Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
File:                     V1jLEehCvK8TI2R_O-_u4vxvDiw.mft (raw, json)
Hash identifier:          K5k0UORVqTlA6rK9K3mxZ11esg1VjPoJpPbPj+XyR1M=
Subject key identifier:   0D:FE:C6:EA:E1:F6:70:60:61:CF:50:8F:57:6E:9B:F9:CA:7F:42:0B
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Certificate issuer:       /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial:       01A1DF4C9F30A10D56A67439A5BA83AFE621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
Manifest number:          09EE
Signing time:             Sun 15 Nov 2026 13:01:42 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:42 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:42 +0000
Files and hashes:         1: 1ADxSOLpryixx3KGtIF_ySrFMIk.roa (hash: kQA7j8Zh8maSf1y4cREkUBQAokAzYETRF3rxDrOA8g8=)
                          2: V1jLEehCvK8TI2R_O-_u4vxvDiw.crl (hash: G2qzOaaTRFqGbPBihyks4w85j0Zb+iS6GymTrEMrrJs=)
                          3: rpxiUjoKnwHh744xJvOBFGn49wA.roa (hash: Hs/kvEaRs/h/B/Qj7Jzp4o6weuUSHswLl+1E3XDTp7c=)
                          4: sHT9uRMJFfzV4bMDWClaNZLXg6c.roa (hash: 1CccVeF+jPttRzzbL8y6u91VStwFjE2E+hkKFOv1shU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:9f:30:a1:0d:56:a6:74:39:a5:ba:83:af:e6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
        Validity
            Not Before: Nov 15 13:01:42 2026 GMT
            Not After : Nov 16 13:01:42 2026 GMT
        Subject: CN=0dfec6eae1f6706061cf508f576e9bf9ca7f420b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:12:e8:db:f4:5d:a1:65:63:8b:c7:f7:43:
                    b3:32:92:9e:b8:e4:e6:5c:a3:a3:1d:9a:37:33:6c:
                    72:de:da:c6:ed:59:1a:68:96:43:5c:64:d7:25:8e:
                    a7:1a:81:0d:6d:f0:91:40:33:6d:37:9f:3c:94:0d:
                    25:8f:69:62:bc:3b:87:de:23:a8:27:85:0e:83:83:
                    d6:e1:47:ab:d9:ce:b5:71:95:07:d4:1d:0b:c8:69:
                    3c:d5:f8:21:40:38:fc:d6:1a:f1:53:b7:bd:11:3d:
                    a1:8a:4b:ca:1f:8b:e7:85:23:c5:1b:e3:f5:db:a6:
                    96:28:cb:42:72:cb:ea:4a:d9:9f:84:1d:84:20:f7:
                    1b:0b:e9:34:49:92:7e:66:f7:48:38:86:61:9e:fd:
                    51:2d:e2:a5:03:2f:0a:43:73:1c:e9:b1:31:39:c3:
                    d2:11:4f:db:91:8f:0a:3f:0f:6d:07:55:6b:3a:65:
                    09:32:39:ef:58:4e:bf:c0:47:25:7c:cb:80:b9:60:
                    55:74:33:a9:f5:fc:f7:77:3b:9c:97:3b:8e:77:9d:
                    3b:2b:5c:f1:e0:94:2b:21:07:7e:a7:b1:a2:e2:b8:
                    1e:46:ca:70:59:88:ef:74:38:4c:bc:fb:63:1b:72:
