Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File:                     1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier:          q7jJPJ64AYkDTYDBkLX9ZPRqpgx0l2fCoXBY7Tg5Y8w=
Subject key identifier:   46:5E:0A:12:67:F9:F3:4B:3A:DC:6D:E0:93:D1:19:51:C8:B1:36:60
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer:       /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial:       01A1DF4CA09F549404A058314FF92B5FAE8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number:          105C
Signing time:             Sun 15 Nov 2026 13:01:43 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:43 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:43 +0000
Files and hashes:         1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: apOLXlWqH7Uublrs/aBG390lvAeUe1sKhOCK9hQ9Bwo=)
                          2: UFIlSKxx9JVyflAe4XZ9RSQQiYg.roa (hash: PLd/XdORbh+AqlA44ImDYbauW5MSTsm0/u80XEVDYgk=)
                          3: i5wzAWhzD6thOzcjAU711zxCavE.roa (hash: P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:a0:9f:54:94:04:a0:58:31:4f:f9:2b:5f:ae:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
        Validity
            Not Before: Nov 15 13:01:43 2026 GMT
            Not After : Nov 16 13:01:43 2026 GMT
        Subject: CN=465e0a1267f9f34b3adc6de093d11951c8b13660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:ca:6f:bd:25:f1:84:46:4d:e0:72:f1:1f:
                    45:d9:ed:27:0b:97:ec:79:61:1c:8b:9b:19:ff:81:
                    37:f9:02:7b:63:ee:4f:64:a4:30:2b:b8:75:70:de:
                    c0:8b:3b:ca:43:7a:47:e6:2f:f8:f8:64:f2:d5:f6:
                    b1:6a:82:ba:83:4c:0a:78:bd:fb:2f:83:d6:fb:59:
                    85:23:cf:18:56:e3:3b:fc:da:66:0c:89:db:d5:fd:
                    6d:bd:46:1a:5d:e5:d8:8a:78:28:0b:fe:ea:d1:23:
                    14:2c:53:5c:55:c6:e7:fd:15:36:b0:bb:fa:91:67:
                    b4:4a:45:a5:e6:98:cb:f1:08:e8:49:32:e0:63:a9:
                    5d:4b:ab:eb:55:82:28:b9:66:b8:ec:c2:27:0a:b8:
                    ff:be:9d:fd:70:52:62:00:ae:e0:89:95:ba:e0:63:
                    bd:aa:58:f8:2b:f9:6c:4e:f7:f7:9b:09:ad:64:24:
                    78:0c:3f:39:db:74:5d:8d:75:7c:28:70:bd:81:ec:
                    0a:89:ee:87:3a:02:61:8b:31:d2:a4:c7:94:63:2d:
                    54:63:a8:b6:22:65:1c:1c:fa:04:69:39:27:9e:91:
                    9f:aa:37:7f:5a:86:b2:38:88:fb:3d:97:16:7d:a1:
                    29:7e:02:fa:87:c0:f3:15:e9:42:cf:12:fd:41:23:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:0A:12:67:F9:F3:4B:3A:DC:6D:E0:93:D1:19:51:C8:B1:36:60
            X509v3 Authority Key Identifier:
                keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:de:d5:34:67:bd:1b:e6:bc:19:29:f1:bb:7c:b9:ce:8c:40:
         3f:52:41:b2:bb:83:c6:e4:11:3c:da:15:cf:e8:2b:5f:af:20:
         5c:20:7f:67:e8:a8:d3:67:cb:f7:9c:14:7b:63:1d:e0:24:2f:
         08:ce:d7:22:e6:25:d7:b7:58:ef:5c:b5:f3:32:2a:20:7e:61:
         d3:4b:ab:84:27:7b:b4:e7:53:f2:21:bf:6c:a3:e0:c6:87:51:
         6d:35:35:e5:27:2b:6a:f1:6f:6e:8e:02:6a:b0:fe:e7:49:5e:
         f9:c5:b6:96:e8:35:49:3f:f2:50:a1:81:19:86:af:a9:e9:94:
         a2:20:c7:8e:ac:05:32:b6:17:34:78:de:51:6a:f8:82:3d:57:
         d3:41:bc:9e:d7:bb:06:f3:ff:29:92:20:63:dc:00:2b:ba:8a:
         32:40:d2:57:09:c7:12:c5:7c:b4:4f:ff:a5:25:2e:da:45:92:
         98:49:69:9d:5f:82:bb:0c:8d:7f:6f:10:2b:9c:2a:0e:1b:9f:
         46:94:dd:70:dc:2a:8f:dd:c0:5b:5a:d8:46:1b:30:8d:b5:a0:
         7d:90:0d:e5:3e:6e:b3:c5:48:1e:aa:85:e1:30:d1:ed:6e:ce:
         46:2e:12:b4:5f:c3:b0:49:71:07:fd:46:33:74:22:89:d9:2f:
         e5:68:26:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTKCfVJQEoFgxT/krX66NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U0OTI1NWY0MDZhNzI1NTkzYzYyZTFjNDA4Nzc5NTg2
ZDU2ZWYwHhcNMjYxMTE1MTMwMTQzWhcNMjYxMTE2MTMwMTQzWjAzMTEwLwYDVQQD
Eyg0NjVlMGExMjY3ZjlmMzRiM2FkYzZkZTA5M2QxMTk1MWM4YjEzNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kHKb70l8YRGTeBy8R9F2e0nC5fs
eWEci5sZ/4E3+QJ7Y+5PZKQwK7h1cN7AizvKQ3pH5i/4+GTy1faxaoK6g0wKeL37
L4PW+1mFI88YVuM7/NpmDInb1f1tvUYaXeXYingoC/7q0SMULFNcVcbn/RU2sLv6
kWe0SkWl5pjL8QjoSTLgY6ldS6vrVYIouWa47MInCrj/vp39cFJiAK7giZW64GO9
qlj4K/lsTvf3mwmtZCR4DD8523RdjXV8KHC9gewKie6HOgJhizHSpMeUYy1UY6i2
ImUcHPoEaTknnpGfqjd/WoayOIj7PZcWfaEpfgL6h8DzFelCzxL9QSP+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZeChJn+fNLOtxt4JPRGVHIsTZgMB8GA1UdIwQY
MBaAFNbOSSVfQGpyVZPGLhxAh3lYbVbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmIt
NjcyNWQ5ODE5NmM2LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmItNjcyNWQ5ODE5NmM2
LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARt7VNGe9
G+a8GSnxu3y5zoxAP1JBsruDxuQRPNoVz+grX68gXCB/Z+io02fL95wUe2Md4CQv
CM7XIuYl17dY71y18zIqIH5h00urhCd7tOdT8iG/bKPgxodRbTU15ScravFvbo4C
arD+50le+cW2lug1ST/yUKGBGYavqemUoiDHjqwFMrYXNHjeUWr4gj1X00G8nte7
BvP/KZIgY9wAK7qKMkDSVwnHEsV8tE//pSUu2kWSmElpnV+CuwyNf28QK5wqDhuf
RpTdcNwqj93AW1rYRhswjbWgfZAN5T5us8VIHqqF4TDR7W7ORi4StF/DsElxB/1G
M3Qiidkv5WgmKg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:34 2026 by rpki-client