Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File:                     TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier:          e3Et0ftYLipHDQkyiKyWfZCpJt3F2JAiOYgiMbIQN1A=
Subject key identifier:   0D:B0:F4:68:B1:10:D3:E5:B7:33:4D:1B:D5:A8:88:0F:A5:7D:C2:4B
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer:       /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial:       01A1DA268610014AC8CD9B4FA7B17A36383C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number:          1AF8
Signing time:             Sat 14 Nov 2026 13:02:00 +0000
Manifest this update:     Sat 14 Nov 2026 13:02:00 +0000
Manifest next update:     Sun 15 Nov 2026 13:02:00 +0000
Files and hashes:         1: 665tLmaCcMewxouqGyV9AcCyzHQ.roa (hash: q0YXAbJvDBEEtJJ3Km15Pnm2Ou6SZOvu9jgXiMCzq2o=)
                          2: HPxCuEKasdXBfBVo_ZITh5PCg7o.roa (hash: djEH5n8TQdrm4j7irYK914Guor3cPdtWBBnny1Wt7pQ=)
                          3: HvD-KyEebZg0h4HW06zJm6RwnGU.roa (hash: VtrmuoyXYF78h8UEa9MliL+Xy0F2Gl7FRj7/hpHAjYA=)
                          4: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: lUVWBNj+eOWAyWDA/NxRdq7BdMWucIeAQixbyMm6NmY=)
                          5: Vka3aB9XlaAZaXatPcABq9MMMZ8.asa (hash: 2gWes96a72UxE1XgEF2/Y4kVdM/LCqKAtV5HrBf3vqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:26:86:10:01:4a:c8:cd:9b:4f:a7:b1:7a:36:38:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
        Validity
            Not Before: Nov 14 13:02:00 2026 GMT
            Not After : Nov 15 13:02:00 2026 GMT
        Subject: CN=0db0f468b110d3e5b7334d1bd5a8880fa57dc24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:42:8e:91:c9:9c:23:9c:4c:e2:48:36:70:9e:
                    6c:61:2e:13:34:84:35:24:b3:85:ee:77:dd:71:fe:
                    cd:eb:70:e1:fe:02:1b:f1:0d:ec:80:57:8a:e9:5a:
                    8a:c6:d3:ae:de:cb:75:fa:b7:95:0c:1f:cd:29:05:
                    d4:b8:5c:d6:b0:bd:40:3d:d3:85:0a:d7:3a:20:7d:
                    d9:6c:c2:e0:b8:14:a3:5a:e5:b9:74:e7:ac:11:eb:
                    51:98:48:b9:6e:38:15:3d:c8:5b:eb:4a:71:42:e3:
                    ce:2a:e2:f2:b9:1e:b1:54:4b:b4:7f:41:d0:c4:10:
                    b2:e8:2b:60:31:60:be:64:ce:62:1e:57:19:88:ea:
                    19:1d:c5:d1:28:d3:91:7e:cf:50:76:1e:ce:a3:f7:
                    ce:45:f0:b5:3d:fe:82:95:1c:37:96:b2:52:75:1d:
                    dc:15:25:83:37:50:fe:6c:5f:ae:cd:89:6e:e0:8a:
                    c6:80:07:01:75:ce:d6:20:0b:45:dd:ca:46:6e:8b:
                    83:f9:0a:85:c4:07:b5:37:2c:05:36:4b:c3:20:8d:
                    d6:95:68:d2:05:26:5b:d5:be:c3:ab:5a:1c:20:55:
                    fe:d2:fd:1e:06:2f:55:4b:86:61:f2:ad:4c:b0:6f:
