Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File:                     rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier:          EukkeWlsVdHhMf7dPOX6zMXV/5VUeKE0Riy1EBg0Tis=
Subject key identifier:   F5:3B:C8:F0:5E:89:4E:B2:D2:79:C3:A1:51:54:41:0C:11:D6:8B:45
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer:       /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial:       01A1DE71240C5C0F2361A9306F53A9D61844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number:          1AF7
Signing time:             Sun 15 Nov 2026 09:01:58 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:58 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:58 +0000
Files and hashes:         1: IgFQrerKfVP7wy44zfUDO_Ryu40.roa (hash: d+QkU0y4pn6BlJ50YCAOplUfwVp1JgVys4D+BWQE0Ss=)
                          2: eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa (hash: Sf1KzRutRQ8Om6lChpX9qp6C7pNo5SKRUwiV8EG2Y1Y=)
                          3: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: KrJwvdccOf/ZzXP5y9IPZ6TiKM/puZN135yxTGKblC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:71:24:0c:5c:0f:23:61:a9:30:6f:53:a9:d6:18:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
        Validity
            Not Before: Nov 15 09:01:58 2026 GMT
            Not After : Nov 16 09:01:58 2026 GMT
        Subject: CN=f53bc8f05e894eb2d279c3a15154410c11d68b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:da:65:15:31:dd:f0:a3:2e:45:1d:14:f9:
                    13:20:e2:9b:62:cf:fe:39:97:4b:a1:85:dc:b1:2f:
                    a8:74:97:1d:fe:4c:cd:d2:ac:6f:08:ea:ff:51:bd:
                    50:a9:26:ce:43:6f:0b:64:95:07:ef:18:13:6e:46:
                    ac:a6:50:a0:8e:3b:52:04:ea:8c:3c:5c:74:3b:89:
                    8a:7b:9e:8a:86:57:64:65:76:39:ec:9f:69:c5:eb:
                    4f:5d:d3:81:a8:97:a9:ba:89:e9:5c:51:74:df:60:
                    37:c3:0b:b6:48:3c:fa:53:df:de:fa:42:1d:ce:39:
                    8b:be:5d:a9:40:be:9d:7b:8f:76:48:51:e1:44:2c:
                    7b:e1:f8:61:14:0f:c6:47:a9:af:31:6b:b4:62:53:
                    6c:d3:0f:41:e2:b9:c8:ef:4d:c1:ef:93:e0:60:6a:
                    8f:d2:df:ca:c6:e1:3e:ef:a0:7d:a9:86:f1:5a:b6:
                    3e:d3:2f:1e:a7:04:76:1d:af:88:ff:2d:a1:a2:88:
                    8f:23:21:84:fb:eb:da:b2:57:6b:8d:cf:ae:7e:07:
                    ac:ab:eb:b8:f3:b2:3e:53:8e:40:1a:87:df:34:3a:
                    ee:e4:6e:12:37:f1:80:5b:be:f7:44:a9:ca:35:62:
                    a4:c6:2f:37:73:1c:17:a0:3c:ca:cd:7e:87:b7:52:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3B:C8:F0:5E:89:4E:B2:D2:79:C3:A1:51:54:41:0C:11:D6:8B:45
            X509v3 Authority Key Identifier:
                keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b7:2c:45:76:6b:b5:c4:a2:3a:44:e0:fb:46:e6:b5:4b:18:
         25:9c:b8:9e:19:36:81:76:2a:b9:fb:e0:72:62:35:d2:02:66:
         fe:cf:c6:2f:ea:b0:c9:ff:f1:83:9d:91:be:5d:14:4d:46:6f:
         fd:14:93:87:0d:24:6c:92:45:0a:7e:e5:88:67:30:6b:54:43:
         f5:8f:50:3e:b3:24:ef:0e:86:40:75:53:d8:eb:a8:65:a4:79:
         33:46:e6:f9:5c:12:79:56:a7:03:05:9d:87:c4:5b:77:d4:08:
         5b:24:89:6d:37:c6:93:d5:cf:0d:c4:89:ad:a9:48:4a:35:6a:
         ec:f3:b4:ab:9b:38:6d:af:7e:9f:c2:aa:03:fd:e9:55:cc:74:
         91:1c:6f:d5:9e:ca:c3:1d:c5:77:20:bb:6f:a3:52:af:59:b4:
         6b:78:ed:9e:5a:35:f9:e7:93:fe:a0:6a:82:89:df:bc:d4:55:
         6a:cb:fb:fb:37:d3:e9:92:4f:bd:d4:12:a6:a9:25:4b:ff:d2:
         8a:a8:9e:9d:af:4b:59:39:02:63:eb:73:9a:30:1b:9d:be:63:
         2c:10:0f:c1:34:86:08:2b:cd:72:79:59:21:b4:9e:64:01:70:
         82:cb:d6:2f:ef:ea:67:15:29:9e:03:e0:e4:01:c8:2c:c4:34:
         c4:7d:30:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecSQMXA8jYakwb1Op1hhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDk4NDUwMTA4NGE0NzIyMGM1Y2NjZjU0NzhiODk3YzI4
MjJjN2YwHhcNMjYxMTE1MDkwMTU4WhcNMjYxMTE2MDkwMTU4WjAzMTEwLwYDVQQD
EyhmNTNiYzhmMDVlODk0ZWIyZDI3OWMzYTE1MTU0NDEwYzExZDY4YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK/aZRUx3fCjLkUdFPkTIOKbYs/+
OZdLoYXcsS+odJcd/kzN0qxvCOr/Ub1QqSbOQ28LZJUH7xgTbkasplCgjjtSBOqM
PFx0O4mKe56KhldkZXY57J9pxetPXdOBqJepuonpXFF032A3wwu2SDz6U9/e+kId
zjmLvl2pQL6de492SFHhRCx74fhhFA/GR6mvMWu0YlNs0w9B4rnI703B75PgYGqP
0t/KxuE+76B9qYbxWrY+0y8epwR2Ha+I/y2hooiPIyGE++vasldrjc+ufgesq+u4
87I+U45AGoffNDru5G4SN/GAW773RKnKNWKkxi83cxwXoDzKzX6Ht1KrjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU7yPBeiU6y0nnDoVFUQQwR1otFMB8GA1UdIwQY
MBaAFKwJhFAQhKRyIMXMz1R4uJfCgix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgt
NGJjNzAzNGYyOGQ4LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgtNGJjNzAzNGYyOGQ4
LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7csRXZr
tcSiOkTg+0bmtUsYJZy4nhk2gXYqufvgcmI10gJm/s/GL+qwyf/xg52Rvl0UTUZv
/RSThw0kbJJFCn7liGcwa1RD9Y9QPrMk7w6GQHVT2OuoZaR5M0bm+VwSeVanAwWd
h8Rbd9QIWySJbTfGk9XPDcSJralISjVq7PO0q5s4ba9+n8KqA/3pVcx0kRxv1Z7K
wx3FdyC7b6NSr1m0a3jtnlo1+eeT/qBqgonfvNRVasv7+zfT6ZJPvdQSpqklS//S
iqiena9LWTkCY+tzmjAbnb5jLBAPwTSGCCvNcnlZIbSeZAFwgsvWL+/qZxUpngPg
5AHILMQ0xH0wzQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:06:27 2026 by rpki-client