Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          HtHfL+H7A8XItDZ+WxUkzVWo43bZgmhZVHRg2ML3wyU=
Subject key identifier:   C0:E3:57:4E:E2:61:C0:1A:88:68:AB:5B:D3:ED:33:AA:B7:4A:03:6F
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       01A1DEA7B3BFBD5AE66AEDF86540E514BE1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          17D0
Signing time:             Sun 15 Nov 2026 10:01:34 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:34 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:34 +0000
Files and hashes:         1: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          2: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          3: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          4: rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa (hash: 5EPYMX4bCFhTuhRxbCYeuyqQ6i8l79Kij3J+8QpNg1Q=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: qKA9VAC6OTJvlR2A6knzTw4yfw99+BehmF0z+v5y2r0=)
                          6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:b3:bf:bd:5a:e6:6a:ed:f8:65:40:e5:14:be:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Nov 15 10:01:34 2026 GMT
            Not After : Nov 16 10:01:34 2026 GMT
        Subject: CN=c0e3574ee261c01a8868ab5bd3ed33aab74a036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:cf:86:b3:8f:f5:3f:bc:a2:28:29:cd:29:
                    df:1a:09:ca:ef:1a:43:36:13:e9:76:d1:4f:d9:dd:
                    9b:41:70:e0:c2:82:84:5e:2d:6d:80:89:b0:1f:0d:
                    83:8c:40:7a:54:f8:07:99:8a:32:fc:29:f6:14:90:
                    ba:2d:ee:21:f0:a5:5d:b7:78:71:8a:15:64:30:a6:
                    c9:88:5d:ae:db:85:0b:d2:40:ef:bb:79:4d:65:f6:
                    46:dd:5b:08:98:2d:2c:cf:3c:7e:ec:ab:17:b2:bb:
                    ec:6f:ef:fd:02:bf:f3:f1:e0:5c:0e:a9:79:aa:8b:
                    c7:e9:44:a3:57:c8:4a:3b:2e:b2:bd:c2:ea:73:59:
                    d2:c8:46:1d:83:0b:6d:02:da:27:1d:e0:f7:b5:ab:
                    9e:27:f7:54:78:c3:f9:50:5b:1d:76:1d:60:94:52:
                    5f:3c:03:3e:4e:7c:84:60:d1:ce:e9:c5:e2:3c:39:
                    df:06:54:f3:8f:8e:b0:d2:4d:d2:9c:36:39:5e:df:
                    7a:b8:bd:73:26:53:b9:78:36:31:43:72:00:2c:d7:
                    eb:8e:85:90:7e:93:64:7b:d3:7b:9c:29:34:f5:14:
                    f2:d4:af:1e:f3:75:92:a5:a4:33:52:e6:67:91:0c:
                    b9:09:9b:f0:dc:03:14:80:85:22:e3:0f:05:04:fb:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E3:57:4E:E2:61:C0:1A:88:68:AB:5B:D3:ED:33:AA:B7:4A:03:6F
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4e:5f:94:b1:4c:67:c6:f8:0f:05:4e:d8:23:03:7b:2b:c1:
         ae:6c:3f:fb:36:71:0f:e2:95:89:38:8c:06:fd:6f:f6:d4:56:
         f6:da:67:8f:b1:8d:13:6d:e3:65:77:94:ea:2a:51:96:01:1e:
         56:1a:da:96:8c:df:c9:62:d8:98:bf:db:f4:53:fb:12:19:de:
         de:77:f2:1c:b5:5b:56:7b:9f:5f:f0:be:59:60:37:c6:b1:1d:
         4f:51:88:5a:34:f1:da:54:3e:bf:61:a8:b0:6a:ca:e1:f2:03:
         8f:e5:f0:f8:a8:5a:c2:0a:26:a4:a1:39:e7:ad:b9:f0:1f:1e:
         9c:bd:c2:2d:38:26:68:38:3d:e2:b7:8f:3a:fb:5c:3a:76:e4:
         7d:42:0a:25:71:d0:4c:dc:be:58:fd:c0:8f:d7:e3:4a:93:60:
         e5:33:d3:2e:ae:3c:be:a1:d3:d3:47:24:86:39:29:e7:ac:76:
         4f:21:51:2b:2f:1e:26:d1:6d:e7:ae:72:55:74:bb:93:ad:85:
         6b:38:44:e2:cc:72:57:94:68:0f:84:6d:85:f9:be:bf:a1:95:
         8e:02:11:16:2f:6d:01:5b:b1:a1:51:3e:24:8f:29:be:0e:65:
         e1:0e:c2:49:69:8a:e8:9e:98:5c:93:74:d9:24:24:ea:5e:1f:
         ef:a9:d1:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep7O/vVrmau34ZUDlFL4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj
NWZlYzIwHhcNMjYxMTE1MTAwMTM0WhcNMjYxMTE2MTAwMTM0WjAzMTEwLwYDVQQD
EyhjMGUzNTc0ZWUyNjFjMDFhODg2OGFiNWJkM2VkMzNhYWI3NGEwMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUPPhrOP9T+8oigpzSnfGgnK7xpD
NhPpdtFP2d2bQXDgwoKEXi1tgImwHw2DjEB6VPgHmYoy/Cn2FJC6Le4h8KVdt3hx
ihVkMKbJiF2u24UL0kDvu3lNZfZG3VsImC0szzx+7KsXsrvsb+/9Ar/z8eBcDql5
qovH6USjV8hKOy6yvcLqc1nSyEYdgwttAtonHeD3taueJ/dUeMP5UFsddh1glFJf
PAM+TnyEYNHO6cXiPDnfBlTzj46w0k3SnDY5Xt96uL1zJlO5eDYxQ3IALNfrjoWQ
fpNke9N7nCk09RTy1K8e83WSpaQzUuZnkQy5CZvw3AMUgIUi4w8FBPtm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDjV07iYcAaiGirW9PtM6q3SgNvMB8GA1UdIwQY
MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt
YTNhMTNlM2E3ZDgwLzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw
LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ05flLFM
Z8b4DwVO2CMDeyvBrmw/+zZxD+KViTiMBv1v9tRW9tpnj7GNE23jZXeU6ipRlgEe
VhralozfyWLYmL/b9FP7Ehne3nfyHLVbVnufX/C+WWA3xrEdT1GIWjTx2lQ+v2Go
sGrK4fIDj+Xw+KhawgompKE556258B8enL3CLTgmaDg94rePOvtcOnbkfUIKJXHQ
TNy+WP3Aj9fjSpNg5TPTLq48vqHT00ckhjkp56x2TyFRKy8eJtFt565yVXS7k62F
azhE4sxyV5RoD4Rthfm+v6GVjgIRFi9tAVuxoVE+JI8pvg5l4Q7CSWmK6J6YXJN0
2SQk6l4f76nRLg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:25:38 2026 by rpki-client