Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File:                     mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier:          MHmW4XAINLqfv2twVHSF0ghUZ4hNQpseS9lpNcGoYJ4=
Subject key identifier:   E9:6A:16:F6:A8:DD:9F:C3:2F:F0:6D:10:E4:A2:08:A8:09:09:A0:C1
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer:       /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial:       01A1DB0234598B9FCFF5B233632DF28764FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number:          1B1E
Signing time:             Sat 14 Nov 2026 17:01:56 +0000
Manifest this update:     Sat 14 Nov 2026 17:01:56 +0000
Manifest next update:     Sun 15 Nov 2026 17:01:56 +0000
Files and hashes:         1: 46p9s-6bK1x3IMhZZTLtFnLKSG4.roa (hash: m9iX0hvEzdFtNZKfroikZrbqGhUWZla8pnTb/7pKB2A=)
                          2: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=)
                          3: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=)
                          4: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=)
                          5: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=)
                          6: mKM1tsqKQoc8PWb5_XoP-ubgxII.roa (hash: 2Pbyr222Z3HUuNeOb+9nT1zhYlbpfVd4M4pk3DJMr44=)
                          7: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: Zy3wqiJw19nUlezovpoD/fwEUoyh7JFAJa3OXTkqmoU=)
                          8: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=)
                          9: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=)
                          10: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=)
                          11: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=)
                          12: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 17:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:02:34:59:8b:9f:cf:f5:b2:33:63:2d:f2:87:64:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
        Validity
            Not Before: Nov 14 17:01:56 2026 GMT
            Not After : Nov 15 17:01:56 2026 GMT
        Subject: CN=e96a16f6a8dd9fc32ff06d10e4a208a80909a0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:a6:a0:f6:e4:7e:23:7a:24:4d:67:00:5d:
                    f2:72:d5:54:37:7a:56:93:1f:e8:1d:62:86:d9:4c:
                    39:74:92:66:cc:6a:d3:ba:da:6d:5e:74:a4:bd:85:
                    c9:07:3c:11:6e:d7:0b:d4:34:1d:54:d7:8d:e6:07:
                    e4:db:1b:c6:c0:9c:73:c3:eb:b7:08:2b:b4:65:0a:
                    89:a3:62:c5:ea:2e:aa:b6:ab:b0:87:63:63:3b:6d:
                    c1:aa:b8:5e:6f:1a:af:00:01:01:de:aa:37:ac:72:
                    a9:99:99:fd:39:0b:7a:99:d6:f6:81:b0:a9:76:78:
                    4d:88:20:96:02:9b:c4:38:37:0b:be:36:27:e0:84:
                    d1:ec:29:08:6c:0e:08:71:45:f8:46:87:e5:e0:4e:
                    de:65:f9:61:9d:29:a7:cb:92:cd:e7:d9:d6:1d:91:
                    98:6a:07:27:15:3b:43:d8:52:88:87:77:60:28:6c:
                    bf:13:db:e4:83:ac:42:58:1a:2b:78:6a:0e:e3:0a:
                    00:03:50:36:2c:98:25:f4:a2:56:ec:6e:7d:dc:65:
                    26:e3:b9:82:46:47:6e:1a:67:7e:2a:48:05:04:e5:
                    88:ae:1e:38:e6:86:ca:15:6a:f7:11:1d:a9:cf:4a:
                    6e:42:d3:f7:c2:07:3d:de:d2:e6:de:52:29:6e:c7:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6A:16:F6:A8:DD:9F:C3:2F:F0:6D:10:E4:A2:08:A8:09:09:A0:C1
            X509v3 Authority Key Identifier:
                keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:5c:88:71:89:c0:24:d5:84:cb:c1:b0:d9:c6:9b:e3:38:
         f1:62:ce:58:74:e8:b2:8d:2a:bb:27:cc:95:4f:62:26:ac:0b:
         09:97:ed:a1:97:c1:c0:0f:70:fd:15:c0:f6:84:90:ba:c4:a0:
         1b:ed:49:e8:41:5d:b1:0c:25:39:5a:15:25:ec:ce:06:82:b2:
         5f:58:51:25:f6:4f:ec:47:e4:63:03:29:dc:ce:94:51:17:6e:
         a7:cd:0f:f8:8b:09:df:0d:8d:55:aa:c2:cb:80:72:33:b3:23:
         1f:00:93:b1:e9:a4:d7:35:3e:26:4c:ea:14:18:54:5d:97:b0:
         f7:d0:dc:36:19:f7:97:66:2a:62:40:d8:71:e9:38:19:15:ad:
         52:e0:cb:fc:12:ba:b2:f6:38:e9:a2:e5:21:5d:63:9a:44:10:
         b6:c2:26:f4:54:00:5f:4e:0b:b6:48:86:c0:2b:87:b3:01:80:
         15:b3:58:4c:4a:30:3e:16:da:10:2f:6b:d5:db:78:23:19:58:
         93:c4:e8:78:f0:78:9d:fb:6a:a8:0c:57:36:d1:72:9f:f1:96:
         e1:7f:10:f4:d6:b9:c7:44:fc:9d:b2:8c:90:66:33:ed:fd:a3:
         4d:31:b2:d1:85:00:3e:f4:c1:91:45:2a:a9:1f:8f:30:b2:5f:
         18:37:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:56:18 2026 by rpki-client