Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          wyceJ5XxPkH66HtyRpytvRL1YkZAG/YYTfYai16hMkU=
Subject key identifier:   3D:88:ED:6B:3D:82:2A:B2:53:0E:6D:49:A3:7A:77:D6:88:ED:A2:8B
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       01A1DBA6412277546F9EC4D950220FB63A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          1B23
Signing time:             Sat 14 Nov 2026 20:01:08 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:08 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:08 +0000
Files and hashes:         1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
                          2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
                          3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
                          4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: Uwa9bOezPp5pHCIytmnsk0kVkx9AkLT7A0ybHnM9PAU=)
                          5: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (hash: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=)
                          6: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
                          7: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
                          8: ZmP2ZObUuyHKnhCp3yW1kDTHCgs.roa (hash: Vxkxt++oIeUph0DYbZ+8qTmMgtiVFmJg9DjiNvyd4sc=)
                          9: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
                          10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:41:22:77:54:6f:9e:c4:d9:50:22:0f:b6:3a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Nov 14 20:01:08 2026 GMT
            Not After : Nov 15 20:01:08 2026 GMT
        Subject: CN=3d88ed6b3d822ab2530e6d49a37a77d688eda28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:d8:3c:b4:29:43:03:c1:21:54:8e:1a:48:
                    b4:b0:bd:56:0d:da:76:a2:51:88:f9:e7:a2:8a:44:
                    14:af:c7:5b:4a:d9:05:bb:09:12:42:5b:e7:48:e7:
                    98:d9:8b:00:08:16:90:2d:af:71:e8:1f:e7:c8:e8:
                    16:0f:e4:cd:b7:5d:90:4e:b5:30:57:ce:a7:b7:41:
                    49:d2:75:06:58:42:84:f9:0a:1a:18:f3:94:19:8f:
                    6b:c0:17:c3:dd:86:e9:ef:44:8e:f2:3f:8c:91:0b:
                    dc:44:73:91:0e:cb:b5:45:85:d9:f5:6e:8b:3e:55:
                    47:4f:54:40:6b:e1:7c:eb:69:9f:86:bd:69:cc:7e:
                    11:b2:ab:c0:86:23:79:57:40:f2:dd:cc:11:67:c2:
                    bc:cb:17:f0:9e:d7:a3:09:2e:bc:35:87:6c:8d:3e:
                    60:b9:0f:f1:31:80:af:ef:9d:51:e5:73:0d:91:26:
                    01:57:6e:0d:0f:52:73:13:bf:0f:87:03:ae:d8:bc:
                    bf:28:20:ca:ab:18:60:28:0a:eb:15:aa:e3:17:3c:
                    28:7b:e2:9b:56:b1:aa:07:2e:67:db:e7:44:f1:6c:
                    4b:bc:81:e3:09:88:39:3d:f4:56:6b:50:a3:81:02:
                    11:d0:52:c9:b3:a6:15:20:ab:82:66:b3:a1:e4:6b:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:ED:6B:3D:82:2A:B2:53:0E:6D:49:A3:7A:77:D6:88:ED:A2:8B
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9d:d3:7d:a1:71:b2:a9:fe:05:38:8e:fb:ea:7a:9b:66:88:
         41:ac:34:15:56:44:b1:01:a6:79:bb:92:e3:10:c0:cf:58:d3:
         e6:c2:b7:94:a7:c9:85:90:31:0b:5f:00:c0:f8:84:e8:af:d9:
         a4:6d:32:a5:99:b6:44:49:15:80:15:51:d9:c8:50:d6:55:02:
         00:32:48:bc:a6:b2:b3:93:36:86:33:00:19:fd:6c:1d:94:91:
         30:21:ed:4a:8d:72:64:67:3b:39:77:d8:e0:10:4c:30:dd:fe:
         4a:c3:1a:86:10:43:38:db:a9:4c:e0:d5:20:1a:f5:f3:57:ad:
         e9:ad:cd:4b:93:b9:a6:9f:ef:7c:d5:2e:76:e5:a9:0c:6d:ee:
         68:61:7a:93:4c:1a:f8:8d:95:62:f7:95:90:b5:a8:8e:2d:7c:
         08:c3:8d:45:6b:97:8d:67:48:5a:b5:38:54:43:f3:91:6a:a0:
         41:5a:6a:9c:e9:08:fa:4f:1b:42:11:ea:bc:3d:a3:2c:2a:14:
         51:d2:08:dc:b0:f0:ac:01:62:53:d8:d4:65:8f:92:6c:cc:ee:
         28:bf:d5:35:30:73:d8:09:80:22:9d:5e:6e:90:a9:b3:0b:24:
         23:e8:68:2b:c4:b8:9c:3d:ed:27:74:07:7c:de:bd:86:27:f7:
         05:f3:8c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbpkEid1RvnsTZUCIPtjqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0
N2ZkY2UwHhcNMjYxMTE0MjAwMTA4WhcNMjYxMTE1MjAwMTA4WjAzMTEwLwYDVQQD
EygzZDg4ZWQ2YjNkODIyYWIyNTMwZTZkNDlhMzdhNzdkNjg4ZWRhMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3TYPLQpQwPBIVSOGki0sL1WDdp2
olGI+eeiikQUr8dbStkFuwkSQlvnSOeY2YsACBaQLa9x6B/nyOgWD+TNt12QTrUw
V86nt0FJ0nUGWEKE+QoaGPOUGY9rwBfD3Ybp70SO8j+MkQvcRHORDsu1RYXZ9W6L
PlVHT1RAa+F862mfhr1pzH4RsqvAhiN5V0Dy3cwRZ8K8yxfwntejCS68NYdsjT5g
uQ/xMYCv751R5XMNkSYBV24ND1JzE78PhwOu2Ly/KCDKqxhgKArrFarjFzwoe+Kb
VrGqBy5n2+dE8WxLvIHjCYg5PfRWa1CjgQIR0FLJs6YVIKuCZrOh5GueswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2I7Ws9giqyUw5tSaN6d9aI7aKLMB8GA1UdIwQY
MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt
YjczYTM2ZDkzOWIyLzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy
LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR53TfaFx
sqn+BTiO++p6m2aIQaw0FVZEsQGmebuS4xDAz1jT5sK3lKfJhZAxC18AwPiE6K/Z
pG0ypZm2REkVgBVR2chQ1lUCADJIvKays5M2hjMAGf1sHZSRMCHtSo1yZGc7OXfY
4BBMMN3+SsMahhBDONupTODVIBr181et6a3NS5O5pp/vfNUuduWpDG3uaGF6k0wa
+I2VYveVkLWoji18CMONRWuXjWdIWrU4VEPzkWqgQVpqnOkI+k8bQhHqvD2jLCoU
UdII3LDwrAFiU9jUZY+SbMzuKL/VNTBz2AmAIp1ebpCpswskI+hoK8S4nD3tJ3QH
fN69hif3BfOMuA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:35:26 2026 by rpki-client