Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File:                     10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier:          h35zH5ANsaobb/ziWfSR4L2FkuZ2Munh+1AzLl2fl9c=
Subject key identifier:   AC:7D:3D:4E:6E:7D:5A:22:2A:AF:2A:AA:6A:4E:7A:C0:C0:79:B4:0E
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       01A1DDCC0DA5AF0DF488625473DF513982BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number:          1BCC
Signing time:             Sun 15 Nov 2026 06:01:39 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:39 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:39 +0000
Files and hashes:         1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: IPsOQKvPDLxhKqB+/z+Npe6IR2C1ln6VtLeG7MRP37Q=)
                          2: 3FpaNUsc8mcx-Ib8oSSizkRATfQ.roa (hash: ObYD8tt+7rdZBauoMipJQYsm8/hKYkl44vas1c5JeLY=)
                          3: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=)
                          4: 7VTsSzgjCruuT9D_oo_GpCePRmA.roa (hash: 2bYUaq7TmrIdQwCJpi7WU1r54hlWSNb2+szJ26QwC/w=)
                          5: 8vxK53_z8HYklhUFWyAkpktEuw0.roa (hash: fteTV33OleXot1hOEaY8Dm7beVaXBAoxCGUbPRMoK00=)
                          6: CzuedwFs6U5hTvuOKKcEDZJ3m4M.roa (hash: nr0fY8ExMvANSEMYgY5geen0UP5hnXCKbuR1OPzJBig=)
                          7: Dew0eb_HAG7ZDSF4NKHJadP-gkc.roa (hash: yeQjaVa1qWsFYF/Nfl2QRVridzOhdfUMldU4qSs4j9I=)
                          8: GB2VxxHTAQE3oeKNOy6oXpUDYeA.roa (hash: pr+86uYp3dzsc2lMNlj0K0bhl/8d8CKL5lzSr9gXMD0=)
                          9: GxEm1KAYx1EaaM9vnLw4zKeoy8s.roa (hash: yKdLPkbxMhk4y0yXKwsRzEIoL/f56tRZaFXGiNAI0m4=)
                          10: N1vsaqVf5gKxac-_zVABe6JFVzA.roa (hash: dv4+2dLZ3LtbrxlRU6eNU1jKBcQAZBIrxw0Zska82dI=)
                          11: NNq9wpMKpAxhT8fj3Wua560Ittc.roa (hash: i4Kf4Mo9OoJ2SfUMhQUpkJ6uJlhJADbRdpPZKnjg2F4=)
                          12: OXE2IW1VpCia9XT2LxEeiUloYYw.roa (hash: 4H6BmMtPZ9gCUuxLHe7yW+2TKKAIOdsOn+za/8bH77U=)
                          13: T4lVyhCOiVnOTQ3Lg5EJjC_elNQ.roa (hash: uT4CMpYcd9PSs23MYUhP1OLu5a4ln+lpqzMRNI+3ytE=)
                          14: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=)
                          15: XmPsmHMxFazDvM2xbGaLp3fLVyQ.roa (hash: JOOfK4OL+DmFI900GBlmjqXTXRIIUFiLNMdSmLjsg38=)
                          16: Y_jD6XfBGC3j1T4Uy_rcOPU_LbU.roa (hash: 3ky9pLDHWdQLzf5p8PePoy070w7qJI1DOvNViZYREg0=)
                          17: ZTKu8gdoLdeYc0pPxKTooYFCHxc.roa (hash: erAoxsfhYp93JTHbGo/zctv75TY4p8dxC7HF08lucDA=)
                          18: ZxXg-fo-ey0Pu7xNak0cJ6h5Af8.roa (hash: hSgu3hDi8W5D+O9ZMxbIXNVO/5+7sKN8SCrmdDjvFmI=)
                          19: _9miT8XonE9Tj6FRqwy95LhcutA.roa (hash: EjLe3r2vBYlV2+zOTJn8MueCHmphaAvqMBSkaFbz8hw=)
                          20: aBfCZ03S1Y0sPluo5LBFUZWFYMc.roa (hash: Feultne/Hmjwrd1YJFj/DkrcIFBiGq7nwTwN4dvrKfs=)
                          21: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=)
                          22: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=)
                          23: i1_J0js7GSnwnFT6BQjKxFjCKAo.roa (hash: zSpyHhpf50CixxMSNhKrSqsP9AZoPmaaRWKJ+roEr9w=)
                          24: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=)
                          25: jdDMzewtBKUbLISHlFvozSRpGzc.roa (hash: o28fuwgFVqCMV9PwGcRHvq4z5m6vHXUHTWkbO6d6lCI=)
                          26: kfnww81EV2LKC1epnSXYA5FE04Y.roa (hash: etPZojILMkhuJnTDpOv9QrkK35LWJTKxSMDedF+KD9E=)
