Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
File:                     r54n_4hNH_f0er0AUO0Q4B7c7fs.mft (raw, json)
Hash identifier:          Ng6TpoDiq4b+3mXQZQbNI8c9wpELGbaRTzKMECRaNJg=
Subject key identifier:   D3:57:91:4A:FC:00:D6:E7:A5:1B:C3:38:FD:3A:D0:DF:5A:16:72:6D
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Certificate issuer:       /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial:       01A1DA93EED03D8684CEAFBCDA965C88D002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
Manifest number:          CC
Signing time:             Sat 14 Nov 2026 15:01:30 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:30 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:30 +0000
Files and hashes:         1: 0U2VlsPI1ZtSc4ITKZMGcokM6wQ.roa (hash: xFxtfcP/uh1hT7HfqtefEkdADJqwVPsvw8okD6YODcA=)
                          2: 1EPj5oCsvEp1ETVvGrcTQxkCQms.roa (hash: f9+jGJesrY0olTfTtyOt2zp8nsGdbEcZJti7tdKfZHA=)
                          3: 1uVhjwRSh9C9UN9zou-J_49QroY.roa (hash: hV9qkQ7ywz8bW/WmGxowQKu9EUkx7AbC+vJ4lhL/aaE=)
                          4: 1wCdD8VKd_ta-d63gF1G_6WBuLo.roa (hash: VqRBvCXBql659V0OdnYPI3Xg3cDei7AE4x27Y8TBWRE=)
                          5: 6TF4P1tc8bHit3fUpyV_otBGVKo.roa (hash: JxJ41STZJxIW0v9E5xDvP6iTnPeWXqStXovMLWjDNsE=)
                          6: 6WBCdNue4P4Bwmh21ugyLAYysrY.roa (hash: 1x/adm6hhc5ZSirGrOu+HovN3knqn/HT/eVJrmt1yWE=)
                          7: 8K-SBSsLZWyAM8251wD_7SmcYSI.roa (hash: u8u0bXaKoVg+T3zhQClgvL2x7kLV+iV64o49svbAHMQ=)
                          8: 8OitLpw0dsq3bJueMk5mfw-4mBk.roa (hash: fK9JZ7qX/SNcvGwfyLts434oLNN1a2W6BWiNxhwi1lg=)
                          9: ADM5z6EfT3aWecVckZ9ug4ndlFM.roa (hash: DIKoFYYPJwfVKkL4sbv2NF1MZFR1z2PkmKsW9iTkjvM=)
                          10: DOY9uvEMESG_CBAXCSTil8tUjqU.roa (hash: GcKQdemMAmtXK23rDUqm0T27HdRKJ8Tv/9Se0Lcmk2c=)
                          11: OtsuQqOLegUyp3rGLwwY30uztEE.roa (hash: zGm1ZJFNQlWZSOLRTdOjEZheOJDHHpoPQ1O4yk1r3yQ=)
                          12: W-E6RwiIlwVN51nQLz0Z6UDhiCw.roa (hash: ooVMUa7c7GGovMJnl3xX70044O30NEuriA3liyRtiuM=)
                          13: WWXCLp8AKAwMMTTDbtTkCEwqNIw.roa (hash: 0ZIMIlG8yYnukrtN0d2X8Yr+wlYVLsxn2KV6Qd+MwzI=)
                          14: Ztqr6j7l7h3hs1VNVXmX_PeO6y8.roa (hash: ALLvNYgYy+qfhyJjEdyh1rN26Jk0vmO2dzNitEKWBcE=)
                          15: _h5tF9j5f1uzU7ZcKGt_V0YRMfA.roa (hash: 5/wsXRnEKBgmAQWZnCaz0b9qii35BhEg6B1HiaVMDlw=)
                          16: bvJPyCtTjEYZUTPcqiqr3yGW6j4.roa (hash: 6FqO+UYLHBLINnmw7pNDg8JsJ+P1NlKcV6kUgmiIj0s=)
                          17: cZ7ZhoEWACPKL1hgzpRrPElX08A.roa (hash: wf0JyXCRSvZ3zP2oo8QOOdxV4cogB8l3U1ibW/7bytQ=)
                          18: fbTsMOTb-p22OeyWYaznGGMH3Is.roa (hash: 3xgYR3jORQJHO2miHfCovdOK9oxftmKjYh8y4mgjkz8=)
                          19: gATU6Sq3KDhYPqii9ihS2BkclmU.roa (hash: p02v2rnp7yTCrM25rSFt8vbgrnG+OhzwNrUkRhCmho8=)
                          20: iJQRSgjpxdNtNulFNn4Q4TxjfJ8.roa (hash: gfvNvlA3ELIrgvwhQVIz5BIs3SBGThtCx78SKlUF2dU=)
                          21: pWmBN6XzbhhFmh9y6uK3ktLPfY8.roa (hash: S3ZIgYSvYkA4xihDlIBYpMkW+s8XQVV2XP1qQm6PUc0=)
                          22: r54n_4hNH_f0er0AUO0Q4B7c7fs.crl (hash: LQFbB12ixPTQzl3EBrcthhj9vKr6hHO9ttybmu3Fw7w=)
