Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          4hFPtvDEZLvS9QybOq2e9PCjgN6ByaedQAOiabB/djY=
Subject key identifier:   8B:CF:61:40:FE:7C:FE:74:CE:95:1D:BE:F7:F4:E6:13:34:74:1E:19
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       01A1DB6FBB67265C41FCE3FF7EB45BAB99A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          0C2F
Signing time:             Sat 14 Nov 2026 19:01:35 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:35 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:35 +0000
Files and hashes:         1: 1-nlxsJRBWD8q6HeUx4ToKSOiAE0.roa (hash: IsmDbtGisDKm21kNjBMYIK7IWOYqqUQdtbbddSGtBpk=)
                          2: 5GNibjWVh9kv3niMKhBpdix2V2Q.roa (hash: V43kp1BYcyRiXrTVKmCCCR8M4THNOeMB1viDgjmazhM=)
                          3: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=)
                          4: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=)
                          5: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=)
                          6: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=)
                          7: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=)
                          8: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=)
                          9: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=)
                          10: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=)
                          11: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=)
                          12: OPFVrVCm7fOpCW2S_lCBmcVd_B0.roa (hash: SubYjJvt3nWCWLimBRLzH/1/tw2nHLXwJHZ3M3lYlbU=)
                          13: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=)
                          14: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: z/Q29VljDnhS+2lbMBOEDEA19zlJTch8+l407lOJwMg=)
                          15: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=)
                          16: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=)
                          17: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=)
                          18: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=)
                          19: c6BAhHRLfxDNcL8hPsxjznxgJZ4.roa (hash: fDgos3O7tcZZOFfLpA6faR+93mXyvAqz66PrVMnvPjc=)
                          20: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=)
                          21: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=)
                          22: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=)
                          23: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=)
                          24: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:6f:bb:67:26:5c:41:fc:e3:ff:7e:b4:5b:ab:99:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Nov 14 19:01:35 2026 GMT
            Not After : Nov 15 19:01:35 2026 GMT
        Subject: CN=8bcf6140fe7cfe74ce951dbef7f4e61334741e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:f9:2d:db:78:7b:fe:f2:b8:25:06:18:1d:
                    50:45:7c:39:50:cc:df:26:b1:cf:4c:10:4f:06:f2:
                    7a:10:29:c7:93:7d:6b:5f:3d:20:b6:03:64:79:c1:
                    7a:04:cd:4f:e8:06:53:21:dd:61:97:06:c4:32:33:
                    8c:a5:23:a5:80:9b:70:a1:7d:a2:9d:81:75:a0:c2:
                    d3:19:c2:ce:4b:1d:14:23:28:32:be:95:aa:23:66:
                    f9:68:3a:61:22:64:c2:ca:6a:e8:bc:09:eb:72:e0:
                    d6:c0:08:92:ef:6d:57:b9:c4:76:e0:9e:6a:d9:68:
                    1b:ff:a3:34:5a:87:ed:55:ce:b4:dc:0b:2f:ca:d9:
                    92:44:cc:d2:7b:2a:8a:32:f8:bc:98:e2:87:7e:7d:
                    c2:20:84:dd:ee:83:b3:46:c9:80:c4:62:48:a0:7a:
                    6b:31:af:ed:ef:00:d0:8b:eb:7c:5d:16:23:06:48:
                    0a:19:2f:70:ac:e9:9c:6a:72:aa:df:da:d1:f3:f0:
                    8f:e3:28:18:f0:a6:c9:02:30:81:31:0a:05:96:c2:
                    a3:42:6e:e1:2e:c2:70:4d:bd:ec:3a:61:62:09:3c:
                    56:41:5c:50:2e:f3:c5:3a:a8:b0:4b:75:23:8f:36:
                    1d:4d:ad:d0:3a:35:ed:50:34:7d:04:69:d5:f5:51:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CF:61:40:FE:7C:FE:74:CE:95:1D:BE:F7:F4:E6:13:34:74:1E:19
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:eb:28:b7:0a:f4:4d:15:4c:e1:5e:5d:8b:46:72:88:68:2b:
         9d:d4:a0:79:b1:97:e5:7a:1c:27:cd:08:ea:05:9f:b5:c9:07:
         54:f9:a0:96:4c:8c:c3:1f:0e:19:ac:67:3a:bf:68:a6:8e:67:
         11:c4:01:1a:8a:70:3f:68:4a:a7:1b:ce:8b:f3:20:20:47:85:
         f6:18:38:a1:66:5a:67:df:ce:fe:4b:2d:d5:17:98:ec:b2:c3:
         eb:be:44:71:30:c3:2c:fc:88:6a:61:11:f2:7a:46:a8:73:a8:
         2f:0b:9d:45:e2:54:9e:cc:68:ca:23:64:c6:17:b4:d4:5a:68:
         1d:e2:28:bb:df:d8:9e:32:9c:c9:75:9c:12:5f:ae:f9:58:16:
         ca:80:a7:e8:2a:6a:2d:59:f0:74:2f:d9:81:00:14:70:e4:27:
         40:fc:fd:c3:32:64:76:18:db:d3:5c:01:3a:d0:b0:7f:26:d3:
         c4:15:f0:d6:53:29:7a:97:bc:56:41:ef:d5:fa:f5:6f:b5:0f:
         08:27:e1:06:c4:ac:39:dd:78:22:eb:6b:f3:f0:e4:a0:9d:bc:
         08:b1:1d:c2:c6:f0:cf:af:c4:5b:65:42:e8:7e:b9:e7:55:bd:
         9c:a3:8b:aa:36:f4:ec:c6:c2:fb:d8:f7:b6:51:b9:e8:c7:aa:
         22:61:f0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:24:58 2026 by rpki-client