                          27: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=)
                          28: m6OuKI-nTfl20L9aEXGB8iN1PH8.roa (hash: MTtxC82kNcWZvy5h1TUupa5ANng9TwAh/wAaML9/3Ww=)
                          29: ntLrxfVyT3EF_HfYFDgSLQIEq5Y.roa (hash: yq11gq+saeIJh+XRctBRBjtBTL9vZCS0Lnel9O9f6gc=)
                          30: pfQIQtiw0hOQzwiCesi0AjLHapA.roa (hash: ddrH7oWf6HnIwFuplBpVDYvI9f1Yddg87dSy0YKuWKY=)
                          31: px79bX588l2XlyG_Z_SE4hunwC8.roa (hash: 7g+SKRbCnHDSPCR5/5yHiJK6n03sSz93H46UBzbiwhY=)
                          32: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=)
                          33: ruttGwJwbYzo0AN2TP7_UYRcvt0.roa (hash: ux9A3sQEvBRGsHRw6v0ITVj2Q7MxjWLzu1hZ7TwrQkg=)
                          34: un0IbkvQvcmuG0UtZ72uLz2xlsM.roa (hash: Nrsa0/rWQ6ptcq5nuI+9WUm5dxBEuClWtMNgCJ02348=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:0d:a5:af:0d:f4:88:62:54:73:df:51:39:82:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Nov 15 06:01:39 2026 GMT
            Not After : Nov 16 06:01:39 2026 GMT
        Subject: CN=ac7d3d4e6e7d5a222aaf2aaa6a4e7ac0c079b40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:cf:f8:a5:52:a2:a4:df:33:68:a1:a2:4a:
                    32:22:c1:c9:38:4c:7a:70:f6:76:e5:24:da:28:17:
                    a4:20:95:f4:92:c7:af:c2:b9:33:e7:66:24:59:15:
                    05:ee:be:44:ae:34:2b:a8:39:d0:18:a9:1f:98:23:
                    ac:df:65:d9:81:19:1f:88:a1:18:05:0a:30:ce:21:
                    9a:b5:b3:f6:56:e8:fe:e2:53:12:3d:b0:56:40:cc:
                    31:5c:8e:8a:6f:ce:b3:ea:fa:80:c5:97:ca:48:0a:
                    14:2e:1c:e4:37:e3:48:56:c4:e7:41:9c:67:22:2e:
                    ce:19:4a:e3:8c:68:6e:85:7e:15:ea:3d:56:6a:9b:
                    76:2e:dc:ab:33:ed:86:07:5e:99:b1:49:08:85:e8:
                    64:73:3c:f8:e6:f5:69:b8:c0:e2:80:62:8a:1d:94:
                    6a:94:e8:e6:8d:06:88:3e:5f:59:06:c7:62:b9:39:
                    29:86:f7:f5:6d:50:47:13:3c:74:d3:00:8d:dc:59:
                    52:99:50:8b:9b:99:32:63:1d:e2:70:fe:dc:92:f5:
                    ff:63:cd:da:4a:48:4a:09:1c:89:d8:32:fe:21:ca:
                    76:73:db:0b:74:cf:4c:6b:d7:da:68:57:e0:ef:9b:
                    f5:5f:dc:d2:55:03:e7:8a:3a:6b:69:ba:26:dd:8b:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:3D:4E:6E:7D:5A:22:2A:AF:2A:AA:6A:4E:7A:C0:C0:79:B4:0E
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:db:a2:3b:f3:fe:b0:03:49:b5:20:67:d2:68:37:4f:9d:eb:
         50:1a:9f:e4:00:d6:54:28:3d:e2:be:56:47:22:da:65:4b:91:
         87:8c:cb:6a:ef:b6:1a:16:d1:52:71:5f:80:36:96:64:1e:4d:
         9e:ac:dc:59:f0:f3:0a:b1:87:23:e9:7a:7e:c7:4a:ec:f7:b8:
         c7:69:6d:19:c0:3d:ba:d3:02:d6:e0:54:14:f7:9e:8e:d7:d0:
         e0:ba:f7:9e:b5:23:08:0c:aa:39:ef:db:5d:71:9d:a5:0b:db:
         2a:2d:1b:10:10:30:99:06:ee:33:d0:5a:fc:eb:f3:e9:07:74:
         4e:b0:fd:82:4a:50:ea:78:db:0b:e8:34:cc:f0:61:00:1d:a4:
         ce:de:83:6f:3d:ef:55:df:04:98:b7:f2:9c:53:f3:20:95:d2:
         59:7d:0a:87:2e:e2:59:35:67:6b:a9:54:48:41:00:e7:39:fe:
         66:10:cb:4c:a7:f9:c7:92:40:46:c7:9b:c9:47:d2:0f:d5:25:
         c0:37:39:4d:e2:a6:f0:2c:38:47:24:86:87:b8:07:fa:69:11:
         0f:a6:ff:70:cc:68:ed:a5:0b:b7:3e:87:05:1f:9a:58:db:a5:
         04:99:45:17:ea:3b:c8:55:4b:11:1b:d5:05:49:81:3a:e6:61:
         8b:a7:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:19:20 2026 by rpki-client