Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File:                     5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier:          Y+Dman+AJgTu4SQt+u/MbOeBM2leGQeN/+FY79dQcJ4=
Subject key identifier:   0E:9C:91:63:1C:6E:2A:80:8A:6A:39:3B:3F:02:AE:F0:B0:4B:E0:32
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer:       /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial:       01A1DF150A77B2537B9007AD38ECE800E0D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number:          1B27
Signing time:             Sun 15 Nov 2026 12:01:00 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:00 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:00 +0000
Files and hashes:         1: 1MlSIVekR7nJOhytdlMR4jKtR-0.roa (hash: Fp4zpsgtHGLmZbR0hKTXyDrZzEqlceg8ruA+2JYmVfM=)
                          2: 1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa (hash: yCVw68UmAC47CHqpmFupYHC9ZxaKhStlflix7eTg3Ug=)
                          3: 1utoEShH5AmTt79y1zx-Gta_IU4.roa (hash: ORpna8ZAvXV8ys2iYurxCqgk2LCtS/yxIeHlBJ5A+tA=)
                          4: 1y7xTrL6Zi63EaoYq9pgRa2ZmlQ.roa (hash: x6v+XwxnZ+9V385BiBIu0MPWBYFFND0ofcUwqGHURxo=)
                          5: 3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa (hash: 7NA9a/ZKJFAsJurJjGE4qQlN7WKcef8AvmYKofmxtdA=)
                          6: 3wThh6CKhn_ncQErP2xOaMw46vM.roa (hash: U/vQzD8zfdM0QCfGbqv0YkKIdI6EBacCC74VpNhb6LI=)
                          7: 4krczbw6OIfHLsE4rx_N8Co4yOw.roa (hash: zxKlKv1GZqpmDDrZvXoufwn7GqO5TPnVqQ8ZVbSEX/k=)
                          8: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: cvzNx9AEo0e3H3vMA6dbwGK3XjTGG6L2eYtMIIMnr4I=)
                          9: ADSCFOnjMJLAi_8BKddA7FSJKFo.roa (hash: YTUiHXsQfmeuHGdgWhbD4DOLIxz6/HL1IPSKvOV9r04=)
                          10: CI_IbIiOr7bX2nxFp9oik4WuQKw.roa (hash: LoeO3X2rVxLRDsyO+eMBMVv3AZSWcHWTpYLzyG6GgFI=)
                          11: EZHW40mMXzLh-R95XQXWSQ1xGew.roa (hash: jXC+C5PX+oNmQCB4dM1aptKPPNjJmtw5ieXSimbQjw4=)
                          12: F1wz9gMaUrDGSj5_Bql1AKzFVxU.roa (hash: q6zbBfs586JaMimNp5Bcw/8qOnIIxp8Jrco5OLAUgAE=)
                          13: GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa (hash: 7TO2wIfe9IgC+RH76SDWjU1AztJO8iq77EyqtjbsQmw=)
                          14: GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa (hash: 0LE/1Wb9HCROg7521ihQ2bGsxl+ElnIJTcDjDH1Uxqs=)
                          15: H_ZbE32xD4Jhfd7d_Lm5fnPovzM.roa (hash: aZ9uNmSOhcQkLqZFW9owTasfsuaMVCH5Cmg+PDELd3k=)
                          16: Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa (hash: Oprieq0BOhCbckP7sqbHtzOf/Mysy62W8N4pVZm/UiU=)
                          17: JkmCJQaQoD31a9G80M07RYcqWDc.roa (hash: X8PYnSV1Z/bxPAeWp4ISqBsTtAcgEKcf3dQRI9yc2BI=)
                          18: K6IhTrUZclyMeBVpYLNDvb8TUbg.roa (hash: 72NmOOFBeGJuzIR1SE1cUuWu7D88rU3xoreFGRYXduw=)
                          19: KS0FVLSMGfWzQdYtQuL8y-oJdD0.roa (hash: bFjxw1lHEJZaqaMp+L6ugQRb5WaLfdFW4jxueW8cRcA=)
                          20: PMREMuAIkutRBjiqDqASxjeYw9A.roa (hash: DQwEv2T49rS4AdXgNlBrZxtMU/AO7NKgBezim3eUTbA=)
                          21: Qfk4KZDN_NVec0Fh5jidYk7fEsM.roa (hash: WIiLwWhQcJYVRWRpVwBUqqxiCRvroZi4xvJ2AYsOSJo=)
                          22: QqOV1t_rvWgp7d8XnXyjaPwjar8.roa (hash: tOqX3TdeefdEULHlf/6xKuTSxXbTQGcNvDfPoledb9E=)
                          23: UESPvkGn40lC_qnNZUih916lSYA.roa (hash: wn/Z//Pr0RHYOOOY6bI6NqL/aVXg8hzJxv1NUOW+0pY=)
                          24: WQgnD-JktijZnRhzkWWmxreQGms.roa (hash: bt7fHkMyPJ2bu7raN/9QpGM2Pefyuc7nqym8N0GRFqM=)
                          25: XnhnoeUHsuoR4mhcctsEjt9lvMg.roa (hash: /V0gM4qnoLR414oEzXK8LbL+H5gHt5BmuPHE3nwesY8=)
                          26: a6YPy8t2smPnddF-vAybhOouYkI.roa (hash: 2VTnHbp49NXPzMqgsIFYWCQ+9Ms6/ReLgmJTyeo9QTM=)
