Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
File:                     3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft (raw, json)
Hash identifier:          GuVRbCC4dLaXcdrpnCX+rqDXH3GTV4j/q/YZGA+Hoto=
Subject key identifier:   E5:70:82:12:F0:8B:D8:5E:11:01:F2:86:A8:4B:4F:6F:42:E1:AF:F9
Authority key identifier: DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
Certificate issuer:       /CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Certificate serial:       01A1DDCBE0F700B9BE88FB1C84FA60409212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
Manifest number:          0219
Signing time:             Sun 15 Nov 2026 06:01:28 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:28 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:28 +0000
Files and hashes:         1: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl (hash: TiexShwfykGHCwepmG1JmwwkkZN7oEUnhFFQNW3bdqs=)
                          2: kwUfzWwrFQVASQO2F6UsVOxQr_k.roa (hash: B400R5yaG15mVyOg0wtFtZ9v1gBpdtwEZj5wGIDnL98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:e0:f7:00:b9:be:88:fb:1c:84:fa:60:40:92:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
        Validity
            Not Before: Nov 15 06:01:28 2026 GMT
            Not After : Nov 16 06:01:28 2026 GMT
        Subject: CN=e5708212f08bd85e1101f286a84b4f6f42e1aff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:47:b2:43:b5:18:04:29:07:b6:35:ce:a7:
                    ed:e8:7d:4b:4b:cc:43:f1:d7:52:a8:4f:ea:1b:8c:
                    e7:f3:c3:32:30:c5:c3:4e:79:52:52:41:fe:b9:5f:
                    b5:eb:68:c6:0d:d1:25:6b:e5:af:e4:62:4b:84:7e:
                    ce:dc:5d:69:f6:e6:44:92:b1:f1:76:59:30:8b:ea:
                    ed:73:a9:bd:52:23:65:3d:a0:82:93:44:26:3d:c2:
                    cf:c6:82:8a:73:30:1c:7a:af:04:01:47:8e:45:b2:
                    ac:37:5e:ce:88:a7:b1:ab:80:2c:29:0a:06:a1:9d:
                    7b:02:3f:fe:1e:31:09:fd:fb:07:c4:41:e3:4b:7d:
                    a7:60:f9:14:4c:fc:55:49:e2:ae:6b:66:4f:ad:65:
                    9a:1e:7b:04:9f:14:cd:67:0f:0a:02:d8:20:4a:31:
                    f4:0f:af:4b:5f:35:74:39:e7:37:6d:31:6b:6d:de:
                    95:d0:16:68:a1:0b:6f:14:82:4e:42:35:94:88:9a:
                    fa:f2:73:d7:c2:ca:76:93:c3:0e:6c:49:fe:50:37:
                    6b:e7:db:28:73:9e:55:87:69:0a:a2:e2:ba:29:c9:
                    08:30:d2:a9:95:90:96:7c:1a:ab:a9:af:fe:8d:b4:
                    36:01:a3:37:42:6b:d6:44:0c:2b:bd:0a:14:39:05:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:82:12:F0:8B:D8:5E:11:01:F2:86:A8:4B:4F:6F:42:E1:AF:F9
            X509v3 Authority Key Identifier:
                keyid:DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:db:83:b5:c7:17:fc:83:85:7b:12:6e:f6:2e:ab:0e:eb:75:
         c2:17:46:14:99:5e:08:e3:d9:a0:7d:1e:23:cf:4f:44:e3:6e:
         0f:f8:c8:80:f8:f9:b0:5f:04:fb:28:e0:0f:55:3f:bb:54:99:
         80:ef:07:a4:fb:3f:b3:e8:23:ee:3a:3a:db:a1:01:b4:d8:45:
         5f:21:94:4a:23:89:bd:76:b4:fa:24:98:a4:70:3c:a2:e6:a4:
         86:1f:42:35:2d:3e:d0:cb:3b:3f:46:f9:96:53:c1:c6:11:5c:
         c6:e7:59:a5:79:5b:14:b2:9c:19:de:28:7e:bf:68:13:d3:82:
         5e:2a:ba:64:fa:71:29:c9:47:82:9a:db:93:1d:05:01:1a:b5:
         36:cd:d6:29:53:e8:fb:58:df:33:55:21:b7:f4:5f:13:49:46:
         2e:85:8d:59:0a:30:ad:e8:00:26:73:be:e7:e2:e7:ef:9f:fb:
         d8:61:bd:31:40:75:8c:f4:90:47:4e:a0:d0:f0:26:41:14:31:
         76:78:c7:21:9f:f4:59:87:90:49:e3:34:8b:13:38:44:2e:9e:
         ea:8c:b9:38:2d:e7:36:d8:d5:b2:39:14:54:56:91:f9:50:77:
         66:51:a8:2d:66:85:b4:03:8d:8b:1d:ad:da:c3:87:5c:c2:79:
         a4:04:4f:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdy+D3ALm+iPschPpgQJISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDVhMTIyNGVkY2YxMjcwZWYxYjgwNjA5ODVhYTg3ZDE5
MWFiYTkwHhcNMjYxMTE1MDYwMTI4WhcNMjYxMTE2MDYwMTI4WjAzMTEwLwYDVQQD
EyhlNTcwODIxMmYwOGJkODVlMTEwMWYyODZhODRiNGY2ZjQyZTFhZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nJHskO1GAQpB7Y1zqft6H1LS8xD
8ddSqE/qG4zn88MyMMXDTnlSUkH+uV+162jGDdEla+Wv5GJLhH7O3F1p9uZEkrHx
dlkwi+rtc6m9UiNlPaCCk0QmPcLPxoKKczAceq8EAUeORbKsN17OiKexq4AsKQoG
oZ17Aj/+HjEJ/fsHxEHjS32nYPkUTPxVSeKua2ZPrWWaHnsEnxTNZw8KAtggSjH0
D69LXzV0Oec3bTFrbd6V0BZooQtvFIJOQjWUiJr68nPXwsp2k8MObEn+UDdr59so
c55Vh2kKouK6KckIMNKplZCWfBqrqa/+jbQ2AaM3QmvWRAwrvQoUOQW3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVwghLwi9heEQHyhqhLT29C4a/5MB8GA1UdIwQY
MBaAFN7VoSJO3PEnDvG4BgmFqofRkaupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RXaElrN2M4U2NPOGJnR0NZV3FoOUdScTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NTk0ZGYtMGI1YS00NjQwLTg2YWQt
YWVkZWQ5MDRkY2E1LzEvM3RXaElrN2M4U2NPOGJnR0NZV3FoOUdScTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82NTk0ZGYtMGI1YS00NjQwLTg2YWQtYWVkZWQ5MDRkY2E1
LzEvM3RXaElrN2M4U2NPOGJnR0NZV3FoOUdScTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaduDtccX
/IOFexJu9i6rDut1whdGFJleCOPZoH0eI89PRONuD/jIgPj5sF8E+yjgD1U/u1SZ
gO8HpPs/s+gj7jo626EBtNhFXyGUSiOJvXa0+iSYpHA8ouakhh9CNS0+0Ms7P0b5
llPBxhFcxudZpXlbFLKcGd4ofr9oE9OCXiq6ZPpxKclHgprbkx0FARq1Ns3WKVPo
+1jfM1Uht/RfE0lGLoWNWQowregAJnO+5+Ln75/72GG9MUB1jPSQR06g0PAmQRQx
dnjHIZ/0WYeQSeM0ixM4RC6e6oy5OC3nNtjVsjkUVFaR+VB3ZlGoLWaFtAONix2t
2sOHXMJ5pARPag==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:17:00 2026 by rpki-client