK6q7KF3ePpi/JU=)
                          8: OCvApHO5mjUuV4yskONg4kSU_tU.roa (hash: SD3pfUSDH8g2hAqab8oUoG9VqzVkLCW7ntgh81aWSJo=)
                          9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=)
                          10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=)
                          11: oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa (hash: 2sttQ/LaGMOGWj3sxLpiozuHzg1tWCewZ5VkHDFqrH4=)
                          12: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=)
                          13: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:5c:89:49:b8:17:78:24:8f:74:38:05:b0:e4:90:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
        Validity
            Not Before: Nov 14 14:00:59 2026 GMT
            Not After : Nov 15 14:00:59 2026 GMT
        Subject: CN=457047bad0ddb0280c383eb8f9f4f3cb27cb6c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:a9:a8:c0:36:42:59:ba:78:8f:89:d4:d4:
                    fb:d1:c8:18:f0:02:54:dd:93:2a:c1:93:82:45:a3:
                    60:0b:5c:aa:13:07:df:6b:ac:62:6b:d6:99:b3:7f:
                    66:75:2e:f7:7d:26:45:2b:37:de:8f:14:31:63:fb:
                    d2:2e:ff:3d:bc:8e:8b:fe:ba:d7:2e:92:3a:17:82:
                    67:f0:33:75:52:5c:7a:46:53:b5:43:ca:1d:7e:23:
                    47:34:4b:42:51:a8:ec:ae:bb:26:6d:ad:1a:a5:09:
                    44:dc:aa:59:66:47:5b:62:86:38:94:de:31:76:1f:
                    61:d5:07:35:d2:00:2f:4c:0b:04:4c:ee:45:a3:cc:
                    91:1a:f6:e5:69:a6:50:ea:67:5e:67:0b:44:29:1e:
                    31:a1:70:71:c5:33:85:bd:40:b7:5b:63:4a:36:68:
                    89:cd:7a:8a:9c:64:cd:cc:50:63:09:8c:ec:89:a8:
                    50:17:83:9e:b6:58:61:be:0a:34:2c:dc:f0:90:ee:
                    d5:df:7a:b7:6b:9f:0a:90:08:3b:dc:a3:1d:b3:d6:
                    d9:e4:d0:96:2c:1e:54:d9:91:c2:73:b7:f2:e6:f3:
                    b3:8d:f5:b6:a3:ea:0f:a8:40:ab:e4:09:9d:17:8e:
                    ae:f2:94:00:39:39:bf:ef:fb:b9:0c:5b:67:9b:7a:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:47:BA:D0:DD:B0:28:0C:38:3E:B8:F9:F4:F3:CB:27:CB:6C:2C
            X509v3 Authority Key Identifier:
                keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:58:ae:d5:95:ac:13:ab:df:27:6c:d6:8e:f8:b7:88:21:38:
         98:14:2d:1b:35:1f:8c:ed:2c:42:ac:28:f9:ed:24:c3:de:e4:
         76:54:e6:6f:11:5c:28:b1:9c:89:b9:d3:44:3e:b8:eb:a8:0d:
         52:9e:73:b7:7f:df:eb:b7:1e:af:f5:e9:d7:14:0e:95:7c:b6:
         85:1c:f8:9e:52:9c:14:67:d9:e1:ac:17:20:a1:c2:41:1b:cd:
         eb:60:3e:a8:ea:0b:c0:b4:03:27:00:0c:50:f3:5e:01:06:2d:
         b8:68:bb:a9:a3:6e:85:23:46:6a:68:6f:e9:71:83:45:d1:6f:
         d4:9b:0d:58:ac:16:33:20:f6:04:2b:8c:68:90:73:6e:dc:a1:
         83:c5:60:e3:23:a0:92:fe:64:a6:0e:dd:1a:1d:b1:b6:a5:43:
         b5:da:41:07:0c:b1:f6:f4:ea:db:37:54:d8:d3:f7:02:ee:34:
         d3:9d:e7:f1:14:b7:44:e9:35:d0:e4:a6:fb:f1:8b:8e:fd:3c:
         03:44:ef:f4:a0:0a:73:1a:18:5c:e5:d9:26:b5:60:05:72:4a:
         18:30:15:c9:c8:0e:b4:93:f0:83:1a:60:23:85:ba:c1:e3:5c:
         42:59:90:fb:c4:d7:9e:c8:6a:2f:c2:15:8e:38:3a:90:a7:af:
         2c:4f:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:22:40 2026 by rpki-client