                    9c:11:65:6d:7f:47:6d:dd:71:83:e9:fa:be:6d:80:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FE:C6:EA:E1:F6:70:60:61:CF:50:8F:57:6E:9B:F9:CA:7F:42:0B
            X509v3 Authority Key Identifier:
                keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0d:ef:78:18:ad:27:3e:8c:41:95:63:1c:c3:d8:32:6c:3e:
         dd:a1:e4:45:4d:24:8d:55:0e:b3:6c:4e:43:cf:17:7d:bf:fd:
         06:25:7d:77:c0:ac:bb:21:53:af:db:f7:a2:fc:6d:d8:97:61:
         dd:f9:0e:13:af:8a:ca:21:48:5d:7d:e4:01:ba:36:5b:95:f4:
         da:c6:52:63:65:07:22:54:ce:46:98:42:02:94:af:36:ed:c3:
         93:5a:50:0b:ab:b2:6e:0a:72:77:60:25:cb:8c:2d:44:18:62:
         79:e2:5f:88:c8:2b:57:a1:6b:51:5d:7f:02:ae:eb:44:3b:14:
         c5:76:f1:37:04:2b:d9:c6:07:29:28:07:94:af:2b:46:3f:f5:
         71:ae:b2:d9:26:4a:63:02:34:5b:fd:51:d7:5e:cf:ea:68:ea:
         77:92:85:b9:f2:73:01:1b:c1:c5:12:e7:6a:20:12:f0:df:61:
         91:a1:5c:9b:70:a3:e9:e6:4c:ee:b5:b1:05:9f:70:4f:ed:e8:
         2b:e0:69:c8:52:fd:f2:98:16:f6:59:d1:e2:1c:1a:af:b4:cc:
         17:a2:ca:8a:89:39:b8:cc:df:59:26:af:ae:76:86:aa:60:f8:
         65:e4:6f:83:ba:44:dc:d3:0d:5d:36:9b:bf:88:31:55:29:d2:
         de:28:f5:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTJ8woQ1WpnQ5pbqDr+YhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NThjYjExZTg0MmJjYWYxMzIzNjQ3ZjNiZWZlZWUyZmM2
ZjBlMmMwHhcNMjYxMTE1MTMwMTQyWhcNMjYxMTE2MTMwMTQyWjAzMTEwLwYDVQQD
EygwZGZlYzZlYWUxZjY3MDYwNjFjZjUwOGY1NzZlOWJmOWNhN2Y0MjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeYS6Nv0XaFlY4vH90OzMpKeuOTm
XKOjHZo3M2xy3trG7VkaaJZDXGTXJY6nGoENbfCRQDNtN588lA0lj2livDuH3iOo
J4UOg4PW4Uer2c61cZUH1B0LyGk81fghQDj81hrxU7e9ET2hikvKH4vnhSPFG+P1
26aWKMtCcsvqStmfhB2EIPcbC+k0SZJ+ZvdIOIZhnv1RLeKlAy8KQ3Mc6bExOcPS
EU/bkY8KPw9tB1VrOmUJMjnvWE6/wEclfMuAuWBVdDOp9fz3dzuclzuOd507K1zx
4JQrIQd+p7Gi4rgeRspwWYjvdDhMvPtjG3KcEWVtf0dt3XGD6fq+bYDXbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3+xurh9nBgYc9Qj1dum/nKf0ILMB8GA1UdIwQY
MBaAFFdYyxHoQryvEyNkfzvv7uL8bw4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMt
OGJiZjhiZmM2ZDhlLzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMtOGJiZjhiZmM2ZDhl
LzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQ3veBit
Jz6MQZVjHMPYMmw+3aHkRU0kjVUOs2xOQ88Xfb/9BiV9d8CsuyFTr9v3ovxt2Jdh
3fkOE6+KyiFIXX3kAbo2W5X02sZSY2UHIlTORphCApSvNu3Dk1pQC6uybgpyd2Al
y4wtRBhieeJfiMgrV6FrUV1/Aq7rRDsUxXbxNwQr2cYHKSgHlK8rRj/1ca6y2SZK
YwI0W/1R117P6mjqd5KFufJzARvBxRLnaiAS8N9hkaFcm3Cj6eZM7rWxBZ9wT+3o
K+BpyFL98pgW9lnR4hwar7TMF6LKiok5uMzfWSavrnaGqmD4ZeRvg7pE3NMNXTab
v4gxVSnS3ij1Iw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:26 2026 by rpki-client