Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File:                     etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier:          Btf6OnceBX35Vu0WMDoMfiLW8GEMWhWIBOQlDXekc7o=
Subject key identifier:   F0:8D:C4:7A:F4:3F:9F:26:38:79:BE:70:36:B6:D7:93:F3:BE:37:B0
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer:       /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial:       01A1DCB8BD2CCCCDABA048B8F46535087B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number:          090B
Signing time:             Sun 15 Nov 2026 01:00:56 +0000
Manifest this update:     Sun 15 Nov 2026 01:00:56 +0000
Manifest next update:     Mon 16 Nov 2026 01:00:56 +0000
Files and hashes:         1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
                          2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: uI56rj3egVBqX0fu2BSTkgvq31lDnewY5f2/4ZrNVcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:b8:bd:2c:cc:cd:ab:a0:48:b8:f4:65:35:08:7b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
        Validity
            Not Before: Nov 15 01:00:56 2026 GMT
            Not After : Nov 16 01:00:56 2026 GMT
        Subject: CN=f08dc47af43f9f263879be7036b6d793f3be37b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:c1:4b:5e:71:c4:c9:f2:c7:2f:14:bb:77:
                    af:53:a0:6f:06:00:a4:99:09:b7:c8:16:19:a0:15:
                    de:fc:66:6b:ad:8b:32:d3:ce:e3:4d:98:63:4c:2a:
                    5e:28:bd:b4:32:ff:e9:2d:9e:b5:65:99:9e:b3:2f:
                    b5:c6:87:7a:f4:c8:8d:ca:ab:3e:0f:f3:fe:a8:be:
                    34:85:96:6c:3a:4a:e2:36:96:42:c1:56:cf:79:0b:
                    68:e3:1c:c8:e2:90:e1:03:98:96:e7:eb:d2:73:d1:
                    89:7e:0b:9b:38:6c:de:49:cb:4e:8e:c4:29:e9:82:
                    64:e6:c0:73:62:b7:c6:15:b7:94:f7:0a:73:fe:e1:
                    f6:6d:3d:90:ee:d4:5d:30:8c:3a:93:02:46:14:69:
                    b7:12:d2:84:0d:cf:94:c3:58:28:83:6f:a6:9e:7f:
                    4e:69:b8:13:05:56:85:69:05:32:d9:a6:50:7c:5c:
                    a4:61:a2:34:43:8c:0f:c4:ad:b4:f1:51:d9:87:4d:
                    42:5b:b8:11:0b:6e:5f:cc:52:5e:78:0d:f3:c4:05:
                    b0:d4:45:92:a9:34:98:fc:8c:60:7e:0a:3f:c7:42:
                    22:17:63:31:90:71:b0:ef:64:3c:87:8a:b1:42:b4:
                    7a:8f:a6:b1:70:bc:ce:a9:95:b7:70:ed:14:e0:67:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:C4:7A:F4:3F:9F:26:38:79:BE:70:36:B6:D7:93:F3:BE:37:B0
            X509v3 Authority Key Identifier:
                keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:6f:e6:2f:0f:d8:2f:74:ef:a7:bb:30:81:2a:e6:d6:b1:
         62:81:73:fe:2e:9a:e6:24:c9:77:76:4d:b8:3b:04:0c:5e:f2:
         d1:65:e6:e4:5f:71:7b:cd:27:6a:ff:66:05:18:d8:a5:60:32:
         83:e3:51:62:17:4f:59:54:92:95:6d:7c:70:1c:8e:3c:31:e0:
         50:f2:fd:1d:a1:64:99:71:25:4f:40:51:b4:03:ab:58:2d:8f:
         d2:10:d2:32:a3:95:f3:95:3e:e3:38:50:de:c8:be:b5:a4:c4:
         78:5d:6a:3d:68:61:8d:89:8c:c8:99:5a:89:f3:2d:bd:87:1b:
         de:c9:96:ac:49:fb:fe:bc:00:08:57:1b:53:c5:e1:cf:9d:39:
         fe:b3:c5:53:b4:5e:ff:a2:d5:0a:3f:d4:db:aa:37:5f:1e:c5:
         e2:b4:1c:b0:80:c4:01:d9:db:5b:46:9d:23:33:f2:03:fd:66:
         f6:0e:87:7c:3f:5c:a9:97:72:b6:62:42:b7:1d:79:04:88:c0:
         d0:d7:0a:c4:2a:6e:bb:5b:3e:3b:79:f3:5b:c4:ba:98:6a:df:
         65:39:1b:4c:b0:35:ce:03:8c:37:fb:52:23:64:7e:e7:ea:f2:
         90:da:ee:eb:1a:39:8c:56:b8:1f:b2:9f:fd:a7:b3:76:71:97:
         76:1d:7f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuL0szM2roEi49GU1CHuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZDA3Y2RlNjc4MmZkNGZjNTY4ODU3ZTg0ODQ2NTViNTAy
NDg3MTAwHhcNMjYxMTE1MDEwMDU2WhcNMjYxMTE2MDEwMDU2WjAzMTEwLwYDVQQD
EyhmMDhkYzQ3YWY0M2Y5ZjI2Mzg3OWJlNzAzNmI2ZDc5M2YzYmUzN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDzBS15xxMnyxy8Uu3evU6BvBgCk
mQm3yBYZoBXe/GZrrYsy087jTZhjTCpeKL20Mv/pLZ61ZZmesy+1xod69MiNyqs+
D/P+qL40hZZsOkriNpZCwVbPeQto4xzI4pDhA5iW5+vSc9GJfgubOGzeSctOjsQp
6YJk5sBzYrfGFbeU9wpz/uH2bT2Q7tRdMIw6kwJGFGm3EtKEDc+Uw1gog2+mnn9O
abgTBVaFaQUy2aZQfFykYaI0Q4wPxK208VHZh01CW7gRC25fzFJeeA3zxAWw1EWS
qTSY/Ixgfgo/x0IiF2MxkHGw72Q8h4qxQrR6j6axcLzOqZW3cO0U4GdWtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCNxHr0P58mOHm+cDa215PzvjewMB8GA1UdIwQY
MBaAFHrQfN5ngv1PxWiFfoSEZVtQJIcQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQt
MDVhMWQ1Y2I4ZWViLzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQtMDVhMWQ1Y2I4ZWVi
LzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqVv5i8P
2C9076e7MIEq5taxYoFz/i6a5iTJd3ZNuDsEDF7y0WXm5F9xe80nav9mBRjYpWAy
g+NRYhdPWVSSlW18cByOPDHgUPL9HaFkmXElT0BRtAOrWC2P0hDSMqOV85U+4zhQ
3si+taTEeF1qPWhhjYmMyJlaifMtvYcb3smWrEn7/rwACFcbU8Xhz505/rPFU7Re
/6LVCj/U26o3Xx7F4rQcsIDEAdnbW0adIzPyA/1m9g6HfD9cqZdytmJCtx15BIjA
0NcKxCpuu1s+O3nzW8S6mGrfZTkbTLA1zgOMN/tSI2R+5+rykNru6xo5jFa4H7Kf
/aezdnGXdh1/iA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:04:39 2026 by rpki-client