Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
File:                     Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json)
Hash identifier:          YEHiS2sw1Az7+k6aljvjknAFtMGwBoB/xczXSypTAIo=
Subject key identifier:   96:B8:00:9D:4B:61:8C:DB:20:00:59:10:08:DB:8F:FA:73:D5:85:09
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Certificate issuer:       /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial:       01A1DD272B35F8E978589A56627D3C7227FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
Manifest number:          03A7
Signing time:             Sun 15 Nov 2026 03:01:33 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:33 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:33 +0000
Files and hashes:         1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: k53Y85uK0NPdBH3RVehloa15XUAtxyGzhOK6yfO0Dz8=)
                          2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=)
                          3: LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa (hash: 1y+oofyBJConbafGQg6XYJc8yYIlOho+25fEGRBOnMI=)
                          4: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=)
                          5: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=)
                          6: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=)
                          7: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=)
                          8: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=)
                          9: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=)
                          10: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=)
                          11: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (hash: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=)
                          12: v-Tz4LNrg-fI0YtXfsTPB9CVhMc.roa (hash: udOow31/Ac3B4eRS03ZbNOgd/QrnseTxomOZNggmN6I=)
                          13: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:27:2b:35:f8:e9:78:58:9a:56:62:7d:3c:72:27:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
        Validity
            Not Before: Nov 15 03:01:33 2026 GMT
            Not After : Nov 16 03:01:33 2026 GMT
        Subject: CN=96b8009d4b618cdb2000591008db8ffa73d58509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:4a:50:e5:1e:bd:77:45:6b:f3:5c:fc:c5:
                    4a:3f:91:a0:a4:c0:9e:f8:48:55:cc:6a:36:36:12:
                    b0:5e:9b:5f:5d:2a:cd:f6:cf:83:bf:5a:2a:36:02:
                    0f:3d:a4:d1:92:1b:8b:18:86:27:6b:58:e8:98:88:
                    7c:62:5b:1f:32:ba:a9:a4:9e:64:b9:21:47:04:09:
                    ad:3a:b1:42:d8:4b:1d:e5:99:2d:48:b8:52:25:81:
                    a0:51:5c:7f:14:18:bf:0c:11:22:24:9c:49:c8:be:
                    6e:4d:04:6f:ba:f1:e3:56:94:4a:0f:24:e9:80:78:
                    6d:32:cb:16:11:f9:4d:c7:84:ab:8a:c7:58:4e:87:
                    9c:0a:6f:9c:06:b0:cd:97:ce:8e:7c:f3:42:43:7c:
                    55:6f:b9:7f:7c:d2:ad:f0:58:5c:2b:89:dc:d7:02:
                    f0:57:d9:21:31:e2:fc:e6:07:9d:65:50:58:21:09:
                    17:a4:98:31:cc:82:5f:1b:ba:4e:82:49:25:57:87:
                    e6:1a:f7:74:9d:1a:37:00:b3:ce:a5:4c:42:84:2d:
                    5e:5d:df:ab:0e:ab:3d:3c:91:6d:76:2d:fe:10:17:
                    16:32:c4:ce:85:fc:e0:e4:19:56:c7:7c:c7:08:be:
                    21:e5:f8:a9:1b:e3:a6:44:30:95:ef:7e:4b:e9:88:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B8:00:9D:4B:61:8C:DB:20:00:59:10:08:DB:8F:FA:73:D5:85:09
            X509v3 Authority Key Identifier:
                keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:c9:09:df:aa:dd:5e:ad:0b:a3:b6:27:df:6b:ac:c8:73:
         63:bb:ff:0a:88:75:ee:b4:ac:41:ea:e7:b6:78:51:75:44:37:
         d7:de:f7:21:b7:31:2e:53:67:7d:c1:80:de:88:00:83:cf:81:
         f1:e4:55:b2:07:c4:56:fc:f3:76:0d:be:ae:5e:90:a3:54:99:
         fa:4f:20:6e:bf:91:b2:48:e4:88:cc:d5:33:71:cb:d7:31:78:
         19:64:09:8f:86:3e:c9:bc:27:6a:6b:c5:9b:f3:55:d9:12:11:
         8d:fe:bb:7e:fc:08:57:ac:9a:55:66:06:48:7e:b3:c8:5c:de:
         5a:4f:ec:c4:3b:05:ac:7d:8a:6e:ed:a1:d7:43:8f:26:25:01:
         7d:cd:9b:59:40:b9:2a:b0:42:d0:f7:5f:4b:dc:ab:47:fc:84:
         02:71:f2:b4:8c:0b:54:3e:0e:54:3d:2f:d2:aa:dd:82:b9:75:
         96:3c:a2:4c:95:85:0c:f0:15:4c:c9:ed:b9:1b:b7:df:64:2d:
         f3:af:cc:00:90:c7:d8:cf:a9:5b:eb:56:4a:6d:aa:77:3a:61:
         49:03:ca:e6:2a:19:bf:eb:e5:ff:28:fd:e9:e1:93:d2:b6:74:
         c9:79:19:47:be:1a:7f:46:aa:32:9b:45:e8:23:70:7a:56:ba:
         e1:cd:3b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdJys1+Ol4WJpWYn08cif/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy
ODE1YjkwHhcNMjYxMTE1MDMwMTMzWhcNMjYxMTE2MDMwMTMzWjAzMTEwLwYDVQQD
Eyg5NmI4MDA5ZDRiNjE4Y2RiMjAwMDU5MTAwOGRiOGZmYTczZDU4NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX5KUOUevXdFa/Nc/MVKP5GgpMCe
+EhVzGo2NhKwXptfXSrN9s+Dv1oqNgIPPaTRkhuLGIYna1jomIh8YlsfMrqppJ5k
uSFHBAmtOrFC2Esd5ZktSLhSJYGgUVx/FBi/DBEiJJxJyL5uTQRvuvHjVpRKDyTp
gHhtMssWEflNx4SrisdYToecCm+cBrDNl86OfPNCQ3xVb7l/fNKt8FhcK4nc1wLw
V9khMeL85gedZVBYIQkXpJgxzIJfG7pOgkklV4fmGvd0nRo3ALPOpUxChC1eXd+r
Dqs9PJFtdi3+EBcWMsTOhfzg5BlWx3zHCL4h5fipG+OmRDCV735L6YiEQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa4AJ1LYYzbIABZEAjbj/pz1YUJMB8GA1UdIwQY
MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt
YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy
LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAml3JCd+q
3V6tC6O2J99rrMhzY7v/Coh17rSsQerntnhRdUQ31973IbcxLlNnfcGA3ogAg8+B
8eRVsgfEVvzzdg2+rl6Qo1SZ+k8gbr+RskjkiMzVM3HL1zF4GWQJj4Y+ybwnamvF
m/NV2RIRjf67fvwIV6yaVWYGSH6zyFzeWk/sxDsFrH2Kbu2h10OPJiUBfc2bWUC5
KrBC0PdfS9yrR/yEAnHytIwLVD4OVD0v0qrdgrl1ljyiTJWFDPAVTMntuRu332Qt
86/MAJDH2M+pW+tWSm2qdzphSQPK5ioZv+vl/yj96eGT0rZ0yXkZR74af0aqMptF
6CNwela64c07Nw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:03:49 2026 by rpki-client