Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File:                     dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier:          zlitrz/8tdwFSPk4A2Fn+gPGF+RMYmszVmGDLgGdagk=
Subject key identifier:   BE:BB:83:83:3F:54:23:70:F5:E2:49:DC:39:6E:5D:9A:5C:9A:1C:6A
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       01A1DD26F1764F08D359F55FE620B1E10CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number:          1B0E
Signing time:             Sun 15 Nov 2026 03:01:19 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:19 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:19 +0000
Files and hashes:         1: 1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa (hash: FrUEKKMZAguXIpXWScc68qO/IKUabeFzGLn6njmAiyg=)
                          2: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=)
                          3: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=)
                          4: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=)
                          5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=)
                          6: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=)
                          7: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=)
                          8: d7PUDxLVlQHb2Dc0NDQzVZOes0E.roa (hash: bMQ8wqEnr9dnX2pC6dva+/kVC86AP2FCZzjDGc+wVkw=)
                          9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: WBzED5vWAyNM7oZG50xgM6VpIh9gSdchsF0FFTXdzFM=)
                          10: nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa (hash: pyPCsxzb7EcyMnd9eFCWZ2gNgE3Dkb4SSpOIKliViJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:26:f1:76:4f:08:d3:59:f5:5f:e6:20:b1:e1:0c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Nov 15 03:01:19 2026 GMT
            Not After : Nov 16 03:01:19 2026 GMT
        Subject: CN=bebb83833f542370f5e249dc396e5d9a5c9a1c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:19:be:d5:aa:d7:1a:ac:7d:ea:7a:61:73:
                    3d:06:ac:b0:36:1e:94:8a:6e:7a:23:8a:6c:3a:b5:
                    f4:9f:60:3b:69:a5:3e:2e:e1:17:43:d3:ff:f0:da:
                    15:98:15:7e:b7:49:e9:1e:02:64:b5:53:52:51:8d:
                    65:19:13:13:0b:25:52:71:7e:70:bd:38:2e:8f:de:
                    c3:1d:03:7f:34:08:de:e8:1a:49:ee:3f:da:3c:8a:
                    02:a9:d0:d0:8b:d4:cd:d9:3c:b5:39:fa:3b:a9:28:
                    a3:9f:a6:0f:91:02:08:4d:e8:bd:05:8d:04:d8:29:
                    9d:94:ae:5b:e0:c4:0d:fa:f1:cd:35:fc:da:81:e8:
                    58:b6:d1:a2:05:10:38:f5:19:6f:c0:37:3a:de:03:
                    e7:be:ee:a4:11:c2:83:0f:da:d5:ee:be:c3:54:b2:
                    3f:35:7d:2d:67:ac:ab:9c:14:93:f1:88:9a:7d:7d:
                    62:5a:a6:e3:a1:50:da:a1:61:53:c4:4c:74:d2:69:
                    3f:6c:69:c7:ce:e4:65:4b:24:10:87:f7:02:cc:74:
                    b0:d5:ea:61:83:f9:8e:c6:78:01:ed:29:1e:cc:50:
                    22:7f:7f:a9:da:19:6a:57:f2:64:37:0c:ce:69:aa:
                    08:c0:1b:ac:76:8b:e3:18:1a:6b:61:0d:3e:df:55:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:83:83:3F:54:23:70:F5:E2:49:DC:39:6E:5D:9A:5C:9A:1C:6A
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:3c:d1:25:3b:41:50:1f:51:5d:83:94:57:63:23:24:79:
         24:53:86:0d:9a:43:1a:0e:f4:6f:0a:b3:df:f6:68:c9:c3:8a:
         e2:ea:24:fc:d0:f9:89:4b:0c:1c:2c:88:85:ff:ad:77:a0:d8:
         04:e5:1a:72:61:c8:a4:bb:29:97:f4:ed:bb:87:bf:b5:cb:dc:
         c8:65:8c:84:34:f0:a4:dc:27:13:b6:f6:ed:22:ee:4b:72:a1:
         0a:98:d9:d4:26:1f:12:b2:51:4f:a3:fc:53:44:1d:53:12:77:
         37:eb:b6:a6:c5:e6:87:a6:f0:bb:7e:8c:61:ec:50:5b:e5:54:
         73:ef:d1:ae:3d:8c:e3:38:03:4f:21:d4:68:26:5d:ef:d8:a8:
         9e:ad:ca:8a:2c:0b:a0:cf:cb:fd:b3:3d:cc:31:99:b8:33:eb:
         2a:20:ef:86:a4:47:5f:f6:e7:f8:68:34:e5:89:b6:3f:77:53:
         71:22:5e:50:c4:51:91:0d:96:22:de:e6:0a:b1:40:39:02:cd:
         ca:94:7f:39:1a:1d:93:27:36:22:9f:48:61:d5:fe:0b:6c:b7:
         63:70:97:ab:59:78:c7:90:0d:fc:c1:f5:4a:9e:e8:3b:07:e6:
         37:03:f8:ae:7c:c8:1e:4b:70:ab:3c:ad:93:f6:e1:18:2c:72:
         a9:be:88:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdJvF2TwjTWfVf5iCx4QzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm
OWRlNTYwHhcNMjYxMTE1MDMwMTE5WhcNMjYxMTE2MDMwMTE5WjAzMTEwLwYDVQQD
EyhiZWJiODM4MzNmNTQyMzcwZjVlMjQ5ZGMzOTZlNWQ5YTVjOWExYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uYZvtWq1xqsfep6YXM9BqywNh6U
im56I4psOrX0n2A7aaU+LuEXQ9P/8NoVmBV+t0npHgJktVNSUY1lGRMTCyVScX5w
vTguj97DHQN/NAje6BpJ7j/aPIoCqdDQi9TN2Ty1Ofo7qSijn6YPkQIITei9BY0E
2CmdlK5b4MQN+vHNNfzagehYttGiBRA49RlvwDc63gPnvu6kEcKDD9rV7r7DVLI/
NX0tZ6yrnBST8YiafX1iWqbjoVDaoWFTxEx00mk/bGnHzuRlSyQQh/cCzHSw1eph
g/mOxngB7SkezFAif3+p2hlqV/JkNwzOaaoIwBusdovjGBprYQ0+31UlPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL67g4M/VCNw9eJJ3DluXZpcmhxqMB8GA1UdIwQY
MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt
ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm
LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALik80SU7
QVAfUV2DlFdjIyR5JFOGDZpDGg70bwqz3/ZoycOK4uok/ND5iUsMHCyIhf+td6DY
BOUacmHIpLspl/Ttu4e/tcvcyGWMhDTwpNwnE7b27SLuS3KhCpjZ1CYfErJRT6P8
U0QdUxJ3N+u2psXmh6bwu36MYexQW+VUc+/Rrj2M4zgDTyHUaCZd79ionq3KiiwL
oM/L/bM9zDGZuDPrKiDvhqRHX/bn+Gg05Ym2P3dTcSJeUMRRkQ2WIt7mCrFAOQLN
ypR/ORodkyc2Ip9IYdX+C2y3Y3CXq1l4x5AN/MH1Sp7oOwfmNwP4rnzIHktwqzyt
k/bhGCxyqb6IyA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:39 2026 by rpki-client