Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          XbqQAGHSSl85MBTZsa64zpuDTk5JvxcWnoE7KUsn760=
Subject key identifier:   7E:61:48:30:92:C1:65:7A:2F:FD:00:73:28:BE:D9:6E:0A:79:25:FA
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       01A1CD45E77F62E187273F403A8CA1805F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          1566
Signing time:             Thu 12 Nov 2026 01:01:12 +0000
Manifest this update:     Thu 12 Nov 2026 01:01:12 +0000
Manifest next update:     Fri 13 Nov 2026 01:01:12 +0000
Files and hashes:         1: 3x-unvmrEfBfjV8Mubak6dKsvJU.roa (hash: 2TZTJpzHyfxjizKxz/S+PSGgBrloUjJ36Fw9OyPopiU=)
                          2: 44Stl3msveF1YCvCfN2G3HepMdM.roa (hash: iIzD2FPw/U9HcxD97jOSbgMNqhLuJ3ohKRTz9ioUa1s=)
                          3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: EMND8mYlYJsZJ+5VkM3hrGFuHYtOCLOKe6d88jGdTtw=)
                          4: LgfZj6Djxc6AiqgBZPYClS3Fqlc.roa (hash: E155P9uzJ9p4wxJjD3C11grXmJUR4s5LkvgqbItNoB4=)
                          5: SfTtIE9WtwhO0pxou6989y4Xuxg.roa (hash: z2LY0Dz9Qwx7F3BYeLEQwMBsQlGd93XHqT/f8D9G5Vk=)
                          6: oOxUVzAK0hDvaSyyxd4ItdCNzlk.roa (hash: z2hGxtDc3xsCMxUAYZ0wzFuiPIpWeNKitXxT4Qhak2E=)
                          7: r2dMo2_D-Dbh-yqi6VAZ1meJk-s.roa (hash: ICU0J+ujal+UqVKVSbOsudUv0G3UkLSD3WQWpN8VVhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Nov 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:cd:45:e7:7f:62:e1:87:27:3f:40:3a:8c:a1:80:5f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: Nov 12 01:01:12 2026 GMT
            Not After : Nov 13 01:01:12 2026 GMT
        Subject: CN=7e61483092c1657a2ffd007328bed96e0a7925fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:85:34:73:56:0e:89:9c:48:50:22:91:9e:
                    e8:c6:70:c4:1c:b1:49:36:f4:05:42:fe:bb:0a:60:
                    8f:53:61:1c:3e:1d:f3:b3:60:79:a2:f6:cb:98:9f:
                    86:b3:89:f0:c0:ff:59:d6:5e:84:a9:54:2b:38:21:
                    53:f3:7d:78:65:ff:9e:63:33:4f:e5:47:d6:06:e0:
                    74:4a:4f:8a:ff:f3:29:b4:d1:d2:90:32:ce:18:a2:
                    4e:c7:95:6e:57:f0:c5:07:18:b7:75:bb:e0:34:b2:
                    c0:32:d9:d6:a9:3a:c0:f5:fd:b0:d7:f6:74:07:1e:
                    63:36:2a:5c:48:7d:8f:d9:b9:65:13:eb:91:da:ed:
                    75:21:a3:ae:4d:a4:cc:d8:87:d3:4e:80:29:31:00:
                    b5:22:ee:6c:cf:cd:8d:dc:9e:60:04:79:70:92:56:
                    0c:e1:b5:49:f1:66:cb:e2:d6:23:c4:ce:4c:eb:22:
                    6c:61:41:4d:6d:4e:d6:b8:bd:92:1f:6b:ba:8a:78:
                    49:fd:bc:f3:66:c1:18:ce:ee:db:a0:fc:57:a7:6a:
