Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File:                     Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier:          ZMoawPjT6vY0iowwYd1t+OZW0QrzI9Tidhvj2i1r+mo=
Subject key identifier:   BC:DD:DE:6E:85:8A:4D:06:98:DE:98:15:5C:7C:A8:15:B5:57:21:B5
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer:       /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial:       01A1DF15551CC6345B32F859D20E7A84DA5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number:          1100
Signing time:             Sun 15 Nov 2026 12:01:19 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:19 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:19 +0000
Files and hashes:         1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: ROlzQxs6W8INPLbjxVDRQOXb7j5z0xo6KY0RWWUQ+zo=)
                          2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:55:1c:c6:34:5b:32:f8:59:d2:0e:7a:84:da:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
        Validity
            Not Before: Nov 15 12:01:19 2026 GMT
            Not After : Nov 16 12:01:19 2026 GMT
        Subject: CN=bcddde6e858a4d0698de98155c7ca815b55721b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:c7:e7:a2:eb:f5:79:fb:ef:b7:dc:81:f0:
                    26:b8:b4:ff:67:d8:f8:0f:ff:57:16:2b:12:9a:7d:
                    4f:58:b5:39:27:fd:9d:1d:4d:40:f6:9f:db:bf:c1:
                    74:bf:47:63:11:3c:0c:13:c9:a8:a8:4a:3a:36:81:
                    30:99:21:3c:1b:0c:31:32:39:22:3b:68:27:bc:af:
                    14:01:41:b2:f4:63:71:36:ad:29:a7:63:de:ed:9c:
                    b8:7c:c2:6b:05:8b:c1:59:94:e0:3b:92:23:5f:7a:
                    23:f2:40:9a:50:1a:5b:59:53:9b:b0:c1:ce:23:f4:
                    9d:34:24:ae:b4:8d:cd:d5:fb:97:b3:f0:81:b3:92:
                    9c:02:21:c8:c7:61:e0:13:57:1f:6c:df:86:e5:ca:
                    df:24:46:11:65:ff:7a:fc:6c:e5:c1:fa:95:38:e1:
                    f1:46:0d:c2:f8:a7:d3:02:ad:68:4f:7f:d4:44:86:
                    6e:74:75:7d:90:a0:45:31:d8:ad:a1:c8:7a:37:00:
                    ed:a9:c6:87:76:74:36:bd:1a:eb:42:ae:4f:f5:1d:
                    12:6b:21:7a:ed:02:77:0d:bf:2b:eb:ad:ba:87:bf:
                    3b:3d:30:da:66:54:67:54:08:5b:23:e5:a4:c6:7f:
                    3c:b3:6d:74:a3:d0:b1:0a:ad:e5:f0:d3:cd:5d:bc:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:DE:6E:85:8A:4D:06:98:DE:98:15:5C:7C:A8:15:B5:57:21:B5
            X509v3 Authority Key Identifier:
                keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:cb:99:40:54:d5:ca:ed:fd:de:fa:db:08:da:47:bb:c8:7e:
         11:b8:a0:16:25:bd:9f:1a:cc:f5:0c:02:ce:66:d9:08:f4:e4:
         77:00:c3:bb:46:52:e7:9d:65:d7:ff:6a:0e:9a:49:18:1d:9f:
         b7:6a:57:83:d8:46:13:2b:c9:de:06:fd:2e:20:02:17:e3:8e:
         a7:09:83:82:37:b2:79:93:0d:9f:cc:b8:68:6a:29:db:fa:5f:
         a9:fe:26:b5:0c:4b:1d:7b:86:76:a7:9f:1e:8c:76:17:d5:9a:
         fd:9a:88:88:a0:e1:7b:06:5b:cb:c2:17:9e:1f:60:db:33:cc:
         58:15:32:c7:8e:47:01:14:94:cc:8c:0e:da:6e:f9:b6:e8:ca:
         d1:4f:39:c4:0a:48:f8:07:e8:93:0a:83:c3:54:c1:95:c1:02:
         05:54:cc:b4:fd:3a:87:58:22:f9:5c:88:ca:85:94:d3:5e:e7:
         49:8e:9b:43:29:96:66:de:eb:6c:bf:fa:8c:7b:37:31:9e:1d:
         bd:8c:be:c4:f7:f2:40:83:20:75:04:7c:52:d9:a9:85:a1:02:
         68:00:4f:55:04:9f:e0:a6:17:e4:bc:a2:31:76:7f:7f:0f:f4:
         0e:25:a7:ed:70:5c:7e:27:16:fc:d1:15:d6:bc:b5:ba:b1:46:
         d2:f9:4a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfFVUcxjRbMvhZ0g56hNpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi
ZDViMGYwHhcNMjYxMTE1MTIwMTE5WhcNMjYxMTE2MTIwMTE5WjAzMTEwLwYDVQQD
EyhiY2RkZGU2ZTg1OGE0ZDA2OThkZTk4MTU1YzdjYTgxNWI1NTcyMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E7H56Lr9Xn777fcgfAmuLT/Z9j4
D/9XFisSmn1PWLU5J/2dHU1A9p/bv8F0v0djETwME8moqEo6NoEwmSE8GwwxMjki
O2gnvK8UAUGy9GNxNq0pp2Pe7Zy4fMJrBYvBWZTgO5IjX3oj8kCaUBpbWVObsMHO
I/SdNCSutI3N1fuXs/CBs5KcAiHIx2HgE1cfbN+G5crfJEYRZf96/GzlwfqVOOHx
Rg3C+KfTAq1oT3/URIZudHV9kKBFMditoch6NwDtqcaHdnQ2vRrrQq5P9R0SayF6
7QJ3Db8r6626h787PTDaZlRnVAhbI+Wkxn88s210o9CxCq3l8NPNXbzBTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzd3m6Fik0GmN6YFVx8qBW1VyG1MB8GA1UdIwQY
MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct
MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3
LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwMuZQFTV
yu393vrbCNpHu8h+EbigFiW9nxrM9QwCzmbZCPTkdwDDu0ZS551l1/9qDppJGB2f
t2pXg9hGEyvJ3gb9LiACF+OOpwmDgjeyeZMNn8y4aGop2/pfqf4mtQxLHXuGdqef
Hox2F9Wa/ZqIiKDhewZby8IXnh9g2zPMWBUyx45HARSUzIwO2m75tujK0U85xApI
+AfokwqDw1TBlcECBVTMtP06h1gi+VyIyoWU017nSY6bQymWZt7rbL/6jHs3MZ4d
vYy+xPfyQIMgdQR8UtmphaECaABPVQSf4KYX5LyiMXZ/fw/0DiWn7XBcficW/NEV
1ry1urFG0vlKKg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:45:09 2026 by rpki-client