                    0c:9f:50:81:35:4d:83:99:80:44:13:01:24:20:d0:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B0:F4:68:B1:10:D3:E5:B7:33:4D:1B:D5:A8:88:0F:A5:7D:C2:4B
            X509v3 Authority Key Identifier:
                keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fd:85:f3:0b:a2:d0:8c:39:8f:62:8e:ea:68:bc:32:b1:55:
         af:eb:b6:9a:3c:26:73:6b:60:8a:47:bd:ad:bf:18:2f:ba:dc:
         1f:9b:c2:1c:7d:d1:67:6c:6c:77:3d:cd:b9:90:b8:f2:cc:b1:
         19:6a:9b:78:55:33:bb:0c:c3:d1:a8:ca:a1:42:54:c1:89:ae:
         68:37:2d:53:01:af:11:83:32:f2:ac:8c:e0:52:1b:bf:57:f6:
         cf:17:f7:be:0b:75:6c:19:c3:6b:2a:94:b9:b3:a1:47:69:7f:
         17:62:49:cd:7d:89:2c:65:7f:aa:bd:8c:ae:13:e7:c5:50:c3:
         da:ab:b5:93:53:40:a4:4b:83:fe:e4:57:3a:6e:a6:e9:5c:45:
         1f:55:e8:0e:6f:9c:27:66:c4:f0:43:44:98:46:95:3b:eb:25:
         19:5a:31:77:e9:ec:44:c1:f2:22:8a:e6:f5:b1:d6:3c:f5:ce:
         f7:a1:70:33:1e:40:a1:d9:bf:7e:e9:66:e6:ea:cf:25:45:1f:
         50:00:c6:f6:db:93:49:b7:b1:0c:79:5d:29:ea:6d:67:83:31:
         99:a7:83:a6:9d:28:ab:88:87:b2:67:53:2e:29:07:15:ce:41:
         0f:b8:1f:ee:a3:36:7a:05:8f:d6:8c:30:72:ec:50:cb:2a:e6:
         f8:61:61:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHaJoYQAUrIzZtPp7F6Njg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGJlNDMzOTRhN2MyYmYxZThmZGZiYjFkNTA2ZmEzN2Fj
NzMyMzEwHhcNMjYxMTE0MTMwMjAwWhcNMjYxMTE1MTMwMjAwWjAzMTEwLwYDVQQD
EygwZGIwZjQ2OGIxMTBkM2U1YjczMzRkMWJkNWE4ODgwZmE1N2RjMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UKOkcmcI5xM4kg2cJ5sYS4TNIQ1
JLOF7nfdcf7N63Dh/gIb8Q3sgFeK6VqKxtOu3st1+reVDB/NKQXUuFzWsL1APdOF
Ctc6IH3ZbMLguBSjWuW5dOesEetRmEi5bjgVPchb60pxQuPOKuLyuR6xVEu0f0HQ
xBCy6CtgMWC+ZM5iHlcZiOoZHcXRKNORfs9Qdh7Oo/fORfC1Pf6ClRw3lrJSdR3c
FSWDN1D+bF+uzYlu4IrGgAcBdc7WIAtF3cpGbouD+QqFxAe1NywFNkvDII3WlWjS
BSZb1b7Dq1ocIFX+0v0eBi9VS4Zh8q1MsG8Mn1CBNU2DmYBEEwEkINDp3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2w9GixENPltzNNG9WoiA+lfcJLMB8GA1UdIwQY
MBaAFExL5DOUp8K/Ho/fux1Qb6N6xzIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzct
NWYzZDA2ZjZhNWQyLzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzctNWYzZDA2ZjZhNWQy
LzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf2F8wui
0Iw5j2KO6mi8MrFVr+u2mjwmc2tgike9rb8YL7rcH5vCHH3RZ2xsdz3NuZC48syx
GWqbeFUzuwzD0ajKoUJUwYmuaDctUwGvEYMy8qyM4FIbv1f2zxf3vgt1bBnDayqU
ubOhR2l/F2JJzX2JLGV/qr2MrhPnxVDD2qu1k1NApEuD/uRXOm6m6VxFH1XoDm+c
J2bE8ENEmEaVO+slGVoxd+nsRMHyIorm9bHWPPXO96FwMx5Aodm/fulm5urPJUUf
UADG9tuTSbexDHldKeptZ4MxmaeDpp0oq4iHsmdTLikHFc5BD7gf7qM2egWP1oww
cuxQyyrm+GFhyQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:11 2026 by rpki-client