Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
File:                     Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft (raw, json)
Hash identifier:          mcU8XoPQjm2tEoe7xeaYyzz53EMicjrhXgHa+IVwtNI=
Subject key identifier:   74:9E:3C:DF:C2:8F:86:49:46:52:AD:78:B6:BE:F7:99:CC:5D:83:4B
Authority key identifier: 17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
Certificate issuer:       /CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Certificate serial:       01A1DE70DB1888E77AD410675FF9AB1EAF22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
Manifest number:          0171
Signing time:             Sun 15 Nov 2026 09:01:40 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:40 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:40 +0000
Files and hashes:         1: 5xGTfTQ4NQ6rMqpH3tDID_way78.roa (hash: F8H1Pp6BX6Q7UzR7IW00zFxASJYxtUwFmEz2td8WBTs=)
                          2: BWH36-bel5gTA_6A5H2Vs5lFhpM.roa (hash: w2VVqzjO7mvV0ab7JuRfyw+tb/CiyS8XdVuLVmyQYFc=)
                          3: Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl (hash: JLkmAI3E1sbicLmk2JvkZNJNIGDsZKpP58lob8na3g0=)
                          4: TFrFCFoNGOrEr-0X10FQhSCvIIM.roa (hash: 7CgOjycwa7iUcHPLxP4Ia/ozXApop9buE9JwEyEF3YM=)
                          5: uDov7n4fgQ3mm1Y0HBFFD_S7QcQ.roa (hash: TVOgxQIfQpHq2V2Hd2KnY6QeGGGPCyJ5eRO9EBWn8xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:db:18:88:e7:7a:d4:10:67:5f:f9:ab:1e:af:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
        Validity
            Not Before: Nov 15 09:01:40 2026 GMT
            Not After : Nov 16 09:01:40 2026 GMT
        Subject: CN=749e3cdfc28f86494652ad78b6bef799cc5d834b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e0:3f:3f:7a:e5:a7:a8:6f:25:62:ad:dd:96:
                    af:d5:88:3b:11:0f:2d:32:6d:6c:1c:70:c6:42:41:
                    48:bd:73:89:a9:e9:cf:a2:89:92:0a:5c:22:ef:f5:
                    28:0d:08:fe:c1:94:35:90:5c:b2:b2:a7:7f:e9:22:
                    ae:ff:ce:f6:59:2e:d8:81:3b:e9:d9:3e:9b:8c:11:
                    14:8c:ab:49:2e:a6:6c:9a:a3:c7:07:0f:6c:60:0f:
                    1c:ba:b5:71:5d:96:82:bd:1c:f5:75:fa:19:95:74:
                    9a:9f:0e:6e:27:1e:89:3d:00:96:a4:f5:19:ec:49:
                    2b:d6:0a:cc:04:04:46:2b:de:79:79:49:8b:2b:92:
                    81:90:4a:63:03:f5:f9:ec:2a:d0:84:38:93:ef:1d:
                    7b:b5:33:d6:a2:a7:2c:95:64:ae:9a:c9:3b:ba:8a:
                    77:42:a3:03:dc:78:6a:58:7f:68:0f:81:6e:d6:b5:
                    39:26:f9:88:ed:3a:f1:ab:6e:44:90:1d:a0:08:78:
                    86:a9:fc:5f:87:5f:a8:26:0e:ba:15:04:a4:4a:f1:
                    58:d4:a9:0a:ab:3b:d4:36:59:ab:f7:58:12:b8:eb:
                    46:42:19:5f:d2:eb:5b:d9:64:50:2f:ac:22:39:64:
