Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          XN/yw1e/Rg7ySCocqU7gGnm2Do4gClhCmSuV175pycA=
Subject key identifier:   87:8A:55:8C:CF:B8:42:92:FD:D0:ED:AB:55:A6:9D:7A:DC:A6:39:6E
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01A1DB01A9A789023825FCA517F01C3CB729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1B43
Signing time:             Sat 14 Nov 2026 17:01:21 +0000
Manifest this update:     Sat 14 Nov 2026 17:01:21 +0000
Manifest next update:     Sun 15 Nov 2026 17:01:21 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: fJXuEHeOxbkxAwd3UgSBe8HiXK+syMGtbMMykr+HD1s=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 17:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:01:a9:a7:89:02:38:25:fc:a5:17:f0:1c:3c:b7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Nov 14 17:01:21 2026 GMT
            Not After : Nov 15 17:01:21 2026 GMT
        Subject: CN=878a558ccfb84292fdd0edab55a69d7adca6396e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:48:01:f6:81:81:1d:4a:12:7c:e6:70:61:
                    16:f7:49:10:1a:46:cc:66:4d:63:60:cf:a4:b1:e8:
                    bb:52:af:37:b6:be:28:7b:f0:b3:c5:a6:2d:91:ad:
                    b0:9e:8f:71:af:5e:06:b2:88:d8:be:b6:04:82:93:
                    ea:a0:23:a1:87:25:ce:44:58:e2:02:30:cb:d5:43:
                    5e:f6:2d:a2:01:9d:9f:b0:0d:0a:94:36:c8:c5:d2:
                    bd:e9:99:b7:39:8a:cf:78:32:39:1d:da:e2:22:c2:
                    ab:51:2b:4d:22:18:22:cd:bc:06:08:5c:d4:84:7a:
                    af:de:03:da:63:94:40:2a:2b:a5:42:54:a0:d3:de:
                    f2:4e:f5:e4:94:9e:bf:49:34:70:ff:16:23:8f:55:
                    36:84:b2:0c:94:f4:64:90:91:e8:2d:da:e3:93:43:
                    cf:6d:87:43:fb:55:f7:f9:ff:cd:34:a9:d6:61:85:
                    1f:76:64:9d:35:f0:b7:1d:1a:97:0d:cb:72:32:12:
                    16:bc:83:78:f1:36:37:7f:43:4b:ae:19:d7:7f:f7:
                    48:68:77:ec:89:81:33:79:ec:56:cf:04:5a:65:b3:
                    c3:87:15:4e:d0:68:b3:c6:b1:5c:d2:02:7d:73:2a:
                    a3:bb:82:fb:9b:41:fd:a3:24:8e:15:76:a0:8e:d8:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:55:8C:CF:B8:42:92:FD:D0:ED:AB:55:A6:9D:7A:DC:A6:39:6E
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:8e:86:42:61:45:c5:64:ce:3c:ca:ee:98:70:a3:ed:6c:
         94:03:f3:52:e0:48:4b:04:4d:20:9e:48:7f:c7:a1:b8:60:b1:
         b9:02:18:32:0e:7d:63:8f:3d:e8:3d:42:db:8e:d1:d5:b4:18:
         2d:7a:ad:72:3a:13:bc:74:ae:22:e1:ce:e0:ef:7c:d0:32:cf:
         19:d2:46:a3:2d:7b:75:77:2c:96:cd:d8:80:23:2d:02:0f:11:
         e7:a9:d4:81:8f:3d:12:8b:8d:e3:a3:39:88:16:6e:33:93:e6:
         1d:a8:fa:a6:b7:72:1d:d0:d8:3d:64:23:f3:c8:f2:09:70:26:
         b7:6d:6c:3b:06:fd:74:f9:a8:46:a5:d3:2c:cf:7f:df:54:80:
         96:78:82:bf:e7:60:6b:c9:db:7e:3e:55:d3:95:3d:89:1a:70:
         b3:e5:b8:30:2f:8c:03:a9:7d:91:84:34:cd:95:21:85:60:cc:
         57:d1:87:e0:96:13:49:bf:09:4e:6b:25:bc:81:c8:96:31:2e:
         80:de:0d:99:1c:25:7b:b4:14:c0:39:9c:eb:d3:f3:f8:e5:4e:
         12:b3:95:a8:2f:dc:18:27:cf:36:20:64:ea:54:1d:58:81:07:
         8d:d6:3f:65:2f:18:b4:e9:19:96:a3:08:77:9e:9c:22:93:24:
         57:cf:2c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbAamniQI4JfylF/AcPLcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjYxMTE0MTcwMTIxWhcNMjYxMTE1MTcwMTIxWjAzMTEwLwYDVQQD
Eyg4NzhhNTU4Y2NmYjg0MjkyZmRkMGVkYWI1NWE2OWQ3YWRjYTYzOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVNIAfaBgR1KEnzmcGEW90kQGkbM
Zk1jYM+ksei7Uq83tr4oe/CzxaYtka2wno9xr14GsojYvrYEgpPqoCOhhyXORFji
AjDL1UNe9i2iAZ2fsA0KlDbIxdK96Zm3OYrPeDI5HdriIsKrUStNIhgizbwGCFzU
hHqv3gPaY5RAKiulQlSg097yTvXklJ6/STRw/xYjj1U2hLIMlPRkkJHoLdrjk0PP
bYdD+1X3+f/NNKnWYYUfdmSdNfC3HRqXDctyMhIWvIN48TY3f0NLrhnXf/dIaHfs
iYEzeexWzwRaZbPDhxVO0GizxrFc0gJ9cyqju4L7m0H9oySOFXagjthglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeKVYzPuEKS/dDtq1WmnXrcpjluMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtWOhkJh
RcVkzjzK7phwo+1slAPzUuBISwRNIJ5If8ehuGCxuQIYMg59Y4896D1C247R1bQY
LXqtcjoTvHSuIuHO4O980DLPGdJGoy17dXcsls3YgCMtAg8R56nUgY89EouN46M5
iBZuM5PmHaj6prdyHdDYPWQj88jyCXAmt21sOwb9dPmoRqXTLM9/31SAlniCv+dg
a8nbfj5V05U9iRpws+W4MC+MA6l9kYQ0zZUhhWDMV9GH4JYTSb8JTmslvIHIljEu
gN4NmRwle7QUwDmc69Pz+OVOErOVqC/cGCfPNiBk6lQdWIEHjdY/ZS8YtOkZlqMI
d56cIpMkV88s/g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 02:40:36 2026 by rpki-client