Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
File:                     1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json)
Hash identifier:          fLJZMHzGEafl48xLVMzp63Xg8kVswCKmPDlbYzHYvwU=
Subject key identifier:   83:3E:62:16:79:CD:2B:61:FD:64:31:8D:DE:1F:FA:BF:A5:11:9E:98
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       01A1DBA64669F43E3681A52F1BBD3B6C0D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
Manifest number:          1AFE
Signing time:             Sat 14 Nov 2026 20:01:09 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:09 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:09 +0000
Files and hashes:         1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: TwtB1NB69OIaCs4XQ6wHBMB7oqBU9ocbPC16IPJ5c5c=)
                          2: 37GSYGpAIN5FmTc65bBlmOruleU.roa (hash: JskQXpElXo63e0l7EMdmNpQ5SlR6rEV35BDXEtseiFQ=)
                          3: GEmrHZiocuP3uGGu2fdf9GiH_oI.roa (hash: bqGaJMwhtgjzoA4tEVMy3ciK+ou3gzZ+eYmOVgdgS0o=)
                          4: PPv13jMczQJ97qYM8qnYp5GY4eY.roa (hash: xrqvSTY5mlsKJbUsZ3kCmkscnCE0qbohIQer6JB0DNc=)
                          5: _RCr9LUebfRKK9_S9NEI7YdE54o.roa (hash: Ly2P339nCiky0TDj+07otBCcuYQ4rfNr5L4NI3DPlbY=)
                          6: lmotZZaP-oLJszIL5yzQv1G62qo.roa (hash: CVe5HA8XTkB4hUBikhtIn8qce4VsU+h5vTnqP0aGAi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:46:69:f4:3e:36:81:a5:2f:1b:bd:3b:6c:0d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: Nov 14 20:01:09 2026 GMT
            Not After : Nov 15 20:01:09 2026 GMT
        Subject: CN=833e621679cd2b61fd64318dde1ffabfa5119e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:dc:6b:5a:98:ca:cb:e1:a9:15:0a:8e:85:
                    cc:82:f4:8a:80:18:7a:5e:5a:ba:46:6a:b0:19:4e:
                    30:f0:c5:b2:62:ce:9b:21:47:ad:88:ef:67:b2:ca:
                    1d:bf:5b:98:6a:28:b9:3c:6a:28:ee:83:d4:2c:49:
                    f5:33:8d:c2:65:06:b6:f1:e4:a7:ef:64:48:92:23:
                    9b:2a:4f:b4:40:98:60:b1:1e:cf:38:11:ef:66:01:
                    24:7d:76:7a:a8:3c:c8:7d:6d:4a:99:db:83:fb:db:
                    7a:d4:38:63:2a:24:ae:41:de:f1:ca:be:f8:6c:ae:
                    20:f6:37:d8:bd:a5:51:f4:2b:31:d9:ff:5f:4a:2d:
                    e6:74:0e:31:4c:97:79:d1:62:f2:21:2f:8c:e7:1e:
                    a4:06:f2:93:e8:6e:e0:0b:9f:88:dd:0a:3d:a2:f7:
                    e1:a8:60:01:b8:e0:05:86:a1:37:da:f8:37:34:9d:
                    12:61:8f:fb:1c:63:6d:4a:20:37:ad:50:cb:71:5c:
                    3f:c2:df:9d:98:3b:5d:12:f8:a6:64:8d:21:01:2b:
                    26:68:af:36:b7:d5:92:3f:ce:e9:81:b0:05:51:6a:
