Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File:                     00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier:          rTin3RtNy7+NC2uI4xI7Si0ge2HFhul5+BWr9PoDYVc=
Subject key identifier:   AB:49:FA:E3:B4:AD:EE:FD:AC:1A:6F:FD:93:7A:19:18:5B:3E:C8:6B
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer:       /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial:       01A1DA946FD3E897184DDC3667A1210DE2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number:          069E
Signing time:             Sat 14 Nov 2026 15:02:03 +0000
Manifest this update:     Sat 14 Nov 2026 15:02:03 +0000
Manifest next update:     Sun 15 Nov 2026 15:02:03 +0000
Files and hashes:         1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: R3x7d//kqo/qmRfVqiKLlcM8SscrV8fpH/NacWVs1Zs=)
                          2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 15:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:94:6f:d3:e8:97:18:4d:dc:36:67:a1:21:0d:e2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
        Validity
            Not Before: Nov 14 15:02:03 2026 GMT
            Not After : Nov 15 15:02:03 2026 GMT
        Subject: CN=ab49fae3b4adeefdac1a6ffd937a19185b3ec86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:f4:70:61:b2:d2:91:18:66:a7:c7:2d:f0:
                    a6:40:e0:5a:06:90:4f:70:f3:7b:bd:f6:b0:84:89:
                    fb:03:ac:fc:61:91:2e:47:b7:68:ec:9e:be:b2:ef:
                    b4:75:46:13:08:0a:18:2a:94:81:d3:32:e9:5b:48:
                    a1:20:20:70:69:92:35:67:c8:e7:d0:e2:f9:16:bb:
                    ce:22:be:5b:14:8b:84:59:14:cd:53:ad:eb:25:8f:
                    38:8d:4e:45:56:51:dd:1f:6f:00:fa:47:08:78:6d:
                    9a:1b:5f:9d:5a:de:34:ad:c8:26:f3:2d:46:0c:23:
                    6a:52:8c:47:89:d8:5d:9f:c4:03:9b:09:7c:c3:b3:
                    3a:8b:03:6a:9d:e4:e6:6c:d4:16:2e:f6:12:55:bf:
                    47:d2:2b:b1:e6:e7:5e:15:1d:e8:63:50:df:fe:e0:
                    07:fa:dd:15:67:6b:a0:76:f6:d4:1f:27:9d:e5:b9:
                    fd:04:43:a4:6b:e6:f3:73:e3:65:cf:f6:8c:8b:10:
                    49:ba:3c:c1:ea:ac:d4:9c:70:51:cd:0f:ba:68:95:
                    2e:51:39:b1:56:c7:58:fa:52:f2:26:88:e7:be:9f:
                    72:06:75:cf:b4:0d:c7:4b:88:e2:87:55:d2:bc:80:
                    3f:d4:30:92:d1:32:25:be:e5:a6:5e:50:8a:b6:5f:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:49:FA:E3:B4:AD:EE:FD:AC:1A:6F:FD:93:7A:19:18:5B:3E:C8:6B
            X509v3 Authority Key Identifier:
                keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:64:62:33:a3:85:58:7a:23:b8:66:00:c6:8f:56:05:28:43:
         4c:22:b5:d6:4a:af:57:93:60:b1:8b:90:92:b9:06:48:c8:fa:
         4b:57:69:37:10:33:32:e5:70:ba:c8:dd:3f:26:11:00:09:f2:
         c9:26:3a:e2:51:1d:3c:e7:50:b1:65:9c:94:5b:fd:97:09:3a:
         c8:01:f2:e3:48:d0:ce:cd:b5:ac:45:e1:8e:f3:0a:1e:9f:d7:
         40:ac:9e:e1:d2:0d:41:70:7a:22:d8:ab:14:18:c0:82:ab:ac:
         95:68:96:c5:b4:f6:21:28:ac:93:93:65:c9:b4:59:23:92:64:
         26:0b:96:a8:48:02:9c:bf:ce:7f:95:af:fc:78:fa:14:b5:f2:
         a7:ec:e4:38:9d:85:51:ef:9b:bb:c5:18:7c:15:25:58:de:eb:
         46:57:31:7e:f0:76:5c:dc:3c:04:f5:9c:f1:8f:4c:ed:48:81:
         74:9f:2a:96:5f:27:80:4a:10:36:b2:52:79:7d:4f:d6:8f:77:
         2e:78:52:91:20:4a:ff:09:52:b1:5d:37:82:8e:b7:2b:05:4e:
         a3:2b:44:fe:d5:60:9b:e6:9a:88:4d:ec:9d:57:7d:6b:ec:88:
         8e:21:70:fc:5e:85:0a:19:54:b3:37:d9:39:9e:07:51:ea:89:
         78:16:64:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHalG/T6JcYTdw2Z6EhDeLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDZlNWQ0NjI5MWY2YmM1M2I5NjU4NjUwNTFiYTM5OTc0
OWViMmQwHhcNMjYxMTE0MTUwMjAzWhcNMjYxMTE1MTUwMjAzWjAzMTEwLwYDVQQD
EyhhYjQ5ZmFlM2I0YWRlZWZkYWMxYTZmZmQ5MzdhMTkxODViM2VjODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucT0cGGy0pEYZqfHLfCmQOBaBpBP
cPN7vfawhIn7A6z8YZEuR7do7J6+su+0dUYTCAoYKpSB0zLpW0ihICBwaZI1Z8jn
0OL5FrvOIr5bFIuEWRTNU63rJY84jU5FVlHdH28A+kcIeG2aG1+dWt40rcgm8y1G
DCNqUoxHidhdn8QDmwl8w7M6iwNqneTmbNQWLvYSVb9H0iux5udeFR3oY1Df/uAH
+t0VZ2ugdvbUHyed5bn9BEOka+bzc+Nlz/aMixBJujzB6qzUnHBRzQ+6aJUuUTmx
VsdY+lLyJojnvp9yBnXPtA3HS4jih1XSvIA/1DCS0TIlvuWmXlCKtl9T1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtJ+uO0re79rBpv/ZN6GRhbPshrMB8GA1UdIwQY
MBaAFNNG5dRikfa8U7llhlBRujmXSestMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUt
M2U5NDNmOTdmZjMxLzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUtM2U5NDNmOTdmZjMx
LzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGRiM6OF
WHojuGYAxo9WBShDTCK11kqvV5NgsYuQkrkGSMj6S1dpNxAzMuVwusjdPyYRAAny
ySY64lEdPOdQsWWclFv9lwk6yAHy40jQzs21rEXhjvMKHp/XQKye4dINQXB6Itir
FBjAgquslWiWxbT2ISisk5NlybRZI5JkJguWqEgCnL/Of5Wv/Hj6FLXyp+zkOJ2F
Ue+bu8UYfBUlWN7rRlcxfvB2XNw8BPWc8Y9M7UiBdJ8qll8ngEoQNrJSeX1P1o93
LnhSkSBK/wlSsV03go63KwVOoytE/tVgm+aaiE3snVd9a+yIjiFw/F6FChlUszfZ
OZ4HUeqJeBZk6Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:16:50 2026 by rpki-client