                    cd:d9:43:06:c8:f9:d4:c1:22:4a:cb:f8:39:4f:69:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:3C:DF:C2:8F:86:49:46:52:AD:78:B6:BE:F7:99:CC:5D:83:4B
            X509v3 Authority Key Identifier:
                keyid:17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:51:e2:81:4d:dc:74:2e:e7:89:eb:7c:57:0b:fc:11:a5:ea:
         a4:92:00:17:39:ca:54:56:4b:6a:42:11:9e:3f:4d:18:5f:a4:
         90:69:c6:b2:21:61:36:b4:19:9a:ad:59:66:85:01:90:02:42:
         fe:6b:79:84:d6:8c:60:ce:5c:a6:90:e3:6d:e0:74:d0:cb:e5:
         b8:22:9e:f7:38:8e:49:f4:2c:7c:fd:b6:f4:e4:b7:01:ad:e8:
         55:48:de:e9:df:19:69:44:2c:ea:55:6a:f9:60:41:45:6c:d8:
         73:7f:81:62:a7:d8:dc:ca:8d:82:8d:1b:24:fc:48:e7:d8:09:
         79:79:d9:0a:f8:24:8c:8c:37:a8:f2:40:d1:07:65:e8:82:dd:
         b1:71:c4:c7:03:64:93:d1:1e:b1:4c:94:6f:fe:2d:03:78:61:
         1a:9f:40:02:2f:5a:d8:11:96:71:55:f1:91:ae:fc:15:08:56:
         c2:15:a2:78:86:55:7f:ea:4f:87:31:59:e5:13:6f:4d:7a:7a:
         b2:39:6f:8d:7e:dd:3a:7f:d2:20:f1:aa:74:76:a7:17:64:27:
         59:81:13:20:c5:e7:15:3d:d0:07:f9:1b:f3:ff:fc:8a:50:3a:
         85:fb:b0:f7:99:2b:06:11:bc:d8:15:2c:04:4c:52:12:9b:b4:
         8b:fa:c8:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecNsYiOd61BBnX/mrHq8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MmRhOWE3YmJjOGUxNjM2OWI0MDZiZDI1NmUyYTMwMDJj
YmRkNzgwHhcNMjYxMTE1MDkwMTQwWhcNMjYxMTE2MDkwMTQwWjAzMTEwLwYDVQQD
Eyg3NDllM2NkZmMyOGY4NjQ5NDY1MmFkNzhiNmJlZjc5OWNjNWQ4MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OA/P3rlp6hvJWKt3Zav1Yg7EQ8t
Mm1sHHDGQkFIvXOJqenPoomSClwi7/UoDQj+wZQ1kFyysqd/6SKu/872WS7YgTvp
2T6bjBEUjKtJLqZsmqPHBw9sYA8curVxXZaCvRz1dfoZlXSanw5uJx6JPQCWpPUZ
7Ekr1grMBARGK955eUmLK5KBkEpjA/X57CrQhDiT7x17tTPWoqcslWSumsk7uop3
QqMD3HhqWH9oD4Fu1rU5JvmI7Trxq25EkB2gCHiGqfxfh1+oJg66FQSkSvFY1KkK
qzvUNlmr91gSuOtGQhlf0utb2WRQL6wiOWTN2UMGyPnUwSJKy/g5T2nOkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSePN/Cj4ZJRlKteLa+95nMXYNLMB8GA1UdIwQY
MBaAFBctqae7yOFjabQGvSVuKjACy914MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnkycHA3dkk0V05wdEFhOUpXNHFNQUxMM1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt
MjdmMmJjMTYyYTA3LzEvRnkycHA3dkk0V05wdEFhOUpXNHFNQUxMM1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3
LzEvRnkycHA3dkk0V05wdEFhOUpXNHFNQUxMM1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFHigU3c
dC7niet8Vwv8EaXqpJIAFznKVFZLakIRnj9NGF+kkGnGsiFhNrQZmq1ZZoUBkAJC
/mt5hNaMYM5cppDjbeB00MvluCKe9ziOSfQsfP229OS3Aa3oVUje6d8ZaUQs6lVq
+WBBRWzYc3+BYqfY3MqNgo0bJPxI59gJeXnZCvgkjIw3qPJA0Qdl6ILdsXHExwNk
k9EesUyUb/4tA3hhGp9AAi9a2BGWcVXxka78FQhWwhWieIZVf+pPhzFZ5RNvTXp6
sjlvjX7dOn/SIPGqdHanF2QnWYETIMXnFT3QB/kb8//8ilA6hfuw95krBhG82BUs
BExSEpu0i/rIhA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:15:38 2026 by rpki-client