Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          2tdSQaKK7evLaWEtJfI9RB7K7ES4Hgp9jypNJS78vag=
Subject key identifier:   7B:9F:35:11:28:7F:EA:AE:69:F1:09:B7:A3:A2:47:70:BA:7F:FD:58
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       01A1DA9379829338282CC942170574420259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0B88
Signing time:             Sat 14 Nov 2026 15:00:59 +0000
Manifest this update:     Sat 14 Nov 2026 15:00:59 +0000
Manifest next update:     Sun 15 Nov 2026 15:00:59 +0000
Files and hashes:         1: DD8GlU-b7VspBkcI_iIvr_RGPjM.roa (hash: 1DKJJF4hfxzBvntYwqTBxwoFNy0hvNUjzhgFWAAfUuQ=)
                          2: En3Wic9RJujoNZz1RHxUA6UVUfU.roa (hash: O63V4JVax87JCF0awcaxtenxRZPOPdz5hB0JKaX0syY=)
                          3: FAAYpnv0apJm1WMjsv3PVyWYHW8.roa (hash: cRkV53u9HMf3IlgE7VmUP+PB8n6IJtBSTpmDwitbqpg=)
                          4: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: 1ABhUWEUnq4KS5PpIQTDsLrD9tNmu5EdK+4sEKWUvc0=)
                          5: KacNY2NRCZHAdOB1lxgrSlTUZlM.roa (hash: qllOkGGUcuSdb7HoAuEKwUiZ9/GJv0Ub2eGz8KFRmtE=)
                          6: KnBTzsN71pvNUURw9MTkeAuiWEg.roa (hash: f3UjJWYdOCKN/sjw9LsoQPTsRyO9pJv7bf7OHVWD29I=)
                          7: RjQGNYymIhhTpLXsvAqFCRYlmK0.roa (hash: 7eWaoKsFK+dXrDDvViANKRbdVD7AqyGyUhoJ/7eX31o=)
                          8: TqnPMVDh9HpYev_FIZchp86-qnU.roa (hash: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4=)
                          9: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (hash: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw=)
                          10: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (hash: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8=)
                          11: jL2Cco2FhTEdkX2dyIW4ommNU-g.roa (hash: Z0uR325Ovg4ut7Z9R8ItzLbMbDWE0aFp1hccy/9+bTg=)
                          12: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (hash: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM=)
                          13: nuiGDtHRIkAbOjGaVfw8g7_xpg0.roa (hash: CW+HwbjsjwctAktPqMnVZ/gVMSWTAGQF29EXWU/D5UY=)
                          14: sJruewuKaSeVsdcx7O5wYrcqNzE.roa (hash: lXlw+sCAYn9qkIUAMBhvTHNQ6pkSMrMsj6GywXXUL9k=)
                          15: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (hash: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8=)
                          16: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (hash: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30=)
                          17: thQeBvJ49lds_EA91PLLCSwLWIw.roa (hash: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE=)
                          18: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (hash: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U=)
                          19: vE1csrm_6c3aHypva1dNMXZ3cII.roa (hash: +4Y/13hizQrSI6qfWzhAEBHj6eFtduMTjq0NDEXp0Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:93:79:82:93:38:28:2c:c9:42:17:05:74:42:02:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Nov 14 15:00:59 2026 GMT
            Not After : Nov 15 15:00:59 2026 GMT
        Subject: CN=7b9f3511287feaae69f109b7a3a24770ba7ffd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:00:60:ec:d8:dc:34:dd:0d:13:5f:68:2c:
                    e1:15:f3:eb:5b:df:63:eb:66:93:06:9c:92:a0:d1:
                    e4:ac:63:53:07:e8:09:0c:43:be:f8:95:34:97:76:
                    dc:1e:99:9c:c2:dc:5c:79:25:f5:77:e6:03:cd:9e:
                    a5:2c:50:d7:e1:a2:ce:c2:2b:2a:c9:2f:b4:90:af:
                    ea:5d:56:22:74:ef:92:ac:aa:5d:4a:c4:b3:09:7b:
                    fd:bd:a6:f4:5d:91:02:ad:17:62:80:18:0b:bd:e7:
                    dc:0a:9e:e4:0e:80:3b:36:e8:bf:dd:4d:e9:29:0c:
                    af:1d:90:5a:31:b9:e5:46:4d:7f:1a:61:38:18:e5:
                    18:01:a1:28:fb:cc:a2:d0:30:81:20:af:ff:98:f5:
                    93:ee:c3:36:56:0d:98:d7:6f:ac:82:6b:52:bd:b9:
                    d0:f4:1d:e0:ac:99:47:d3:12:7c:3c:35:ef:61:e8:
                    7d:2a:a5:fa:b9:28:be:a7:9a:08:c4:e7:84:23:32:
                    f7:72:36:a7:d7:fe:a8:b9:30:21:9a:76:de:b3:ec:
                    fa:e6:5d:78:f1:e7:0f:b9:87:ec:0e:0f:4a:f1:d8:
                    77:78:2b:bd:8e:df:20:1e:27:8f:59:4b:bf:2e:11:
                    27:f3:c2:55:be:1f:a2:5a:6f:6e:8c:0a:31:af:a0:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9F:35:11:28:7F:EA:AE:69:F1:09:B7:A3:A2:47:70:BA:7F:FD:58
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:04:2b:59:12:da:87:41:93:b6:0c:96:fc:a8:4a:38:03:0d:
         20:11:69:46:35:bd:65:d4:45:cc:b4:2d:9b:da:a0:31:23:ab:
         23:2c:4c:ae:7f:cf:a1:e6:b2:09:3e:88:8f:b6:90:02:4b:c2:
         a9:b1:4e:8c:8b:f0:f7:4d:8a:0f:2f:62:c8:7b:0c:db:93:58:
         ac:8d:c4:56:a7:44:45:e7:9a:32:eb:e8:23:92:bc:0d:4e:71:
         ca:5c:85:0a:79:7b:8a:c7:e7:7e:f9:79:65:1d:e3:21:78:02:
         3e:df:14:d0:0f:00:1e:f5:b7:52:e4:38:8a:45:ee:d5:a8:8f:
         c8:30:75:59:dc:db:c3:4f:a2:3a:e3:96:ed:c5:fa:e3:29:56:
         e9:34:c0:c5:40:5b:7c:c6:21:47:1e:ca:c2:cc:9b:c3:ad:c6:
         cc:04:7a:ad:63:c1:e5:23:78:02:a4:f3:dc:28:ac:68:58:8b:
         97:b5:94:11:99:85:43:ab:65:ae:e4:c9:99:cb:da:10:f6:9b:
         b5:66:c4:e0:3b:cd:d4:e5:7d:49:d9:62:c5:f4:26:df:64:05:
         46:42:f0:8f:01:b1:ac:29:a1:89:ca:90:14:7f:36:a3:04:ec:
         70:80:01:58:51:98:f6:67:01:c3:cc:03:21:e9:c3:c1:c4:2e:
         46:61:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:18 2026 by rpki-client