Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
File:                     ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json)
Hash identifier:          P4bdcx7xsi8yutw4ZJ/9UMT66yotoxc91wjwORJwilQ=
Subject key identifier:   AF:1A:C4:E2:11:33:B2:FC:53:10:E9:09:50:B4:44:2B:F9:EF:45:A5
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       01A1DBA648E431616BFEADD13B227F2CDEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
Manifest number:          1881
Signing time:             Sat 14 Nov 2026 20:01:10 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:10 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:10 +0000
Files and hashes:         1: 1bncdI1HvWegkfkOeeoa5nOljr8.roa (hash: NfbtKL/fM/sWFvyUIB3zJxF3TY7oHsHrb3iWZHcFnF8=)
                          2: 2CbQxQdIR56oI33mXsNPJysh2OI.roa (hash: joXS8xA5s2yEiWLT1AkcUqDIoaCDRVGH7P/aChB2ymU=)
                          3: 3EanmD6DodOa3OjQ9Kx0qn9ri6Q.roa (hash: 4kaL0cFBeCDq0v8h0ILY1h3bjLeCtgIe5E5jCClpBsI=)
                          4: 3OVMsE-5ZEupDMfX9MTlCyp2wkM.roa (hash: z6ut5tdJDvXB8Jzf9s56+SPQvAn7Qp00GIZZPe2eAlQ=)
                          5: 7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa (hash: S6k/+gtFBCC3b9KfwT6tZ5Xz1q+2dXqGcNdYKCd9ehg=)
                          6: 7cfTnZvgSfEil-YZBKZdLdCbAbo.roa (hash: AKLB22yDeG7EM9+/4pHVnLAsK2pplpeZJDCWxL6pSIw=)
                          7: 96nhW7fwQ_laWKSgwpcxi24MuvM.roa (hash: N6W5Ek/wK4Pm3whmGHtixWn1/HYkCfQdvQqhfZHUqC4=)
                          8: DAsiheAfQV-3n4ItlbPGVG1Md4w.roa (hash: 6+SFOXT2tV1fCHy49Xv2Jfj0h6/qqmiVRYPvHr297JI=)
                          9: Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa (hash: qQ/zUElPipJtSapfn3wrRR1KfyHaSlWeiqF/oVIx/d0=)
                          10: FBci10I6aG73ENuNfx7xpq1wj1I.roa (hash: 7Qx3boAf1NH/EWgy4dJq6Se8FRdBuYw6f3pqwBtRiL0=)
                          11: J8uF2NoryDUxm1SlbC6CQSKPUdc.roa (hash: x3HcBoYWhmqAXNzF37ZMBXp3/y4iai3A8/l7Q1ckTWM=)
                          12: JgQFyvhK48UsiHLo2GClJOr_UYg.roa (hash: ENI0caY+qR5uep969CyovRK5p657zdmyswAf0HcKQ3I=)
                          13: M25DxF769Ii8sD3VQLHjxn_a5xs.roa (hash: km4/YnoSASnoYK+VrVOCmmtlMYLN2uh5BGpv+BmeWq0=)
                          14: UBImtmTpT9AJK4XiVIvbMq--q_s.roa (hash: NijKBNgwerk44M+DxExLCS24gu6T722sFHFMOCujRn0=)
                          15: UK_V3N1epsugIkAcmcr5ieNfjeU.roa (hash: 4iAgS9C2I2C1YIUY6TIsSDC8YFSx7TeJEyw2cxl8uo0=)
                          16: YBpN3TQ1JzwNzB0-jsj_CckejPU.roa (hash: 8A8QBdzrHSSwGIlNYxFd7VC285mnazoMY8ZTK0EOh18=)
                          17: ZsQ9lmRCQ--4PszinpRM3-Zgb2Q.roa (hash: gLbW2t41nzvj/YP55Vnr5cnIfKklQY/CBVxBOEbb3ls=)
                          18: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: vXsL4GeGRGAhbUJifds86I2zFTWZkOeUzQXNKOiU5BM=)
                          19: hPPUJEU66HUzBCdsMKPjv4y6kCw.roa (hash: ZcjMLqy1z7bp5wMo9CeMXm4svFAsNX9iyFgfU+2xru4=)
                          20: icFNxm6-PTi48L2vXKiDHN-axp8.roa (hash: BdFj1k1TZoLMU1HBgixKhNdJTHKY90rp1IYePTyNxUE=)
                          21: kx1p1slIxkJTxYn4OAj06CJUsf8.roa (hash: HkJZcVcAXKQ3R00x2VbaFry/zdm9SDMa5rLM9eNsbGo=)