                    ab:c2:8f:ad:50:8f:17:5d:46:85:01:03:d7:0b:7b:
                    bb:c2:0e:96:21:cb:53:08:e2:b7:45:0b:9e:76:4f:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3E:62:16:79:CD:2B:61:FD:64:31:8D:DE:1F:FA:BF:A5:11:9E:98
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:86:17:d5:ee:96:2d:36:30:6e:32:7a:76:02:9c:04:fe:9f:
         45:15:16:4e:af:3c:97:5c:f5:e6:3d:11:f5:1e:ab:cd:12:e2:
         27:7a:e1:e6:2a:3a:74:d9:48:bc:1c:c1:e3:f0:d6:bd:86:26:
         3a:42:e0:93:34:00:ad:b1:e9:9d:e2:10:5c:c8:39:9c:b9:87:
         9c:cb:e5:2c:d0:a9:49:1d:82:56:06:94:f6:e9:8a:a8:91:81:
         51:1f:9a:e4:bf:3b:4d:de:54:f3:6e:13:ca:cc:67:27:09:da:
         e4:4b:a3:58:53:48:a3:55:ae:70:85:4b:0c:c2:a3:2c:89:ef:
         7e:69:4d:58:7f:0f:0c:de:f9:b8:9a:91:55:4d:d4:81:cc:95:
         d5:15:1b:e8:cf:06:18:c0:32:0b:d9:af:13:d5:4a:a5:b3:3b:
         22:f9:4f:1e:44:54:c7:aa:d2:ef:91:59:11:15:85:55:44:6a:
         d1:53:91:02:6b:1c:5c:4f:a3:58:41:91:45:3a:75:56:ab:c0:
         2f:17:3e:3b:9e:01:6a:3d:e7:f9:57:b5:18:b9:73:04:ed:29:
         4b:04:f9:a7:93:c8:4b:71:8e:f5:8b:97:be:e5:fc:52:47:24:
         cc:ea:ce:a4:a5:84:51:9d:ed:c4:fe:10:04:39:48:64:39:f6:
         a1:bc:86:7f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHbpkZp9D42gaUvG707bA2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3
OGRjNzEwHhcNMjYxMTE0MjAwMTA5WhcNMjYxMTE1MjAwMTA5WjAzMTEwLwYDVQQD
Eyg4MzNlNjIxNjc5Y2QyYjYxZmQ2NDMxOGRkZTFmZmFiZmE1MTE5ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZPca1qYysvhqRUKjoXMgvSKgBh6
Xlq6RmqwGU4w8MWyYs6bIUetiO9nssodv1uYaii5PGoo7oPULEn1M43CZQa28eSn
72RIkiObKk+0QJhgsR7POBHvZgEkfXZ6qDzIfW1KmduD+9t61DhjKiSuQd7xyr74
bK4g9jfYvaVR9Csx2f9fSi3mdA4xTJd50WLyIS+M5x6kBvKT6G7gC5+I3Qo9ovfh
qGABuOAFhqE32vg3NJ0SYY/7HGNtSiA3rVDLcVw/wt+dmDtdEvimZI0hASsmaK82
t9WSP87pgbAFUWqrwo+tUI8XXUaFAQPXC3u7wg6WIctTCOK3RQuedk+1fQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIM+YhZ5zSth/WQxjd4f+r+lEZ6YMB8GA1UdIwQY
MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi
LTZkOGZkMzMwZTlhYS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI2LzAzY2NlMy1lNjIwLTQ0ODMtYjA4Yi02ZDhmZDMzMGU5
YWEvMS8xLVBjOFhBODZFR3FMcDlfejQxeUJiUkI0M0hFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4YX
1e6WLTYwbjJ6dgKcBP6fRRUWTq88l1z15j0R9R6rzRLiJ3rh5io6dNlIvBzB4/DW
vYYmOkLgkzQArbHpneIQXMg5nLmHnMvlLNCpSR2CVgaU9umKqJGBUR+a5L87Td5U
824TysxnJwna5EujWFNIo1WucIVLDMKjLInvfmlNWH8PDN75uJqRVU3UgcyV1RUb
6M8GGMAyC9mvE9VKpbM7IvlPHkRUx6rS75FZERWFVURq0VORAmscXE+jWEGRRTp1
VqvALxc+O54Baj3n+Ve1GLlzBO0pSwT5p5PIS3GO9YuXvuX8UkckzOrOpKWEUZ3t
xP4QBDlIZDn2obyGfw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:15:21 2026 by rpki-client