Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft
File:                     1-liHAt_6RhvpE-iY5-o1CwClP2A.mft (raw, json)
Hash identifier:          sd7R8f528egd/Mt7d6eLp0aiD2QXVyIb1pfzAvvKjI8=
Subject key identifier:   9B:92:35:DD:5C:2A:B0:F6:3E:93:20:96:5D:EA:E9:4F:7A:DD:9C:5E
Authority key identifier: FA:58:87:02:DF:FA:46:1B:E9:13:E8:98:E7:EA:35:0B:00:A5:3F:60
Certificate issuer:       /CN=fa588702dffa461be913e898e7ea350b00a53f60
Certificate serial:       01A1DF4C5E07291704A144DFD5607DF7A3EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft
Manifest number:          41
Signing time:             Sun 15 Nov 2026 13:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:26 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:26 +0000
Files and hashes:         1: 1-liHAt_6RhvpE-iY5-o1CwClP2A.crl (hash: aAGCEsczGDIGhFLB31v62Udcqyx2RL8Beigei/jJCCg=)
                          2: gOBQpvrlYgY9AqdqsoXxVt2Vh4Y.roa (hash: pGxEaEmHpvGHsKUuszqEC/Za5pRpgcBQna2c2eXbqWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:5e:07:29:17:04:a1:44:df:d5:60:7d:f7:a3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa588702dffa461be913e898e7ea350b00a53f60
        Validity
            Not Before: Nov 15 13:01:26 2026 GMT
            Not After : Nov 16 13:01:26 2026 GMT
        Subject: CN=9b9235dd5c2ab0f63e9320965deae94f7add9c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:01:ff:a1:cb:4f:d6:70:cc:24:f0:89:a3:
                    3c:0f:a1:78:f4:f6:ca:35:f3:7b:b6:d2:bb:1e:65:
                    b2:3a:82:20:25:c8:e6:2f:64:bc:41:9f:8c:4e:03:
                    f2:69:4c:bc:97:e7:ad:66:47:bd:f4:98:5d:ec:2d:
                    5e:d8:0b:9f:c7:d2:ae:35:0e:15:56:a1:a0:32:7f:
                    7a:30:6f:4a:65:9d:b8:93:22:bb:fa:51:76:fe:a5:
                    1f:a1:80:96:e0:e3:b4:7e:00:5a:45:0a:8f:9c:7e:
                    14:78:54:9d:38:de:51:96:68:f9:56:01:17:56:eb:
                    e7:af:fa:78:9e:e0:89:cc:74:d8:1c:3e:db:dd:51:
                    c4:6b:0b:54:f3:78:7b:02:29:95:98:9b:9f:44:0d:
                    b3:e2:0f:7a:99:0a:5a:75:d6:5b:b8:1b:18:bb:50:
                    1a:52:9c:ee:af:5d:42:fb:d4:04:f9:8d:54:ad:43:
                    f5:e3:1c:61:16:90:d3:80:12:9d:92:51:50:5a:7b:
                    3a:30:d7:2a:2e:3c:15:5e:51:36:9f:d8:a0:c7:72:
                    22:f5:6f:53:f1:b6:d6:d7:14:54:5c:2e:da:19:a5:
                    70:d3:7d:20:73:04:39:4e:b2:6a:7b:38:69:19:ae:
                    7f:e6:0d:c1:3e:2e:df:8d:3e:82:8a:6b:8d:6b:ea:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:92:35:DD:5C:2A:B0:F6:3E:93:20:96:5D:EA:E9:4F:7A:DD:9C:5E
            X509v3 Authority Key Identifier:
