Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File:                     4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier:          NzjWsm+Nt0+IRCdFLxrU21+zWgIpVY+nUzh9OkQpxSk=
Subject key identifier:   E6:16:88:7E:9D:56:C2:82:EA:FA:07:F3:A8:E1:DD:78:5F:42:BC:AD
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer:       /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial:       01A1DEDE1184BE94E8BE5F8F952CBEE6953E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number:          1140
Signing time:             Sun 15 Nov 2026 11:00:57 +0000
Manifest this update:     Sun 15 Nov 2026 11:00:57 +0000
Manifest next update:     Mon 16 Nov 2026 11:00:57 +0000
Files and hashes:         1: 0gBlJTwbURvMna08HGkpbxF3GuY.roa (hash: +AHpd/2s8j+dmg3ibj8zF8ms1DXXH4Z/pjBe0gUwZIo=)
                          2: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: o9rb/xKaZbOBLuUvHT3zqNkLH3MuVRsqeyBA46StEgk=)
                          3: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (hash: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk=)
                          4: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (hash: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:11:84:be:94:e8:be:5f:8f:95:2c:be:e6:95:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
        Validity
            Not Before: Nov 15 11:00:57 2026 GMT
            Not After : Nov 16 11:00:57 2026 GMT
        Subject: CN=e616887e9d56c282eafa07f3a8e1dd785f42bcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:20:d0:9a:00:c5:37:91:c3:5b:ce:26:33:
                    cc:36:63:6a:65:dc:25:c2:90:e8:6f:8c:c1:1d:99:
                    24:52:8f:a9:a5:3e:f6:ca:08:75:22:0d:a8:ad:86:
                    bf:d4:e6:44:ee:ae:5b:b4:a1:5e:41:bb:f0:e2:df:
                    17:29:bc:22:14:c0:9b:7b:79:c2:2d:3a:18:c9:cd:
                    97:ee:63:c4:f6:30:f5:de:40:92:8f:ad:a0:bf:a5:
                    f2:8d:28:e2:d0:b3:9e:54:b8:99:16:1c:47:6a:b9:
                    40:70:8c:a0:f1:1f:81:5c:b6:6e:be:94:30:5e:cc:
                    55:38:77:4f:b9:2d:4f:ef:ed:06:6c:f1:92:8b:4d:
                    5c:20:b7:e2:19:20:72:f1:c6:d3:fd:40:8f:f1:b7:
                    91:31:05:f3:e1:55:af:b5:c9:fa:c3:8d:42:5e:f2:
                    9d:ad:d7:1d:b1:1c:d2:c5:aa:9c:fb:de:42:41:6f:
                    2a:16:4f:89:7d:9b:aa:af:04:58:e2:08:1c:e0:6c:
                    e8:ca:d0:da:1a:b9:0d:44:eb:e0:1f:17:87:e4:5e:
                    87:f9:db:7f:0b:da:bf:fc:41:f4:f2:71:dd:3f:cc:
                    8c:ca:13:21:88:77:6d:2c:86:36:5f:bd:43:0d:52:
                    d5:af:74:7a:1e:a2:ad:6d:a1:a8:b0:a0:5f:db:fb:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:16:88:7E:9D:56:C2:82:EA:FA:07:F3:A8:E1:DD:78:5F:42:BC:AD
            X509v3 Authority Key Identifier:
                keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:8e:db:c6:9e:ce:3a:f3:86:f9:6a:27:84:2c:f5:15:13:
         de:f0:25:15:ad:ea:b2:87:4a:42:49:a5:27:e0:89:4b:d5:09:
         6f:44:cb:00:87:9a:10:26:b5:88:d1:09:57:e0:45:2e:65:7e:
         f2:63:3a:0e:05:14:21:07:e5:39:b5:b9:ca:70:d1:98:f8:01:
         63:e9:2a:60:cc:23:af:84:94:b3:b4:3b:c1:f4:3a:52:e4:88:
         c0:ea:25:15:86:95:b6:50:d4:23:10:32:a8:09:8a:63:53:35:
         9a:3b:0a:6d:7a:ec:83:f3:ae:b6:a9:40:ae:3e:c3:24:87:23:
         96:3f:64:37:52:00:40:8f:d7:af:54:b3:ef:8a:cb:8f:12:35:
         6e:59:0c:6e:7b:cc:8d:23:58:37:ad:b9:ff:b7:2d:f9:8b:5b:
         f2:1a:b6:32:fd:8d:9d:8d:b3:ed:09:27:ab:97:65:3e:b7:9b:
         ea:5e:e8:c5:8c:9d:a6:27:2b:84:91:b6:c5:f3:bc:b1:8f:08:
         21:5e:d1:3d:a2:47:a9:99:89:6e:53:56:5f:f5:a4:cd:6d:78:
         3f:26:bd:a6:17:ee:58:09:1f:d2:fa:8a:39:f8:cd:31:9e:d2:
         ed:e0:64:cd:2b:15:08:f9:b1:4e:01:87:c9:67:b9:7d:fc:b5:
         51:f6:c8:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3hGEvpTovl+PlSy+5pU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2
YTI0ZjUwHhcNMjYxMTE1MTEwMDU3WhcNMjYxMTE2MTEwMDU3WjAzMTEwLwYDVQQD
EyhlNjE2ODg3ZTlkNTZjMjgyZWFmYTA3ZjNhOGUxZGQ3ODVmNDJiY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCgg0JoAxTeRw1vOJjPMNmNqZdwl
wpDob4zBHZkkUo+ppT72ygh1Ig2orYa/1OZE7q5btKFeQbvw4t8XKbwiFMCbe3nC
LToYyc2X7mPE9jD13kCSj62gv6XyjSji0LOeVLiZFhxHarlAcIyg8R+BXLZuvpQw
XsxVOHdPuS1P7+0GbPGSi01cILfiGSBy8cbT/UCP8beRMQXz4VWvtcn6w41CXvKd
rdcdsRzSxaqc+95CQW8qFk+JfZuqrwRY4ggc4GzoytDaGrkNROvgHxeH5F6H+dt/
C9q//EH08nHdP8yMyhMhiHdtLIY2X71DDVLVr3R6HqKtbaGosKBf2/sOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYWiH6dVsKC6voH86jh3XhfQrytMB8GA1UdIwQY
MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt
OWNhZjI1YTQ5OWQ3LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3
LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXD6O28ae
zjrzhvlqJ4Qs9RUT3vAlFa3qsodKQkmlJ+CJS9UJb0TLAIeaECa1iNEJV+BFLmV+
8mM6DgUUIQflObW5ynDRmPgBY+kqYMwjr4SUs7Q7wfQ6UuSIwOolFYaVtlDUIxAy
qAmKY1M1mjsKbXrsg/OutqlArj7DJIcjlj9kN1IAQI/Xr1Sz74rLjxI1blkMbnvM
jSNYN625/7ct+Ytb8hq2Mv2NnY2z7Qknq5dlPreb6l7oxYydpicrhJG2xfO8sY8I
IV7RPaJHqZmJblNWX/WkzW14Pya9phfuWAkf0vqKOfjNMZ7S7eBkzSsVCPmxTgGH
yWe5ffy1UfbI0A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:01:14 2026 by rpki-client