Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File:                     5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier:          ATtRxLP3TBXswA93M6hruKvDMj2b0uXqI9mYSfu6dOc=
Subject key identifier:   13:4D:69:FA:51:F8:B8:92:9C:A6:15:BD:82:93:D9:F1:37:B2:C2:DE
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer:       /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial:       01A1DE02F8465DE0E7D44AACF55D925839FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number:          1278
Signing time:             Sun 15 Nov 2026 07:01:38 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:38 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:38 +0000
Files and hashes:         1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: hXcG+hEMDXHZV71K6tAIozgjW2vpSypEaomiYYZFUZg=)
                          2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:f8:46:5d:e0:e7:d4:4a:ac:f5:5d:92:58:39:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
        Validity
            Not Before: Nov 15 07:01:38 2026 GMT
            Not After : Nov 16 07:01:38 2026 GMT
        Subject: CN=134d69fa51f8b8929ca615bd8293d9f137b2c2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:f8:f1:40:85:12:0f:38:3b:ce:01:31:93:
                    0d:ef:d9:36:95:df:be:5c:0f:99:f2:37:c2:dd:b4:
                    1b:ef:27:5a:d6:39:e3:72:c0:62:44:f7:a2:23:44:
                    cd:34:65:e8:0c:de:f4:3a:f6:56:99:a3:a9:70:fa:
                    d3:b0:5f:64:c9:25:2a:c4:de:0b:8f:e7:83:b5:67:
                    a8:3e:ff:e9:31:81:09:01:db:b9:4a:b7:4f:89:35:
                    29:bf:f4:c9:bf:ec:f3:f3:9e:ac:3c:fd:f0:21:90:
                    92:31:17:5f:01:fd:1e:ca:cf:4b:eb:4e:31:4d:2d:
                    f1:b4:8c:e8:23:0b:7f:1a:e4:e4:0a:c3:d1:d6:68:
                    a8:e5:a4:3e:34:2f:5c:02:9d:a1:4a:1c:22:d0:c6:
                    76:ab:66:c9:98:df:8d:57:72:98:eb:46:5e:47:a9:
                    84:5f:27:21:69:c8:ad:d9:e3:c2:ac:77:e5:3a:6d:
                    c9:a8:30:71:39:91:c1:4d:25:7b:99:a3:d4:a7:9f:
                    76:11:ba:04:87:c8:8a:42:fa:a9:9f:cc:82:7e:6d:
                    38:34:2b:17:4a:77:c3:44:5d:de:0f:20:e6:40:27:
                    07:93:46:e2:7a:c4:2e:3c:d7:55:a4:39:e7:21:06:
                    e1:4e:0f:c3:04:4b:8d:5d:f4:2f:ac:31:19:7e:95:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4D:69:FA:51:F8:B8:92:9C:A6:15:BD:82:93:D9:F1:37:B2:C2:DE
            X509v3 Authority Key Identifier:
                keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:46:90:59:af:0d:15:45:6d:1e:cf:19:4f:13:95:04:8d:e6:
         ad:63:50:69:e7:38:f6:2e:63:f8:ef:6c:c7:83:68:ed:ad:27:
         d7:4d:af:2b:28:80:11:8c:29:69:b3:dc:1e:ff:0a:39:f1:32:
         c9:5d:db:11:78:16:69:c7:ea:20:04:d1:a1:0c:8a:f7:1e:5f:
         02:d6:ff:e5:00:eb:c6:1c:a7:95:80:93:38:6e:7e:34:fa:3a:
         17:d5:e8:9e:5d:e9:33:b2:6c:11:ae:83:d2:5c:e1:42:66:5c:
         4b:9d:21:8c:44:51:d3:62:6b:1b:c7:64:e9:d1:20:f5:47:53:
         1b:2c:d4:00:f5:10:4f:11:f8:fe:ec:a8:35:9a:11:ba:93:47:
         41:c5:21:6b:87:23:15:e9:56:12:56:df:c7:23:f0:3a:fa:42:
         07:68:62:86:8c:b8:d5:3a:7b:3a:22:7c:5f:83:b1:d0:dd:06:
         e4:7d:91:14:d5:9f:86:dc:58:a2:05:ec:fb:13:a3:23:54:8c:
         2a:e1:58:51:10:aa:74:16:71:96:90:6f:61:9a:5c:1d:59:46:
         37:c6:18:bf:fe:68:da:c4:0c:bd:4e:f0:5f:f6:8e:5c:97:20:
         ad:26:e5:28:8a:cd:3a:a2:3e:d2:a5:8c:11:8a:2d:34:bd:6c:
         cc:11:35:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAvhGXeDn1Eqs9V2SWDn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5
N2Q4MjkwHhcNMjYxMTE1MDcwMTM4WhcNMjYxMTE2MDcwMTM4WjAzMTEwLwYDVQQD
EygxMzRkNjlmYTUxZjhiODkyOWNhNjE1YmQ4MjkzZDlmMTM3YjJjMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x748UCFEg84O84BMZMN79k2ld++
XA+Z8jfC3bQb7yda1jnjcsBiRPeiI0TNNGXoDN70OvZWmaOpcPrTsF9kySUqxN4L
j+eDtWeoPv/pMYEJAdu5SrdPiTUpv/TJv+zz856sPP3wIZCSMRdfAf0eys9L604x
TS3xtIzoIwt/GuTkCsPR1mio5aQ+NC9cAp2hShwi0MZ2q2bJmN+NV3KY60ZeR6mE
Xychacit2ePCrHflOm3JqDBxOZHBTSV7maPUp592EboEh8iKQvqpn8yCfm04NCsX
SnfDRF3eDyDmQCcHk0biesQuPNdVpDnnIQbhTg/DBEuNXfQvrDEZfpWd0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNNafpR+LiSnKYVvYKT2fE3ssLeMB8GA1UdIwQY
MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt
NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx
LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkaQWa8N
FUVtHs8ZTxOVBI3mrWNQaec49i5j+O9sx4No7a0n102vKyiAEYwpabPcHv8KOfEy
yV3bEXgWacfqIATRoQyK9x5fAtb/5QDrxhynlYCTOG5+NPo6F9Xonl3pM7JsEa6D
0lzhQmZcS50hjERR02JrG8dk6dEg9UdTGyzUAPUQTxH4/uyoNZoRupNHQcUha4cj
FelWElbfxyPwOvpCB2hihoy41Tp7OiJ8X4Ox0N0G5H2RFNWfhtxYogXs+xOjI1SM
KuFYURCqdBZxlpBvYZpcHVlGN8YYv/5o2sQMvU7wX/aOXJcgrSblKIrNOqI+0qWM
EYotNL1szBE1SQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:56:35 2026 by rpki-client