Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File:                     JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier:          qaWiCLbFVoIIiATEMhD2o09EKU/0irLwWyHHLZO8iEY=
Subject key identifier:   5C:EF:84:66:9D:E5:9A:4B:5B:31:32:8C:5F:57:70:D6:5F:AA:C2:3E
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer:       /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial:       01A1DD94DEEBD992AAE6706716D3F9FB47AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number:          045C
Signing time:             Sun 15 Nov 2026 05:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:23 +0000
Files and hashes:         1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: OfxyGfP1ofIi81Uwxh0GsrBMFGlaq7fpnpbQEyo3LcA=)
                          2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:de:eb:d9:92:aa:e6:70:67:16:d3:f9:fb:47:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
        Validity
            Not Before: Nov 15 05:01:23 2026 GMT
            Not After : Nov 16 05:01:23 2026 GMT
        Subject: CN=5cef84669de59a4b5b31328c5f5770d65faac23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:83:94:8d:1e:25:d9:0f:dc:eb:c9:75:54:
                    ea:44:9a:67:25:1e:ba:69:75:00:94:4f:fc:6f:12:
                    39:d6:be:35:5a:4c:42:99:ea:9c:6e:a4:80:15:1d:
                    ba:c9:b9:53:27:6f:7f:dc:4f:2d:74:ed:4f:21:9d:
                    1a:06:27:60:f3:c5:d7:0d:e7:bb:52:b4:e4:03:0a:
                    fd:07:d8:21:ce:ad:b7:5a:a1:cc:a0:ef:52:05:ce:
                    25:8e:c2:8f:dd:d2:2a:ca:43:2e:73:3e:17:89:06:
                    13:44:5a:5a:13:e4:fb:97:fb:f0:09:b1:7b:e1:be:
                    b0:f0:cd:33:45:ce:e5:73:76:de:f7:be:80:01:69:
                    41:e3:8d:5f:8a:09:56:d7:9a:18:a3:c1:40:a8:59:
                    15:c3:24:b1:1f:3f:91:cb:fe:c1:ec:85:c7:cb:59:
                    b1:5f:f0:74:30:ed:50:4f:d8:9c:dc:8b:45:3e:aa:
                    9c:e2:40:a6:e0:0c:38:72:b3:01:e1:eb:98:71:a4:
                    ea:3a:76:3b:3c:8b:a9:89:7b:f7:90:aa:bb:8a:a4:
                    e9:76:a4:c8:5d:fd:fb:39:4e:37:c8:5f:4c:28:a7:
                    60:fe:a0:e5:51:8b:2e:d4:b3:21:a0:8d:0e:7b:8d:
                    75:56:25:07:ce:8b:37:28:73:87:cc:fe:54:6a:58:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EF:84:66:9D:E5:9A:4B:5B:31:32:8C:5F:57:70:D6:5F:AA:C2:3E
            X509v3 Authority Key Identifier:
                keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f6:81:47:bc:60:b5:88:f1:4b:22:39:20:98:c9:fa:db:cd:
         97:3e:f9:96:bd:b2:51:5b:4f:83:f1:23:c6:cf:95:e5:17:13:
         7a:f2:27:1d:a7:af:07:3f:8c:2f:32:77:83:1e:bf:3e:a7:c5:
         02:fd:5a:9d:44:35:d4:c8:be:e7:cf:05:22:40:ed:b5:95:d5:
         ac:1b:d5:70:1e:f9:b9:eb:f2:d5:04:d1:c0:9b:d4:40:dd:6d:
         f2:59:2d:2e:68:be:c5:e7:d8:84:b8:0e:d5:bf:cc:96:5b:32:
         db:a3:f9:7b:30:52:92:e7:7a:62:89:9f:4e:60:36:af:e3:85:
         9c:9c:c4:d4:62:79:bd:ae:90:2c:80:06:5c:df:72:9c:2c:32:
         62:16:fa:38:ff:0a:a9:fc:31:e5:34:44:fe:ea:ff:d0:87:b6:
         e0:24:89:71:50:df:04:63:32:63:28:60:7d:b3:a2:73:46:4c:
         eb:a5:f0:6d:d5:21:3d:6a:81:bc:81:17:d6:50:c2:65:8f:54:
         b6:73:e3:eb:27:d8:05:cf:e9:58:59:77:5c:bb:de:71:52:68:
         17:7f:31:0e:21:31:eb:f2:2d:c9:07:61:97:66:84:b4:30:51:
         7f:90:08:3f:6d:60:e8:c4:45:64:fe:dd:d3:31:a2:a2:41:97:
         53:4d:e5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlN7r2ZKq5nBnFtP5+0euMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5
ZmQ4NWIwHhcNMjYxMTE1MDUwMTIzWhcNMjYxMTE2MDUwMTIzWjAzMTEwLwYDVQQD
Eyg1Y2VmODQ2NjlkZTU5YTRiNWIzMTMyOGM1ZjU3NzBkNjVmYWFjMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BeDlI0eJdkP3OvJdVTqRJpnJR66
aXUAlE/8bxI51r41WkxCmeqcbqSAFR26yblTJ29/3E8tdO1PIZ0aBidg88XXDee7
UrTkAwr9B9ghzq23WqHMoO9SBc4ljsKP3dIqykMucz4XiQYTRFpaE+T7l/vwCbF7
4b6w8M0zRc7lc3be976AAWlB441figlW15oYo8FAqFkVwySxHz+Ry/7B7IXHy1mx
X/B0MO1QT9ic3ItFPqqc4kCm4Aw4crMB4euYcaTqOnY7PIupiXv3kKq7iqTpdqTI
Xf37OU43yF9MKKdg/qDlUYsu1LMhoI0Oe411ViUHzos3KHOHzP5UalgQAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzvhGad5ZpLWzEyjF9XcNZfqsI+MB8GA1UdIwQY
MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt
OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx
LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/aBR7xg
tYjxSyI5IJjJ+tvNlz75lr2yUVtPg/Ejxs+V5RcTevInHaevBz+MLzJ3gx6/PqfF
Av1anUQ11Mi+588FIkDttZXVrBvVcB75uevy1QTRwJvUQN1t8lktLmi+xefYhLgO
1b/Mllsy26P5ezBSkud6YomfTmA2r+OFnJzE1GJ5va6QLIAGXN9ynCwyYhb6OP8K
qfwx5TRE/ur/0Ie24CSJcVDfBGMyYyhgfbOic0ZM66XwbdUhPWqBvIEX1lDCZY9U
tnPj6yfYBc/pWFl3XLvecVJoF38xDiEx6/ItyQdhl2aEtDBRf5AIP21g6MRFZP7d
0zGiokGXU03ldQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:28:30 2026 by rpki-client