                          22: q4DCvIiS6THJXZg00ACbcwTs9to.roa (hash: BzDZyZi3DK/fRXztW3cj1XBtDtFZup20v6Mda//O7qY=)
                          23: uSxyC5p1LzFocZL_XSBl8zeh0yg.roa (hash: zYJeQSQ3Bb4u+MNLkMaVaYTlv5YIpnhYpjXWLaWwK80=)
                          24: yhO6jjNSs_bJoAXmqMYLMOei02c.roa (hash: onlwkoJ5OKhTr40KVglk32d3M7hjIqq4nk6HmNYVvsU=)
                          25: zL6Va8mz4-mL5dF-T8Ckn3SRIUc.roa (hash: Kfzl6+KPLIjmljlRdomaeCn9w4EH9DthiJPy82CrCpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:48:e4:31:61:6b:fe:ad:d1:3b:22:7f:2c:de:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Nov 14 20:01:10 2026 GMT
            Not After : Nov 15 20:01:10 2026 GMT
        Subject: CN=af1ac4e21133b2fc5310e90950b4442bf9ef45a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:7e:28:64:4e:41:be:1e:e4:e8:13:cb:38:
                    93:b8:56:ec:85:8b:26:73:84:e6:0c:1a:ff:c7:8c:
                    80:94:43:2f:51:55:50:80:02:c5:3a:33:10:50:01:
                    c4:87:68:4f:a4:0b:ff:d6:5c:da:1a:bb:41:9e:0b:
                    db:76:ac:17:fa:36:d4:03:26:a6:0c:3c:ea:d8:aa:
                    be:1a:99:00:89:a4:1b:dd:ef:21:0b:4a:45:09:3e:
                    b8:90:1f:8f:aa:11:35:a8:f7:30:a5:b3:3f:d0:75:
                    90:40:cd:bc:5d:ec:1d:43:a6:3c:b1:4b:86:29:e0:
                    3d:cf:9b:59:b8:20:f0:62:3a:fc:ed:b7:06:05:6c:
                    4f:73:d1:38:16:55:5e:39:8e:1c:0a:70:58:43:fa:
                    b8:20:1a:d7:bf:97:17:30:87:b0:52:e8:c3:c2:4b:
                    6c:cc:92:39:75:cb:f8:34:b8:02:cb:e1:db:e2:12:
                    b9:2a:01:2c:1d:fc:10:5b:6a:78:1a:65:15:50:06:
                    f8:03:2b:b7:20:3f:5c:a7:6a:c9:01:3c:34:3d:28:
                    3c:55:d7:22:fe:c1:29:5d:50:cd:24:65:23:89:c7:
                    c5:f4:54:a5:5f:bc:dd:6e:3b:ed:b1:b6:a4:d8:94:
                    d1:b6:3d:65:bf:e5:ef:e3:ac:b7:9b:20:77:32:b8:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1A:C4:E2:11:33:B2:FC:53:10:E9:09:50:B4:44:2B:F9:EF:45:A5
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:43:84:d0:4d:88:c5:9d:59:df:f2:66:a6:78:ee:bc:6b:51:
         ea:39:48:84:17:fd:88:47:37:09:fb:ca:08:a6:4a:95:10:74:
         d3:11:08:7d:a7:7e:1c:9e:02:3b:95:bd:7f:6e:a1:ad:7e:38:
         90:03:a1:73:f4:00:dd:7b:30:3d:b5:5b:01:b0:0f:c0:39:21:
         e7:7a:28:00:bd:a0:65:f6:23:92:1d:ce:d4:fd:8d:0c:3c:b5:
         0f:10:fd:61:e1:85:fd:0d:65:26:59:b6:21:fa:02:24:92:98:
         f8:e6:89:42:f5:f2:67:86:08:93:a7:a2:87:1f:3c:30:39:dd:
         a6:74:0a:ad:f7:38:55:85:0f:f3:95:a2:30:dd:91:2e:fe:82:
         15:1a:80:8b:5b:b3:b5:9e:c1:2b:06:fa:ea:35:a7:5b:bd:62:
         67:75:a5:5a:1b:b9:d5:45:06:8a:d9:2e:73:b1:01:76:ab:2b:
         c7:9b:6b:e6:fa:03:40:18:1e:76:a3:a0:1d:b8:bb:10:35:13:
         4c:7c:b8:36:01:f4:19:e6:3e:18:c2:7b:39:8e:bd:bd:68:98:
         5a:b3:85:7a:6d:d1:e8:51:7f:0e:d7:8e:2d:22:cd:93:a9:8b:
         95:11:44:01:38:c8:3a:e0:ac:5a:9d:3f:38:0d:31:cc:48:ce:
         16:06:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:44:41 2026 by rpki-client