Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          7MfPtImgGHDoB0rjVhSKw1imStalCI4pj6Mq4jSeRw8=
Subject key identifier:   3D:8D:E2:AA:7E:BC:2A:E5:62:14:E0:6F:2E:6B:FD:1E:8E:EC:C0:64
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       01A1DD94A977D4CC2EAB05E87E8AAC16A5F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          10EE
Signing time:             Sun 15 Nov 2026 05:01:09 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:09 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:09 +0000
Files and hashes:         1: 6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa (hash: j4t4I6cY/9eHSVrCrZ3KgotxYKtqwlRdd6z9B4fKbI4=)
                          2: 8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa (hash: wwioWnWaBsWC9aXvqkrOolVE9wvD6iqSMIbgZIUy8Z0=)
                          3: M-CNQ4sKZCkmxmSMpP77FW0ZRzE.roa (hash: UdJnYqAMGHmI8rbxklRX18DI3O/ycqsbsTsYHZeAV1g=)
                          4: bPn6Pnrnq_fR0whtvig8NC0wE0s.roa (hash: h+p2mlfebNvV+IBAlzDzoCLea72ZuA/UCOZBu/ku9aE=)
                          5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: XEsU1lI2IQmQjsoN2blE3yRg2MB45MVsMKyxkz9xySo=)
                          6: ywfKrP4cRTy2QlVvbLFd6cmyt18.roa (hash: Gmr+SV2YTd76CuhRcbMnXPX7jhYpfpofEYm1FZomnvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:a9:77:d4:cc:2e:ab:05:e8:7e:8a:ac:16:a5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: Nov 15 05:01:09 2026 GMT
            Not After : Nov 16 05:01:09 2026 GMT
        Subject: CN=3d8de2aa7ebc2ae56214e06f2e6bfd1e8eecc064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:5a:dc:b1:a5:35:aa:7c:8b:35:6b:97:63:
                    69:22:a8:c2:1f:57:a2:dc:4c:69:fb:fc:e4:6f:2f:
                    69:6a:c1:14:00:8e:fd:09:57:b8:bf:fb:f9:93:6b:
                    a3:4a:81:19:02:04:06:37:74:8b:d4:4d:44:b6:68:
                    ee:ca:d2:ed:8f:20:63:d3:e0:2c:55:ba:1b:99:2b:
                    3c:2b:7e:1e:17:e8:c5:dd:15:88:72:f4:da:ab:cf:
                    fe:57:32:b7:82:c4:80:7a:80:e9:10:51:3d:1a:25:
                    9a:6c:cf:18:da:c5:16:55:a2:2b:29:8f:f1:97:e5:
                    78:1c:4a:01:a5:2e:59:e2:34:41:3d:93:7a:e4:2a:
                    4a:8b:f6:c5:8a:b8:3a:eb:77:68:12:f5:08:f2:41:
                    91:10:1d:bd:e9:45:33:3f:f2:44:90:de:3b:58:0f:
                    88:8a:ab:2e:f5:e4:73:4f:c9:bb:f5:b7:f6:44:32:
                    ae:ec:ac:53:e0:fd:d7:74:9d:34:c8:f8:e5:79:a1:
                    07:36:e8:22:f9:23:bf:a3:9c:dc:c2:a9:61:2f:29:
                    12:65:59:40:6f:b2:aa:9c:61:98:56:b9:dc:90:c4:
                    8b:48:4a:1a:a5:bd:22:c8:3f:c7:ba:27:68:14:0d:
                    47:bb:31:9b:4d:94:5d:e0:05:c0:68:82:34:de:a4:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8D:E2:AA:7E:BC:2A:E5:62:14:E0:6F:2E:6B:FD:1E:8E:EC:C0:64
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:16:ee:49:d7:1f:37:a5:81:d0:50:52:a0:12:e8:d8:89:
         29:af:81:d6:0f:8c:67:a3:ce:1c:96:34:3b:84:34:7f:17:ec:
         eb:ae:1f:d0:12:44:f1:09:d4:1c:89:af:55:90:53:a6:50:62:
         a0:7f:35:4e:a2:bb:cf:7f:db:ac:9c:75:09:5b:0f:0b:58:0d:
         1a:df:da:ee:b6:7f:1a:22:73:d5:14:cf:a7:fe:e2:44:a6:60:
         7c:ae:6b:28:e7:19:c3:ca:b5:f1:ca:2c:cb:bc:94:b0:5e:0b:
         3a:1f:10:7a:b3:ed:b8:92:f5:67:df:b2:12:e9:e9:13:73:31:
         86:6c:dd:92:74:1c:64:e1:ed:c5:19:0c:21:8b:43:07:49:60:
         fb:a5:38:59:b8:f5:5c:97:0a:6d:97:13:c4:4f:94:c8:d0:65:
         9b:68:3b:11:91:6c:a3:7e:43:22:2c:05:10:7a:74:dc:14:68:
         60:ea:b9:5e:ea:8e:fe:fa:96:a3:77:dc:88:7b:0e:29:93:22:
         fc:48:48:70:4b:62:69:fc:37:a4:34:ad:28:b2:62:65:35:f8:
         52:57:bd:a3:14:6a:f6:6a:4e:1b:c2:38:a7:59:3f:8d:c6:f6:
         15:31:a6:b2:da:e3:44:8f:10:80:bb:21:6c:61:dd:e9:1c:ba:
         d8:b9:e1:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlKl31MwuqwXofoqsFqXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjYxMTE1MDUwMTA5WhcNMjYxMTE2MDUwMTA5WjAzMTEwLwYDVQQD
EygzZDhkZTJhYTdlYmMyYWU1NjIxNGUwNmYyZTZiZmQxZThlZWNjMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ta3LGlNap8izVrl2NpIqjCH1ei
3Exp+/zkby9pasEUAI79CVe4v/v5k2ujSoEZAgQGN3SL1E1EtmjuytLtjyBj0+As
VbobmSs8K34eF+jF3RWIcvTaq8/+VzK3gsSAeoDpEFE9GiWabM8Y2sUWVaIrKY/x
l+V4HEoBpS5Z4jRBPZN65CpKi/bFirg663doEvUI8kGREB296UUzP/JEkN47WA+I
iqsu9eRzT8m79bf2RDKu7KxT4P3XdJ00yPjleaEHNugi+SO/o5zcwqlhLykSZVlA
b7KqnGGYVrnckMSLSEoapb0iyD/HuidoFA1HuzGbTZRd4AXAaII03qTQzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2N4qp+vCrlYhTgby5r/R6O7MBkMB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATW4W7knX
HzelgdBQUqAS6NiJKa+B1g+MZ6POHJY0O4Q0fxfs664f0BJE8QnUHImvVZBTplBi
oH81TqK7z3/brJx1CVsPC1gNGt/a7rZ/GiJz1RTPp/7iRKZgfK5rKOcZw8q18cos
y7yUsF4LOh8QerPtuJL1Z9+yEunpE3MxhmzdknQcZOHtxRkMIYtDB0lg+6U4Wbj1
XJcKbZcTxE+UyNBlm2g7EZFso35DIiwFEHp03BRoYOq5XuqO/vqWo3fciHsOKZMi
/EhIcEtiafw3pDStKLJiZTX4Ule9oxRq9mpOG8I4p1k/jcb2FTGmstrjRI8QgLsh
bGHd6Ry62LnhGg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:59 2026 by rpki-client