Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File:                     OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier:          iC75peELQcU6KXQIPJLVEkOLVQA7FJ8sNEAEzePNXWU=
Subject key identifier:   3F:C9:63:60:86:29:DB:3B:74:68:3C:81:0F:9B:43:3D:BF:E8:75:1D
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer:       /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial:       01A1DDCBFD63291336D87E464B0071165288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number:          0E5A
Signing time:             Sun 15 Nov 2026 06:01:35 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:35 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:35 +0000
Files and hashes:         1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
                          2: ADqOf27SLPwwto-ocjpqEJw2IBQ.roa (hash: 02wXRVyX5qgq4n1cyEf0Py4Rh/FGrWnnS89Dg9FX4vA=)
                          3: K5ostPCTlzhRxaxo847usrKR-CI.roa (hash: NmMLX9d9BtFVnwDmZOqCtfLXGibrWNZHHPi91g//AAQ=)
                          4: LKCZjRnqOfP4c6EPSr981Q8ufBE.roa (hash: AHOlzbkAOwQMFN9o3abQlagG3JiaFNtgoH0PdamFOSU=)
                          5: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: xF21CE/IvUnP5Y/X2AmZSJSysE0pueu77U1qWc4JB6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:fd:63:29:13:36:d8:7e:46:4b:00:71:16:52:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
        Validity
            Not Before: Nov 15 06:01:35 2026 GMT
            Not After : Nov 16 06:01:35 2026 GMT
        Subject: CN=3fc963608629db3b74683c810f9b433dbfe8751d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:f4:91:bc:96:15:ec:5a:b2:47:00:e7:78:
                    65:77:61:00:ed:d7:f1:86:68:26:44:ce:33:24:5b:
                    f5:03:fb:18:2d:2d:11:af:c6:fe:e6:26:bb:7a:e2:
                    da:f4:0c:4a:6b:d8:43:95:51:70:ce:b1:f3:3c:4a:
                    17:3e:67:fc:c2:cb:ed:a8:21:a2:15:f3:07:a8:96:
                    03:b6:f3:3e:96:07:11:97:b7:e3:48:6a:a2:ce:2a:
                    5c:01:60:d2:5b:39:5b:99:de:44:ee:62:f1:ab:57:
                    bf:e9:62:d7:f4:c4:45:1d:0a:28:a8:7d:d7:51:f8:
                    dc:6c:33:bf:07:bb:68:3a:a6:17:6d:e4:b4:ae:80:
                    94:8f:13:b7:61:2a:12:b2:da:36:48:cb:fe:3b:4a:
                    10:0f:0e:e6:64:5d:fd:a8:de:ae:16:b6:8d:77:20:
                    1c:bc:b5:1b:3a:7a:ba:5c:57:2c:fc:cc:d4:c1:8f:
                    65:f8:58:38:16:16:db:97:73:4e:5e:e0:fb:7d:1c:
                    6c:b8:c8:ae:2c:1b:53:fe:7d:7c:46:77:15:ef:87:
                    d0:37:3e:a6:14:74:e9:8e:ab:ce:79:a5:ea:2a:2d:
                    20:e2:c0:91:b6:43:86:2f:48:b3:37:a7:eb:57:a8:
                    18:06:b2:36:d8:40:89:2d:d7:10:0f:af:20:0e:42:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C9:63:60:86:29:DB:3B:74:68:3C:81:0F:9B:43:3D:BF:E8:75:1D
            X509v3 Authority Key Identifier:
                keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:66:bb:3a:33:c8:43:2e:66:c7:49:a4:89:fb:70:88:62:
         c8:65:89:85:5f:a5:f7:1a:d7:53:70:3e:02:27:64:76:02:15:
         7a:58:42:f1:f0:7a:94:d0:04:08:cd:07:10:a0:73:8c:9a:47:
         84:d6:36:e8:b4:6e:c0:8f:c1:15:b3:26:65:91:0a:f1:dd:78:
         26:38:69:b6:cf:05:cc:00:c9:6d:9f:0d:33:99:97:c2:4e:f1:
         0f:74:f9:69:91:cc:18:d9:db:3b:de:af:b4:35:4a:ac:43:1b:
         98:c4:c1:15:b0:d5:22:bb:55:eb:34:6b:f4:24:11:b3:3f:74:
         22:da:da:32:9b:58:66:ab:3e:7d:e9:55:d6:55:9e:39:00:03:
         18:bc:ee:8b:67:7a:4d:7e:b5:ea:73:b9:01:cd:96:5e:2c:b0:
         2b:20:0a:3c:39:0e:a5:fc:67:f3:b2:0d:50:9a:af:4e:4f:80:
         3e:90:67:9a:49:93:95:6f:72:4d:23:f5:1d:37:6b:7b:56:11:
         8b:ff:72:88:47:b6:65:d6:15:3f:9e:80:c5:99:54:39:85:8d:
         e5:0c:ae:2d:06:b9:d0:53:81:27:4f:11:41:6f:cf:85:74:fb:
         4e:b6:f9:69:f4:79:ce:17:7d:77:cd:ab:f0:ea:65:8d:af:0b:
         0c:b6:8e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdy/1jKRM22H5GSwBxFlKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmU1MzMwMzNiM2NlOTVlNDk3MmJmMjM4MmRkYWMyOTNj
MmRjMDEwHhcNMjYxMTE1MDYwMTM1WhcNMjYxMTE2MDYwMTM1WjAzMTEwLwYDVQQD
EygzZmM5NjM2MDg2MjlkYjNiNzQ2ODNjODEwZjliNDMzZGJmZTg3NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLn0kbyWFexaskcA53hld2EA7dfx
hmgmRM4zJFv1A/sYLS0Rr8b+5ia7euLa9AxKa9hDlVFwzrHzPEoXPmf8wsvtqCGi
FfMHqJYDtvM+lgcRl7fjSGqizipcAWDSWzlbmd5E7mLxq1e/6WLX9MRFHQooqH3X
UfjcbDO/B7toOqYXbeS0roCUjxO3YSoSsto2SMv+O0oQDw7mZF39qN6uFraNdyAc
vLUbOnq6XFcs/MzUwY9l+Fg4Fhbbl3NOXuD7fRxsuMiuLBtT/n18RncV74fQNz6m
FHTpjqvOeaXqKi0g4sCRtkOGL0izN6frV6gYBrI22ECJLdcQD68gDkJJKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/JY2CGKds7dGg8gQ+bQz2/6HUdMB8GA1UdIwQY
MBaAFDguUzAzs86V5Jcr8jgt2sKTwtwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMGZhZTEtNDBlZS00MTkxLWIyZDQt
ZWFhMDkwNTE0YjUyLzEvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hMGZhZTEtNDBlZS00MTkxLWIyZDQtZWFhMDkwNTE0YjUy
LzEvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrRmuzoz
yEMuZsdJpIn7cIhiyGWJhV+l9xrXU3A+AidkdgIVelhC8fB6lNAECM0HEKBzjJpH
hNY26LRuwI/BFbMmZZEK8d14Jjhpts8FzADJbZ8NM5mXwk7xD3T5aZHMGNnbO96v
tDVKrEMbmMTBFbDVIrtV6zRr9CQRsz90ItraMptYZqs+felV1lWeOQADGLzui2d6
TX616nO5Ac2WXiywKyAKPDkOpfxn87INUJqvTk+APpBnmkmTlW9yTSP1HTdre1YR
i/9yiEe2ZdYVP56AxZlUOYWN5QyuLQa50FOBJ08RQW/PhXT7Trb5afR5zhd9d82r
8Oplja8LDLaOGw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:13 2026 by rpki-client