                          27: bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa (hash: FZlvu/V5G6Rj6/p4659ddbcuZLsyU/qT6XCVQg1Pc8U=)
                          28: bv5xG98RESJXrwU1xeck7PUBsio.roa (hash: 8309DITknQ+X1sMxvcKqt7keYSOvkVj+qcP2H19wns8=)
                          29: cWC-89CZxEOg7JihRqIYLNl3BdM.roa (hash: RhOP1Hck0E/C3tHN4Cpm5lDskts0RUG2y3go+ErpaZY=)
                          30: gC3rqU1DQllcWWxpBdLFhPfJBRY.roa (hash: GquGRvoP/5ANJWdn0l9uPSHphibPvx3UXVQbIIbaOLU=)
                          31: gzIiWHGRR93M4EeKSxyFElEnzfQ.roa (hash: P6od455G5jZ5lUgI4sqFMNPmAnYBu1OSIcRyPwUOGuY=)
                          32: lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa (hash: gEI4FyTD9TDkg7+cDFUctYOLiTWfZ9Ph9u6WJ4ZseHE=)
                          33: pJSN_0UYP55mnYa8i9az-116_xU.roa (hash: ooW2IQf7TB4yeIzuJ+xNye0+a25s9T8MsooWPksXqB0=)
                          34: r_8AqLDA0TKw-_hS4D2cAROProQ.roa (hash: em2qIv+1gRgI1PfQzZQhQrikSZsQfh7/5J5HzcXSfpU=)
                          35: sPKozshk0dw84yWnLecAcY4Jsz0.roa (hash: CVBUXh81vA8yv2uJ0Pq3RtuahHuKnl7ugAr2hYXTx7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:0a:77:b2:53:7b:90:07:ad:38:ec:e8:00:e0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
        Validity
            Not Before: Nov 15 12:01:00 2026 GMT
            Not After : Nov 16 12:01:00 2026 GMT
        Subject: CN=0e9c91631c6e2a808a6a393b3f02aef0b04be032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:2b:a6:d2:e1:5b:58:57:d4:ff:03:c2:21:
                    d9:8d:4f:6b:94:e0:09:88:37:54:e2:ec:76:27:ba:
                    e1:82:b9:2a:d2:28:33:16:8b:1b:2e:c7:9b:ac:d9:
                    ad:56:ec:77:55:5d:ce:3a:ff:6c:96:6b:73:d6:e1:
                    72:6b:34:b4:51:5c:69:5e:ee:52:ef:37:b5:b6:43:
                    52:88:51:c9:31:2b:d4:51:a2:7b:d9:08:65:f3:4a:
                    ca:b9:ca:8d:e6:22:3e:31:43:09:52:39:15:46:2d:
                    65:04:58:fb:c2:a2:e2:59:45:b0:0b:ea:90:79:a3:
                    2b:e4:89:f9:f4:20:4e:6b:22:9c:9b:55:76:18:71:
                    74:c6:bb:4d:0e:74:f8:3c:f1:e8:11:70:c9:ec:a5:
                    1a:d2:57:1b:24:87:9c:a3:fc:02:b6:a3:2a:52:c9:
                    c6:75:d0:e7:73:a2:2f:1e:bc:8a:f2:35:2d:58:90:
                    56:05:48:b3:39:34:4e:f7:db:fb:25:92:08:4e:6d:
                    1f:86:02:7e:68:ef:54:54:65:d1:52:93:0e:70:07:
                    52:02:ed:69:c2:90:7b:33:6d:52:3a:56:b7:5f:07:
                    80:28:35:58:2b:cc:84:73:f8:02:e8:a8:37:75:8e:
                    2f:ed:b6:5c:10:2f:22:ce:79:dc:84:c5:a0:6a:e5:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:91:63:1C:6E:2A:80:8A:6A:39:3B:3F:02:AE:F0:B0:4B:E0:32
            X509v3 Authority Key Identifier:
                keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:92:22:6e:22:b1:ee:0e:60:67:a4:d6:dd:6a:05:6d:4a:
         37:78:c0:66:b9:59:79:40:48:40:b3:d6:99:27:5d:e1:f0:37:
         8e:0c:00:6c:9b:be:36:4d:47:aa:5d:aa:fa:47:0e:20:0f:dc:
         87:24:48:f1:41:b2:f6:71:87:6a:9d:c0:6e:3b:c8:51:f5:55:
         5b:2e:6b:13:c7:93:05:80:fc:f2:e7:b1:32:a8:9d:3a:1e:99:
         52:a6:90:47:ff:79:99:44:b4:48:f9:fa:c2:3c:a8:f4:16:db:
         54:8c:9c:af:8d:51:3a:f7:26:7e:a9:f2:f4:02:33:f9:46:5e:
         33:76:85:88:30:3e:77:b9:a9:93:73:56:e3:d8:b9:97:0c:56:
         23:f1:81:c0:8a:98:a6:78:7a:5b:ac:82:9f:f9:81:4d:9e:8a:
         54:a6:92:17:23:d1:35:22:55:03:80:10:da:e5:a1:39:d6:46:
         89:1e:d7:fd:c5:ea:08:21:56:92:7a:16:3f:70:15:c8:f7:a8:
         d1:3f:94:15:a8:19:78:0a:6e:95:cd:fe:4a:a2:84:c5:6e:4e:
         48:7b:6f:08:41:cd:0c:fa:5b:e8:21:87:43:73:f2:b4:a4:6a:
         2b:e0:d4:f7:39:c6:b3:1e:23:0b:ae:db:23:a8:15:66:81:39:
         0b:d2:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:11:15 2026 by rpki-client