Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File:                     tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier:          shPSIu5dkIm6JukC6yZUUISa0CcfUOuojtlSz/1mK/Y=
Subject key identifier:   91:99:84:EF:DF:E6:13:49:5E:8C:3A:C8:67:BA:80:E7:78:C0:F8:98
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer:       /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial:       01A1DB014223CA2C6FFF12FFBB43182C3DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number:          1270
Signing time:             Sat 14 Nov 2026 17:00:55 +0000
Manifest this update:     Sat 14 Nov 2026 17:00:55 +0000
Manifest next update:     Sun 15 Nov 2026 17:00:55 +0000
Files and hashes:         1: 2u17C709S7Y5w-m6-YYv-vhXmUI.roa (hash: 9wcYIAnvHzNv3l4Jwl0uMnowYji6Dg57ushf/zN2oFc=)
                          2: 3sNHI6PonG3yTWC7luEipoNUwyM.roa (hash: 25qkkZcN3FmiRMNBN3fedg1xY9PzbM2FV5V46F5kvco=)
                          3: RcbLaeTbCAZLw25p83aKvuQ5Erw.roa (hash: Xxfd9XbUnWx6HStvfPUJjN1K3bZrwPDQhwn+KQBjwWw=)
                          4: pDHjvPrnGRVcn7WxkMRN6inPbWs.roa (hash: sSrvKGFWB3O/o5I18LIagm8qaz3iZs/A9aJn8MsM2oQ=)
                          5: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: 1jR5unDW6NXPP1CjuNsDfnC9Tk5LcXiyhEND/OGqLJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:01:42:23:ca:2c:6f:ff:12:ff:bb:43:18:2c:3d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
        Validity
            Not Before: Nov 14 17:00:55 2026 GMT
            Not After : Nov 15 17:00:55 2026 GMT
        Subject: CN=919984efdfe613495e8c3ac867ba80e778c0f898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:7b:ca:da:7c:e6:b6:a7:00:91:65:29:72:
                    cf:63:86:ac:70:73:20:1a:2a:20:5e:aa:35:41:14:
                    51:ee:85:b9:d2:70:fb:f0:26:a4:f9:fe:2a:bc:44:
                    2a:0e:4f:4a:f4:e8:18:a0:aa:39:68:ff:6d:2a:30:
                    59:3a:88:5f:fb:8c:b5:3e:73:15:91:c7:53:33:e9:
                    24:be:a7:38:77:71:3d:fc:1d:02:de:cd:15:33:48:
                    e6:8f:da:00:73:e2:86:16:31:e2:31:9a:52:26:2a:
                    1e:d5:ed:fb:7d:e0:28:24:6d:81:0d:e4:f0:e4:04:
                    e5:9a:26:d0:02:2a:28:10:10:bd:81:33:89:cf:86:
                    2c:92:b1:cd:68:c1:23:93:af:39:ac:40:cd:e4:e6:
                    d2:c3:a2:4c:04:56:0e:ee:68:dd:bf:24:2e:29:86:
                    2c:f7:6d:e3:b5:fc:46:a0:17:a9:87:80:f7:10:4b:
                    5b:02:a8:0f:db:42:e3:a1:57:a0:f2:e0:25:27:5a:
                    17:11:95:d8:b3:84:49:4c:4c:e7:d8:2a:b8:f8:71:
                    79:d0:e7:93:4b:8f:6b:c3:b8:54:cc:ce:f4:4c:95:
                    8b:e5:84:7e:09:5d:2c:0c:06:98:a9:de:dc:92:27:
