Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          Y53ZA0B0Y0GYE7BPFzUPgr6AEJSgsfjGL9v93wZnqcM=
Subject key identifier:   1C:43:9A:32:F5:B9:FC:A3:DF:7C:5A:25:9B:1A:D1:DA:2F:66:9F:16
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       01A1DEA79B2C53F6A37A2C6BA4C2800FD04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          1B09
Signing time:             Sun 15 Nov 2026 10:01:28 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:28 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:28 +0000
Files and hashes:         1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
                          2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
                          3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
                          4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
                          5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
                          6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: sUqv/BkyJgFggizfg+MMKZohSPQv5el7cSZCj2GUJiY=)
                          7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
                          8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
                          9: eHECU130cI2IxVdoNjOs2S8NVMI.asa (hash: eIEPTN6wqulUnuaXPEXf8DU4qnDGOsycqRILfhS2exU=)
                          10: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
                          11: uCcKCZ_-ttSdLBoJpXw12HW8zv8.asa (hash: Z775CY+lZCNdBuuxgq50lgOG4WRj8jb7ovNC4/2rwng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:9b:2c:53:f6:a3:7a:2c:6b:a4:c2:80:0f:d0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Nov 15 10:01:28 2026 GMT
            Not After : Nov 16 10:01:28 2026 GMT
        Subject: CN=1c439a32f5b9fca3df7c5a259b1ad1da2f669f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:98:53:55:d7:25:2a:ee:41:f1:29:33:e4:
                    f3:2b:24:65:61:d0:a2:30:9c:61:ed:d1:9c:45:e2:
                    86:5d:90:aa:1e:68:14:b3:71:25:4a:55:6a:3c:04:
                    d4:ff:19:16:ff:3c:e7:78:f2:05:df:9c:ab:4b:ed:
                    80:f2:5a:73:fe:f0:ba:9b:bd:88:d2:a1:39:d4:c1:
                    a4:9d:d4:a2:41:c7:0f:3d:c9:1f:66:23:d5:f2:c5:
                    16:6c:3c:25:63:e4:05:7f:6c:a0:ef:1c:fa:51:ef:
                    06:23:28:ba:36:2c:4e:48:9f:20:0f:03:ef:f3:d5:
                    12:5d:c7:81:14:10:cd:35:cd:b6:89:9f:b8:f2:e6:
                    96:b2:ab:e2:a7:0d:83:44:fc:f7:a9:82:66:f4:a1:
                    ae:be:65:b1:ee:15:21:3b:ea:31:18:3f:f6:5e:b1:
                    dd:79:d4:83:1b:fc:4e:22:14:d2:45:f1:70:39:2e:
                    6d:df:0e:c9:f6:a9:4c:1a:03:ce:cc:84:c0:24:f0:
                    48:ba:09:46:81:1c:42:2d:c3:92:da:79:8d:89:db:
                    2b:eb:8b:26:47:03:01:fa:38:58:42:a7:51:45:99:
                    3e:91:78:52:11:d6:a4:a4:8b:b5:c7:22:94:93:b0:
                    04:94:56:4c:8f:45:77:72:0a:7a:3d:48:d5:80:21:
                    44:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:43:9A:32:F5:B9:FC:A3:DF:7C:5A:25:9B:1A:D1:DA:2F:66:9F:16
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:38:0c:8a:43:b5:64:33:a1:b6:18:8b:b2:b8:2b:2c:86:08:
         6a:49:b3:b0:5a:f7:59:8d:ba:b5:b7:02:70:24:b2:69:fb:24:
         d8:13:b9:94:81:a2:f3:b2:10:72:7f:66:18:a4:67:9c:2c:66:
         9a:86:82:7d:a0:4e:ee:52:12:91:01:56:62:d0:ec:2f:df:2e:
         55:2d:16:be:d1:14:61:76:94:30:04:82:50:af:b2:a4:3a:ae:
         e7:cd:a5:41:c1:af:2f:95:5e:ee:b5:e4:1b:fa:ae:6e:18:1c:
         d7:d6:a5:24:24:92:79:cb:47:58:bc:29:94:72:22:56:82:e6:
         5e:e9:f9:21:2e:b6:1b:6c:ce:36:71:89:7c:12:9d:aa:33:e2:
         12:d5:6a:07:11:f7:da:24:ca:e7:11:f3:aa:c7:66:25:d8:c6:
         dc:fc:80:fa:c5:11:61:5c:98:e8:fb:65:4c:d9:1a:8c:3e:e5:
         4b:a3:04:e0:8e:b0:30:b7:fe:0a:5a:0b:7d:2f:fd:1f:9b:93:
         b8:43:4e:51:67:47:58:22:36:b8:2c:d9:75:fe:00:b1:37:c2:
         67:53:fa:d4:5e:20:15:8a:40:3e:46:c0:75:54:0d:0b:e0:3f:
         9e:3f:4c:6a:ae:3b:1d:f6:e1:0f:5d:81:e9:54:33:e8:db:1d:
         a7:60:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:29:49 2026 by rpki-client