                    dc:3c:23:b7:74:a1:ba:c3:e8:4f:1c:26:1e:87:89:
                    01:74:ec:6a:d1:ac:88:6f:0d:30:7a:b7:05:21:2a:
                    b5:0b:44:53:ef:70:65:08:0f:a8:72:c0:87:ce:53:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:61:48:30:92:C1:65:7A:2F:FD:00:73:28:BE:D9:6E:0A:79:25:FA
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:da:49:58:81:5c:2e:47:2c:e3:61:a3:95:c1:2a:75:e9:27:
         99:db:cb:13:d7:16:c3:27:67:b4:f6:bd:51:f1:a6:5f:bf:6b:
         ee:05:a6:d8:8b:9a:59:21:54:99:69:8d:09:20:7f:49:ab:8c:
         ef:18:d2:c4:6a:b7:0c:2f:c4:8c:6b:a6:e7:cd:4d:75:31:bc:
         8f:ca:01:8c:19:ee:71:a5:34:c4:d6:33:ce:18:97:6d:7f:53:
         94:70:dc:a2:44:a7:e3:de:68:74:f9:6f:fb:db:c0:c3:93:73:
         22:76:28:12:89:ff:df:d7:7f:8b:5f:df:e1:9d:98:38:c6:f1:
         08:27:c9:83:7e:3d:4b:a2:67:14:07:a9:16:63:a6:70:53:f1:
         06:2a:53:23:6e:7f:ce:24:c0:3d:69:7e:75:e3:38:0b:2f:dd:
         61:ee:28:46:52:1d:26:02:54:ed:9f:cc:ae:94:f7:0c:11:30:
         8a:cb:60:de:b5:b2:de:b9:1c:92:76:74:5f:a0:83:07:42:f7:
         a8:f4:0f:64:70:59:cc:83:d8:3d:ab:94:e3:03:ac:1a:46:85:
         6b:84:3a:45:8a:18:ca:c0:05:dd:5a:91:9f:f4:7d:a8:43:82:
         5b:d7:47:41:10:d6:7f:32:7a:b3:74:9b:19:49:bc:e8:33:0f:
         cc:48:8d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHNRed/YuGHJz9AOoyhgF+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh
YTg1MjIwHhcNMjYxMTEyMDEwMTEyWhcNMjYxMTEzMDEwMTEyWjAzMTEwLwYDVQQD
Eyg3ZTYxNDgzMDkyYzE2NTdhMmZmZDAwNzMyOGJlZDk2ZTBhNzkyNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKuFNHNWDomcSFAikZ7oxnDEHLFJ
NvQFQv67CmCPU2EcPh3zs2B5ovbLmJ+Gs4nwwP9Z1l6EqVQrOCFT8314Zf+eYzNP
5UfWBuB0Sk+K//MptNHSkDLOGKJOx5VuV/DFBxi3dbvgNLLAMtnWqTrA9f2w1/Z0
Bx5jNipcSH2P2bllE+uR2u11IaOuTaTM2IfTToApMQC1Iu5sz82N3J5gBHlwklYM
4bVJ8WbL4tYjxM5M6yJsYUFNbU7WuL2SH2u6inhJ/bzzZsEYzu7boPxXp2rcPCO3
dKG6w+hPHCYeh4kBdOxq0ayIbw0wercFISq1C0RT73BlCA+ocsCHzlN8owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5hSDCSwWV6L/0Acyi+2W4KeSX6MB8GA1UdIwQY
MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt
NzBhMWFmNTFkZmJlLzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl
LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINpJWIFc
Lkcs42GjlcEqdeknmdvLE9cWwydntPa9UfGmX79r7gWm2IuaWSFUmWmNCSB/SauM
7xjSxGq3DC/EjGum581NdTG8j8oBjBnucaU0xNYzzhiXbX9TlHDcokSn495odPlv
+9vAw5NzInYoEon/39d/i1/f4Z2YOMbxCCfJg349S6JnFAepFmOmcFPxBipTI25/
ziTAPWl+deM4Cy/dYe4oRlIdJgJU7Z/MrpT3DBEwistg3rWy3rkcknZ0X6CDB0L3
qPQPZHBZzIPYPauU4wOsGkaFa4Q6RYoYysAF3VqRn/R9qEOCW9dHQRDWfzJ6s3Sb
GUm86DMPzEiNOA==
-----END CERTIFICATE-----
Generated at Thu Nov 12 05:46:58 2026 by rpki-client