                    f3:e9:a4:87:d6:10:de:64:c2:28:a3:42:b7:3b:7e:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:84:EF:DF:E6:13:49:5E:8C:3A:C8:67:BA:80:E7:78:C0:F8:98
            X509v3 Authority Key Identifier:
                keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:60:92:4d:e8:1c:11:48:e6:c0:d7:7c:3b:e5:2d:38:d8:8f:
         e7:60:fa:18:8e:80:6e:f5:cc:2e:54:f0:93:de:a8:42:8f:43:
         c8:63:8b:11:0e:1b:1b:43:95:f9:e8:2a:ca:8c:af:4a:c5:7f:
         1d:eb:7f:29:ca:12:37:a8:9e:88:cf:b9:89:8a:ea:03:9f:d2:
         bd:98:25:19:59:35:8b:d8:b0:cb:3f:02:2d:6e:05:16:c8:3c:
         39:eb:1c:2f:c6:71:3e:a0:67:5c:27:66:9e:ae:7d:d1:66:46:
         9d:74:9a:bd:82:e9:3e:a2:9b:02:88:7c:52:1a:06:d9:a8:62:
         86:f4:0c:23:b0:d1:59:7d:bf:74:02:60:73:00:67:c6:ab:83:
         c0:eb:b0:db:ee:1f:13:62:b0:d0:cd:4f:db:66:b9:a7:cd:d4:
         b5:22:36:8d:3a:6b:f1:06:55:e5:08:18:4f:81:e8:d2:2c:84:
         fd:a7:94:07:a6:3d:e5:27:33:72:22:e6:e8:c2:85:71:54:ad:
         33:ad:57:cb:62:45:8d:07:d8:3f:8b:f1:f5:a1:6a:9a:83:3d:
         c3:23:4c:96:c2:80:5a:38:bd:42:16:69:5c:83:94:9e:d8:75:
         ab:a0:b9:1f:13:5a:61:24:ff:44:c9:f8:2e:7e:e4:12:9a:d8:
         5c:08:6b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbAUIjyixv/xL/u0MYLD3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDRjYzBlMDM4ZWIwZTY5N2VjNmU3YWU0OWQwMjg2MTQ2
ZTBjMWEwHhcNMjYxMTE0MTcwMDU1WhcNMjYxMTE1MTcwMDU1WjAzMTEwLwYDVQQD
Eyg5MTk5ODRlZmRmZTYxMzQ5NWU4YzNhYzg2N2JhODBlNzc4YzBmODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUR7ytp85ranAJFlKXLPY4ascHMg
GiogXqo1QRRR7oW50nD78Cak+f4qvEQqDk9K9OgYoKo5aP9tKjBZOohf+4y1PnMV
kcdTM+kkvqc4d3E9/B0C3s0VM0jmj9oAc+KGFjHiMZpSJioe1e37feAoJG2BDeTw
5ATlmibQAiooEBC9gTOJz4YskrHNaMEjk685rEDN5ObSw6JMBFYO7mjdvyQuKYYs
923jtfxGoBeph4D3EEtbAqgP20LjoVeg8uAlJ1oXEZXYs4RJTEzn2Cq4+HF50OeT
S49rw7hUzM70TJWL5YR+CV0sDAaYqd7ckifz6aSH1hDeZMIoo0K3O37EFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGZhO/f5hNJXow6yGe6gOd4wPiYMB8GA1UdIwQY
MBaAFLQEzA4DjrDml+xueuSdAoYUbgwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1Yjkt
ODZhMmYwNjdiNGU4LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1YjktODZhMmYwNjdiNGU4
LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWCSTegc
EUjmwNd8O+UtONiP52D6GI6AbvXMLlTwk96oQo9DyGOLEQ4bG0OV+egqyoyvSsV/
Het/KcoSN6ieiM+5iYrqA5/SvZglGVk1i9iwyz8CLW4FFsg8OescL8ZxPqBnXCdm
nq590WZGnXSavYLpPqKbAoh8UhoG2ahihvQMI7DRWX2/dAJgcwBnxquDwOuw2+4f
E2Kw0M1P22a5p83UtSI2jTpr8QZV5QgYT4Ho0iyE/aeUB6Y95SczciLm6MKFcVSt
M61Xy2JFjQfYP4vx9aFqmoM9wyNMlsKAWji9QhZpXIOUnth1q6C5HxNaYST/RMn4
Ln7kEprYXAhrDQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:18:54 2026 by rpki-client