Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          GI3z3eJRH2IuOoO5Wm8EBhY3BpWl9FmaW1DvTRvFpVU=
Subject key identifier:   52:DE:51:1E:89:00:8C:78:1F:E3:03:72:F9:F8:24:39:5C:78:21:B6
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       01A1DCF074524A16D7AEE930910FC4E45A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0F20
Signing time:             Sun 15 Nov 2026 02:01:48 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:48 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:48 +0000
Files and hashes:         1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
                          2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: fj1gCHfLwOM3zxmuQPU7r603k6csWH17zhcBW4LhFEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:74:52:4a:16:d7:ae:e9:30:91:0f:c4:e4:5a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Nov 15 02:01:48 2026 GMT
            Not After : Nov 16 02:01:48 2026 GMT
        Subject: CN=52de511e89008c781fe30372f9f824395c7821b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:2c:89:5b:fe:73:a5:6a:57:d0:7e:53:d0:
                    97:eb:09:fd:45:d6:43:7f:24:0b:d4:f2:e8:fe:a9:
                    6c:0f:f9:9b:23:48:ec:1f:6d:a9:11:ad:a3:5f:56:
                    0a:f2:c3:29:80:08:5b:a9:bd:9e:80:41:35:38:33:
                    33:80:22:ff:91:94:b1:ef:0b:3d:ff:58:fa:f5:f8:
                    c6:3e:c2:db:2d:40:bd:b7:34:35:31:b0:0b:99:bb:
                    9b:c5:9c:ec:03:05:9d:07:42:7b:a7:8c:22:65:89:
                    2e:72:9e:c1:a1:b3:c1:d8:d9:06:1e:bf:da:d8:95:
                    69:42:06:f9:dc:fe:a5:fa:95:98:9d:7d:75:43:ae:
                    f3:34:3c:d4:ce:36:6b:a6:f8:9a:b2:1a:27:f1:e7:
                    50:31:b9:7e:e7:4f:b8:79:69:57:d1:41:bf:a8:49:
                    cf:6b:83:6c:d1:6d:f6:e6:74:3e:9a:b6:d5:da:1d:
                    96:67:2e:c0:be:50:51:ad:b6:4a:f1:1a:a7:ae:ac:
                    e1:e2:be:5e:99:63:2b:0f:8f:7e:16:ec:66:1a:1d:
                    22:c4:f4:8e:7b:5f:bf:0c:52:9b:62:eb:a3:81:e8:
                    8b:eb:60:d1:a0:45:6c:71:83:00:94:24:fe:f9:d6:
                    6f:53:49:c1:0f:fb:b1:52:90:9e:4e:00:17:0f:f8:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DE:51:1E:89:00:8C:78:1F:E3:03:72:F9:F8:24:39:5C:78:21:B6
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:22:c8:df:1a:01:6e:4f:62:40:03:17:f3:17:5f:6c:c0:7c:
         66:c1:d5:31:4b:4b:5f:36:05:24:c5:e1:07:59:90:a1:92:77:
         0b:c4:ba:fc:20:b1:10:93:99:2e:e1:19:0e:8e:4c:09:a5:0b:
         54:06:4b:6a:1a:1c:95:b8:28:f9:85:c4:94:34:cf:10:8e:63:
         bb:f6:e6:bf:c3:94:34:95:99:5b:2c:fa:7f:f4:0b:aa:9a:10:
         76:2b:2d:58:63:18:fa:6b:90:7f:81:a5:c4:95:33:6a:9a:e4:
         68:12:d1:31:d0:04:95:ef:c1:ee:55:79:b4:1a:46:80:3f:83:
         1f:47:83:f9:2a:1b:2b:32:f0:63:c7:c6:a1:03:9b:67:83:23:
         34:07:f9:f8:8b:b0:ce:e7:37:16:1b:e7:2f:4b:6a:b6:ef:c2:
         49:9c:6a:6c:35:4e:d3:56:3a:7b:0b:d8:c8:6d:7e:56:dd:4b:
         23:a8:04:8a:60:81:7e:39:35:2c:62:a3:7c:86:ac:75:fc:94:
         c0:d3:0e:01:0d:84:24:04:00:da:17:57:a7:f1:39:5f:b3:f1:
         8c:15:cb:87:12:22:d0:d3:c4:ab:b1:70:69:3d:db:3b:21:37:
         5f:28:63:de:9c:b4:0f:fc:ad:f0:84:0e:04:3c:3c:7b:58:41:
         8d:f5:68:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHc8HRSShbXrukwkQ/E5FocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWFhYTM2MTUwZWUxNTVjM2I1MWFkOWM3MDdmNmM0M2Jm
MmJlNjMwHhcNMjYxMTE1MDIwMTQ4WhcNMjYxMTE2MDIwMTQ4WjAzMTEwLwYDVQQD
Eyg1MmRlNTExZTg5MDA4Yzc4MWZlMzAzNzJmOWY4MjQzOTVjNzgyMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyksiVv+c6VqV9B+U9CX6wn9RdZD
fyQL1PLo/qlsD/mbI0jsH22pEa2jX1YK8sMpgAhbqb2egEE1ODMzgCL/kZSx7ws9
/1j69fjGPsLbLUC9tzQ1MbALmbubxZzsAwWdB0J7p4wiZYkucp7BobPB2NkGHr/a
2JVpQgb53P6l+pWYnX11Q67zNDzUzjZrpviashon8edQMbl+50+4eWlX0UG/qEnP
a4Ns0W325nQ+mrbV2h2WZy7AvlBRrbZK8Rqnrqzh4r5emWMrD49+FuxmGh0ixPSO
e1+/DFKbYuujgeiL62DRoEVscYMAlCT++dZvU0nBD/uxUpCeTgAXD/iWlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLeUR6JAIx4H+MDcvn4JDlceCG2MB8GA1UdIwQY
MBaAFHWaqjYVDuFVw7Ua2ccH9sQ78r5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUt
NzNkMTBkNWI5ZmVjLzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUtNzNkMTBkNWI5ZmVj
LzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiLI3xoB
bk9iQAMX8xdfbMB8ZsHVMUtLXzYFJMXhB1mQoZJ3C8S6/CCxEJOZLuEZDo5MCaUL
VAZLahoclbgo+YXElDTPEI5ju/bmv8OUNJWZWyz6f/QLqpoQdistWGMY+muQf4Gl
xJUzaprkaBLRMdAEle/B7lV5tBpGgD+DH0eD+SobKzLwY8fGoQObZ4MjNAf5+Iuw
zuc3FhvnL0tqtu/CSZxqbDVO01Y6ewvYyG1+Vt1LI6gEimCBfjk1LGKjfIasdfyU
wNMOAQ2EJAQA2hdXp/E5X7PxjBXLhxIi0NPEq7FwaT3bOyE3Xyhj3py0D/yt8IQO
BDw8e1hBjfVovg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:09:13 2026 by rpki-client