Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          xtwYeMK/b2ejvzeH2Uh6iBYCtLytF9d4eNqQ+Pln9g4=
Subject key identifier:   6A:8E:ED:D6:A3:0A:E3:15:57:42:18:B9:37:20:69:16:0F:DE:BC:36
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       01A1DA5CDA225D9ECFF0F62A86784A0EC36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          10A0
Signing time:             Sat 14 Nov 2026 14:01:20 +0000
Manifest this update:     Sat 14 Nov 2026 14:01:20 +0000
Manifest next update:     Sun 15 Nov 2026 14:01:20 +0000
Files and hashes:         1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
                          2: 3GHhVMraDxdiiAskPewL35crdjo.roa (hash: XPSOg6gcqzCXxPqB2AsSmHrynZ5hN5FT4lGxnzezIrw=)
                          3: 8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa (hash: 0JK4Fw26Ffv1CbJTN1h1lmvQzBmi4JhkRYBwfgGlUiI=)
                          4: B19k1PitIujJpaB0ZKwK-7amv2k.roa (hash: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=)
                          5: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
                          6: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
                          7: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
                          8: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
                          9: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
                          10: NZeiCNkAFPPe6mRmV3vIotIey6I.roa (hash: 1okB9NoMuO2fNW/qbueY6s54GpzzWp1KSEo2FrjzOoM=)
                          11: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
                          12: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
                          13: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
                          14: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
                          15: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
                          16: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
                          17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: GDrkp/HMiK3Bi8HFAsG00amAQlmIkSjMmIbIdTiNFuM=)
                          18: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
                          19: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
                          20: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
                          21: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
                          22: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
                          23: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:5c:da:22:5d:9e:cf:f0:f6:2a:86:78:4a:0e:c3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Nov 14 14:01:20 2026 GMT
            Not After : Nov 15 14:01:20 2026 GMT
        Subject: CN=6a8eedd6a30ae315574218b9372069160fdebc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:93:09:62:aa:66:bc:24:09:65:47:7a:dc:
                    f8:aa:1c:2b:2e:f1:10:16:4c:5c:0e:e2:87:f0:a0:
                    0b:87:6e:40:74:bc:92:c6:b2:1e:28:d9:62:ba:f5:
                    99:07:9e:e9:a7:21:83:40:67:61:57:bf:d1:c6:6a:
                    05:df:dc:fe:1f:60:ea:54:43:fc:e0:ad:44:58:ab:
                    32:4e:c8:6a:74:60:76:59:45:82:3c:65:ea:fe:34:
                    f8:ea:5e:08:bd:97:58:7f:37:78:f4:51:11:fd:44:
                    33:a5:57:20:a2:0d:74:e9:aa:b3:ae:64:13:c4:f5:
                    56:ca:5f:bc:3d:37:38:01:fd:61:27:dd:8a:4e:31:
                    c7:7d:f4:6f:30:0a:d6:0f:62:16:0f:28:67:3d:eb:
                    9d:08:ec:17:5d:03:eb:8b:f7:74:af:c9:b3:ec:b8:
                    81:ee:b8:d8:7e:49:69:d2:d7:2c:04:bd:aa:58:07:
                    92:3a:16:52:61:0b:60:1f:28:ba:f3:96:04:75:5c:
                    fe:47:d7:ea:93:5f:b5:36:bd:8f:00:79:b9:ac:4a:
                    2a:9f:8a:c8:38:c2:20:0a:59:fc:c6:c5:50:76:a5:
                    d7:17:42:22:d5:e4:ec:8f:d8:c8:a0:b6:42:b9:5e:
                    e6:4f:56:c2:9e:bf:8c:fb:d2:40:6b:87:41:79:9f:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:ED:D6:A3:0A:E3:15:57:42:18:B9:37:20:69:16:0F:DE:BC:36
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c5:89:98:47:5c:66:f6:31:fd:ac:a8:71:d7:d2:02:eb:64:
         2c:05:9f:72:0d:df:9c:50:94:eb:c1:6d:71:93:e1:d1:98:1f:
         81:07:bb:6f:f9:1a:26:7c:78:ae:47:ae:fe:98:08:db:a0:83:
         26:6d:15:5f:a8:25:5d:5a:40:74:12:7a:9c:0f:f6:c9:b8:f0:
         b8:2c:b1:6a:42:34:98:d3:e4:3e:6b:c2:52:d5:7b:13:9e:e1:
         de:b9:3b:6c:4a:1e:c7:d5:63:97:58:cb:ea:16:6f:98:86:06:
         31:e6:58:2d:ac:da:93:d2:c9:fe:cd:ce:13:97:c3:12:17:0a:
         56:da:99:53:d2:54:12:4e:d5:c4:fa:07:78:c0:41:33:ea:39:
         cb:57:48:50:56:56:15:fb:ba:39:51:bb:db:90:0a:56:91:70:
         ce:61:10:36:87:d6:b3:e0:98:43:68:3f:91:f8:51:b9:11:4e:
         b9:d6:59:bb:1b:ad:89:20:89:67:42:9f:1f:5a:f2:76:52:23:
         0d:78:e2:8c:9d:4e:5c:ac:30:27:f4:26:c9:70:22:93:26:2e:
         4e:73:9b:cb:8b:01:2e:86:ce:cb:dd:15:6b:ef:f7:21:ab:37:
         43:f2:6c:1c:4f:14:31:c8:32:44:58:27:a1:4e:14:f2:2c:6c:
         ce:07:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:19:17 2026 by rpki-client