                keyid:FA:58:87:02:DF:FA:46:1B:E9:13:E8:98:E7:EA:35:0B:00:A5:3F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:1d:b0:c3:8b:44:c8:f7:34:b7:d7:13:a3:8c:4e:7f:e1:
         66:67:a2:22:d9:50:33:5a:53:02:03:3b:9d:74:02:aa:8b:2e:
         47:fe:7c:e2:3b:ea:12:1a:98:fd:51:f9:1c:19:7b:49:fd:37:
         6b:2f:b1:9c:f3:b5:0e:11:15:a3:44:24:27:c8:c9:36:6a:f4:
         94:05:e7:7e:23:72:58:a4:f2:e9:9e:ee:97:fa:aa:2d:a1:59:
         76:be:e0:48:70:d0:a1:3d:71:bf:5c:e4:e9:e1:7f:3a:bd:a1:
         21:c5:a6:eb:da:58:a1:12:b4:4b:6d:40:4f:b3:b2:10:32:fd:
         42:8e:13:e3:94:c1:27:a0:87:62:b0:1a:f9:33:9c:25:04:68:
         eb:7f:fb:53:a2:4d:e2:87:eb:3d:b8:07:7d:bf:b2:96:db:b8:
         d7:c9:42:25:d8:ac:7d:ee:94:fb:13:d9:e5:11:f5:23:36:95:
         ca:5e:e3:8a:c1:c5:44:26:02:d8:74:dd:42:ab:b5:a3:57:f0:
         00:e4:2b:c3:59:09:74:50:64:36:20:cd:e4:95:40:43:74:f9:
         37:cb:33:76:15:b7:de:f6:b1:49:58:3a:16:3e:bc:4c:eb:10:
         98:82:88:7c:81:12:ec:97:1a:20:8d:42:c2:81:e1:98:b2:9b:
         7c:fb:89:54
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHfTF4HKRcEoUTf1WB996PqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTg4NzAyZGZmYTQ2MWJlOTEzZTg5OGU3ZWEzNTBiMDBh
NTNmNjAwHhcNMjYxMTE1MTMwMTI2WhcNMjYxMTE2MTMwMTI2WjAzMTEwLwYDVQQD
Eyg5YjkyMzVkZDVjMmFiMGY2M2U5MzIwOTY1ZGVhZTk0ZjdhZGQ5YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDcB/6HLT9ZwzCTwiaM8D6F49PbK
NfN7ttK7HmWyOoIgJcjmL2S8QZ+MTgPyaUy8l+etZke99Jhd7C1e2Aufx9KuNQ4V
VqGgMn96MG9KZZ24kyK7+lF2/qUfoYCW4OO0fgBaRQqPnH4UeFSdON5Rlmj5VgEX
Vuvnr/p4nuCJzHTYHD7b3VHEawtU83h7AimVmJufRA2z4g96mQpaddZbuBsYu1Aa
Upzur11C+9QE+Y1UrUP14xxhFpDTgBKdklFQWns6MNcqLjwVXlE2n9igx3Ii9W9T
8bbW1xRUXC7aGaVw030gcwQ5TrJqezhpGa5/5g3BPi7fjT6CimuNa+pY8QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJuSNd1cKrD2PpMgll3q6U963ZxeMB8GA1UdIwQY
MBaAFPpYhwLf+kYb6RPomOfqNQsApT9gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1saUhBdF82Umh2cEUtaVk1LW8xQ3dDbFAyQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvN2FmMzU1LTk5MjktNGVlYS05ODE0
LWQ0MmVlNmE4YjhhNS8xLzEtbGlIQXRfNlJodnBFLWlZNS1vMUN3Q2xQMkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU1LzdhZjM1NS05OTI5LTRlZWEtOTgxNC1kNDJlZTZhOGI4
YTUvMS8xLWxpSEF0XzZSaHZwRS1pWTUtbzFDd0NsUDJBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtUd
sMOLRMj3NLfXE6OMTn/hZmeiItlQM1pTAgM7nXQCqosuR/584jvqEhqY/VH5HBl7
Sf03ay+xnPO1DhEVo0QkJ8jJNmr0lAXnfiNyWKTy6Z7ul/qqLaFZdr7gSHDQoT1x
v1zk6eF/Or2hIcWm69pYoRK0S21AT7OyEDL9Qo4T45TBJ6CHYrAa+TOcJQRo63/7
U6JN4ofrPbgHfb+yltu418lCJdisfe6U+xPZ5RH1IzaVyl7jisHFRCYC2HTdQqu1
o1fwAOQrw1kJdFBkNiDN5JVAQ3T5N8szdhW33vaxSVg6Fj68TOsQmIKIfIES7Jca
II1CwoHhmLKbfPuJVA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:19:42 2026 by rpki-client