                          23: sSLL9k_GNaLdFta4_f5P1UHmR7g.roa (hash: LwBt7bM7PDXkDNGp0Fd2PCvLwCzUJYU/BH9mgT76T90=)
                          24: uUTNrQu_BtLtN3uQFamOOLU8OJ8.roa (hash: wXM+i5rPx/8wkMZnjNqj0Ya8HA/4JPSEIDvTD/6DaAY=)
                          25: w0O-kMgGBUcDGLexAQgVYIHLcjo.roa (hash: TRXl9gaFoL4wFP5f4b00/HYgYwNAPKtnEfhWKhcYOTs=)
                          26: x5EHi2AetEu21DwEEnpUqLJ7LVU.roa (hash: iPUNP3GlPxIZYV2cT2Q9aA4fJ68X6dkXg9p6Upa/NbM=)
                          27: yAMDwwHx0OJAnZOEGPwEurNTfPY.roa (hash: Y+CqGx1vipPpCzhVGqEMP2VXL6GpbNsaqynSE27ySgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:93:ee:d0:3d:86:84:ce:af:bc:da:96:5c:88:d0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
        Validity
            Not Before: Nov 14 15:01:30 2026 GMT
            Not After : Nov 15 15:01:30 2026 GMT
        Subject: CN=d357914afc00d6e7a51bc338fd3ad0df5a16726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:06:b1:95:36:75:6f:06:6b:22:cc:2b:a3:
                    f2:88:65:92:a3:62:cb:f4:d6:9b:1e:2d:06:43:11:
                    be:4f:38:de:9b:1f:b1:08:7d:3a:00:e5:88:88:39:
                    9c:22:a6:84:c2:06:e5:03:60:e4:09:61:76:cb:65:
                    27:21:f3:bc:21:90:63:0c:a0:78:de:d6:ba:6d:49:
                    cf:56:2e:d4:c4:cb:e6:3c:13:72:c8:e3:04:de:fd:
                    a2:19:d3:42:60:76:b9:bd:50:0a:19:71:3f:22:29:
                    bd:9c:8d:ba:9c:cd:80:95:d1:42:86:0a:5b:34:ac:
                    33:ca:0a:f7:b2:97:d0:8b:4f:3f:bd:57:88:fd:d1:
                    49:a1:bf:b9:f8:49:d9:83:4f:fe:b6:94:eb:24:93:
                    35:41:c0:b7:0d:5f:d5:ae:6f:8d:fb:78:be:50:b8:
                    20:79:b1:0b:ec:d5:78:06:fb:66:7e:70:7d:08:11:
                    7f:f9:20:05:32:d5:89:ef:41:8b:a5:c4:ed:18:c8:
                    a0:5e:13:b3:84:95:d5:60:96:d3:75:a0:9e:45:cf:
                    f2:4f:8f:4a:00:3d:72:0d:37:a7:ee:bd:32:c2:63:
                    bc:1c:31:63:04:ff:df:59:34:8d:1e:cc:6b:69:b7:
                    d1:4c:78:29:11:58:97:78:b8:ba:40:33:b7:32:79:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:57:91:4A:FC:00:D6:E7:A5:1B:C3:38:FD:3A:D0:DF:5A:16:72:6D
            X509v3 Authority Key Identifier:
                keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:03:03:c6:e6:ad:e9:6c:8b:85:b2:ee:04:05:7c:dd:2b:
         bd:1c:a3:9f:52:68:9f:e1:c6:41:5b:b8:7b:02:93:f1:32:19:
         56:cb:d5:25:cc:a0:29:79:ed:5a:9b:f5:61:f9:63:a3:42:a6:
         21:ca:70:a8:77:58:0e:00:25:a1:6c:d3:19:28:e7:ad:fc:d3:
         f4:b1:2b:fe:fe:bb:4c:10:e4:96:20:8a:ed:8f:6f:0a:28:77:
         ba:78:28:4b:27:cb:37:58:57:60:9c:b7:b1:b1:dc:2a:a0:4a:
         09:f7:4e:a9:73:fb:ad:9f:3e:b4:c0:a5:97:4d:cf:82:02:2c:
         aa:cf:f0:87:5f:10:91:91:58:8a:ca:f2:f6:68:66:98:d8:d1:
         ef:e1:63:b5:cd:ac:0f:4f:cb:13:a7:f1:16:ec:d6:8a:1d:de:
         06:76:14:8c:60:a6:86:1c:ed:f5:14:5c:5e:50:68:eb:5f:5e:
         f6:e0:aa:29:50:6c:95:4d:56:38:00:8d:3a:12:71:7e:9e:29:
         51:bf:85:3a:7d:4f:da:93:96:09:4d:aa:a5:10:e4:2a:c9:e3:
         6a:c6:95:74:cc:0f:2d:ce:3d:85:e3:64:12:48:65:00:ac:36:
         46:d4:da:d9:d9:dc:b2:0d:1f:ae:88:7d:15:1f:4d:8f:f4:c7:
         7a:93:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:44:27 2026 by rpki-client