Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File:                     TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier:          6AGTZH8HMpLPubpXvBD3dz9Zx66/M8WDdRXacNJ3b38=
Subject key identifier:   DD:CE:35:6F:FF:6E:57:F9:42:07:51:B4:F6:F3:4C:DC:AB:4A:7E:97
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       01A1DD5DDCF0169B7946B85FE069610063AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number:          1AFC
Signing time:             Sun 15 Nov 2026 04:01:18 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:18 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:18 +0000
Files and hashes:         1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
                          2: FEE0W1FvUWZY1yNTAUusq7fzBQA.roa (hash: Hd0jbgNDlWlFVrZYfQAqVLAGgeJbu+X/gxILT2NBZwY=)
                          3: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
                          4: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
                          5: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
                          6: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: miLQn0shx4yJ0sQ/douZVrsmKKsNat+7B9T8SJvcKsU=)
                          7: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5d:dc:f0:16:9b:79:46:b8:5f:e0:69:61:00:63:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: Nov 15 04:01:18 2026 GMT
            Not After : Nov 16 04:01:18 2026 GMT
        Subject: CN=ddce356fff6e57f9420751b4f6f34cdcab4a7e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:89:05:d3:c6:e8:79:3d:eb:30:e5:55:a1:
                    80:31:30:6e:d3:3f:61:fd:88:17:8f:02:04:c0:a6:
                    a7:3f:0c:f4:a3:dd:42:bf:6f:30:e8:db:2e:f2:90:
                    bf:d4:38:a9:34:54:e4:3f:81:27:bf:29:9e:1b:ef:
                    8c:d1:3b:7b:e0:f2:28:af:ca:63:9c:3c:ad:24:be:
                    74:c3:48:a9:b5:68:6c:44:da:a2:ef:f6:59:e0:88:
                    b5:2a:f4:cb:24:18:3e:8f:bb:5f:ca:26:7e:a9:93:
                    d7:bc:08:0f:96:94:7f:e4:9d:02:2f:ba:b9:73:57:
                    a3:9e:a5:30:05:df:89:a4:5d:db:70:cc:9e:26:c2:
                    37:ce:49:82:db:bb:cd:c0:f4:82:bf:20:d4:68:89:
                    64:97:80:57:d4:24:25:5c:34:c1:63:77:5e:f0:ec:
                    33:81:bb:f8:37:b6:2a:55:eb:93:9d:ee:cf:72:e9:
                    04:bd:4f:79:a3:1a:d4:fb:00:7a:24:b9:63:d7:48:
                    35:ef:d0:05:00:a6:5f:c4:42:71:ac:8e:f3:82:af:
                    5c:c9:0a:89:c6:b8:c0:4b:6d:6e:2c:08:8b:08:10:
                    70:57:90:c5:17:1c:4c:5d:c5:7d:2c:f8:7f:f1:a7:
                    17:cb:8b:72:fe:ec:b5:db:75:45:5f:a5:3b:10:59:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CE:35:6F:FF:6E:57:F9:42:07:51:B4:F6:F3:4C:DC:AB:4A:7E:97
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:7f:55:f2:0a:11:90:1f:4f:49:8c:4d:fe:77:da:c6:46:
         29:c2:83:af:e7:19:ce:dc:1f:88:79:c3:44:34:a7:40:c8:49:
         47:47:d7:e5:54:c2:bf:7e:cd:e5:3b:0b:4c:d2:58:34:55:68:
         9c:33:1c:e2:8e:1c:b9:6f:c3:a1:ab:ad:ab:7d:d1:f5:f2:9f:
         58:30:07:1b:e8:85:20:ad:33:3d:1c:22:4d:7b:3f:49:e9:7d:
         d1:d3:11:55:cb:d9:f5:11:d4:02:95:ad:56:2c:f5:1d:9b:d0:
         10:83:af:51:eb:be:63:a5:83:d2:80:02:1c:d2:39:a0:87:37:
         db:e6:64:5a:52:a5:af:b7:a3:44:c8:ed:aa:c9:e0:35:8c:bc:
         09:22:fd:8a:1d:94:46:5a:2f:5b:15:0a:58:a0:78:a7:0c:3d:
         1d:82:8a:b6:f8:b5:ea:fa:e4:cf:d1:c1:c4:db:c5:8d:68:1f:
         c8:1a:af:05:c7:f7:be:5d:0c:77:31:d3:ba:62:f5:38:2e:66:
         ac:fa:58:fc:55:7a:ef:d9:2c:d2:2c:0d:60:d1:1d:66:9b:10:
         2d:bf:be:a8:fd:7a:58:94:5f:6a:a4:38:32:6a:a7:5a:f8:9c:
         83:6f:0c:72:f8:d8:c9:35:0c:12:a5:10:15:f9:52:50:fa:ae:
         96:7e:4a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdXdzwFpt5Rrhf4GlhAGOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk
OGE1NmQwHhcNMjYxMTE1MDQwMTE4WhcNMjYxMTE2MDQwMTE4WjAzMTEwLwYDVQQD
EyhkZGNlMzU2ZmZmNmU1N2Y5NDIwNzUxYjRmNmYzNGNkY2FiNGE3ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDKJBdPG6Hk96zDlVaGAMTBu0z9h
/YgXjwIEwKanPwz0o91Cv28w6Nsu8pC/1DipNFTkP4EnvymeG++M0Tt74PIor8pj
nDytJL50w0iptWhsRNqi7/ZZ4Ii1KvTLJBg+j7tfyiZ+qZPXvAgPlpR/5J0CL7q5
c1ejnqUwBd+JpF3bcMyeJsI3zkmC27vNwPSCvyDUaIlkl4BX1CQlXDTBY3de8Owz
gbv4N7YqVeuTne7PcukEvU95oxrU+wB6JLlj10g179AFAKZfxEJxrI7zgq9cyQqJ
xrjAS21uLAiLCBBwV5DFFxxMXcV9LPh/8acXy4ty/uy123VFX6U7EFnPkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3ONW//blf5QgdRtPbzTNyrSn6XMB8GA1UdIwQY
MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt
NDZlZTBjZDdmY2JhLzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh
LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrt/VfIK
EZAfT0mMTf532sZGKcKDr+cZztwfiHnDRDSnQMhJR0fX5VTCv37N5TsLTNJYNFVo
nDMc4o4cuW/Doautq33R9fKfWDAHG+iFIK0zPRwiTXs/Sel90dMRVcvZ9RHUApWt
Viz1HZvQEIOvUeu+Y6WD0oACHNI5oIc32+ZkWlKlr7ejRMjtqsngNYy8CSL9ih2U
RlovWxUKWKB4pww9HYKKtvi16vrkz9HBxNvFjWgfyBqvBcf3vl0MdzHTumL1OC5m
rPpY/FV679ks0iwNYNEdZpsQLb++qP16WJRfaqQ4MmqnWvicg28McvjYyTUMEqUQ
FflSUPquln5K9g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:40:35 2026 by rpki-client