Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File:                     rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier:          JQAy6YrCU3Ov8FMO0JunLW3ewiRtIwTlH4J09AGdnHo=
Subject key identifier:   4C:32:8D:E1:96:19:1E:C9:42:54:01:2E:CC:93:56:59:2A:D4:E9:39
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer:       /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial:       01A1DE39ACD9684E1B8EB6F91B7766D0F3F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number:          0B79
Signing time:             Sun 15 Nov 2026 08:01:24 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:24 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:24 +0000
Files and hashes:         1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
                          2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: Gw+cqQihXq6Jm3H9QsDQgpEHQf5J2Uw8adCo6ByZozc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:ac:d9:68:4e:1b:8e:b6:f9:1b:77:66:d0:f3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
        Validity
            Not Before: Nov 15 08:01:24 2026 GMT
            Not After : Nov 16 08:01:24 2026 GMT
        Subject: CN=4c328de196191ec94254012ecc9356592ad4e939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:a8:ba:88:12:73:4a:33:6b:64:08:f0:80:
                    15:42:36:4e:23:85:f9:d3:31:d4:2c:a9:e3:90:61:
                    5a:17:86:e4:ef:ae:3d:21:25:d3:6a:95:4f:c2:d3:
                    e7:58:98:8a:83:75:fe:d0:d8:13:ae:36:ea:27:5f:
                    b1:f4:26:fd:3d:58:87:a0:32:bf:d1:5a:3b:85:e6:
                    a8:01:ba:d6:25:75:2d:1e:95:51:98:8f:e4:ba:c6:
                    11:76:de:3a:f4:c7:be:fd:17:41:e2:dd:70:70:fb:
                    ce:e9:c7:e5:35:5f:37:fb:a0:da:28:2f:26:0f:3a:
                    81:e1:8d:f4:f6:5a:65:30:79:de:88:b5:c0:34:d1:
                    d8:f1:f3:af:0b:1f:48:71:31:87:62:92:64:2f:17:
                    2f:b2:71:0c:d6:1c:5e:1f:29:99:b4:20:99:62:d0:
                    3c:0c:0b:cf:ba:c0:43:a4:4b:c3:63:71:29:c2:5f:
                    e0:58:d3:f9:1b:d3:e4:7f:51:7e:bb:36:67:39:25:
                    0a:49:46:85:ad:a3:02:44:0e:61:9f:0c:81:4a:46:
                    13:49:21:af:c9:d3:c2:51:eb:f2:90:a8:c1:bd:fd:
                    45:6c:90:12:75:2a:d4:7f:5b:26:2a:5b:46:3f:86:
                    c9:c2:89:55:c5:13:d6:ab:5f:2c:f9:37:45:9e:4f:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:32:8D:E1:96:19:1E:C9:42:54:01:2E:CC:93:56:59:2A:D4:E9:39
            X509v3 Authority Key Identifier:
                keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:03:2b:7d:1c:bc:f3:0a:a9:d4:f3:32:72:4e:af:74:3b:
         6d:ef:86:f7:72:e8:36:e1:f0:6c:e5:2b:a1:9e:8a:89:ec:47:
         36:bc:df:3f:a9:a9:fd:27:4c:e8:c2:47:7f:b5:91:c2:24:7a:
         dc:23:10:97:de:af:92:e0:a2:55:6d:ac:77:02:6e:7f:5d:ea:
         72:8c:5a:fa:15:75:a6:ee:ac:5c:40:0a:58:e6:b8:75:a7:7f:
         3e:cd:9b:43:56:a9:e0:d9:4b:0c:bd:8c:43:0b:fd:34:b8:c3:
         5d:61:12:2f:a3:53:f7:a3:0c:e9:46:c7:92:dd:1e:40:d6:9b:
         f7:9b:23:f7:4d:1c:51:fa:e8:80:e5:ff:78:c2:da:5e:58:af:
         ce:a8:60:2c:d9:cf:83:82:59:fe:39:06:b8:48:6c:1b:e0:98:
         24:85:8e:70:29:ee:0c:05:c6:cb:2c:64:38:c1:be:a1:f3:94:
         32:ff:e8:f0:46:ab:bd:8f:51:91:8e:12:08:c7:54:95:b0:45:
         48:9e:56:53:88:5f:e1:95:39:dd:69:80:dd:07:36:95:41:f7:
         95:d4:51:c5:a0:78:2d:cb:c9:97:3e:cd:49:b5:d1:ab:18:d8:
         2e:fd:67:63:c3:4b:17:d8:26:1a:4d:69:34:c3:46:cf:d7:94:
         62:43:75:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOazZaE4bjrb5G3dm0PP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk
MGVlZjUwHhcNMjYxMTE1MDgwMTI0WhcNMjYxMTE2MDgwMTI0WjAzMTEwLwYDVQQD
Eyg0YzMyOGRlMTk2MTkxZWM5NDI1NDAxMmVjYzkzNTY1OTJhZDRlOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWqouogSc0oza2QI8IAVQjZOI4X5
0zHULKnjkGFaF4bk7649ISXTapVPwtPnWJiKg3X+0NgTrjbqJ1+x9Cb9PViHoDK/
0Vo7heaoAbrWJXUtHpVRmI/kusYRdt469Me+/RdB4t1wcPvO6cflNV83+6DaKC8m
DzqB4Y309lplMHneiLXANNHY8fOvCx9IcTGHYpJkLxcvsnEM1hxeHymZtCCZYtA8
DAvPusBDpEvDY3Epwl/gWNP5G9Pkf1F+uzZnOSUKSUaFraMCRA5hnwyBSkYTSSGv
ydPCUevykKjBvf1FbJASdSrUf1smKltGP4bJwolVxRPWq18s+TdFnk9ANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwyjeGWGR7JQlQBLsyTVlkq1Ok5MB8GA1UdIwQY
MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt
OWNjNjk1OWZmM2U5LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5
LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1cDK30c
vPMKqdTzMnJOr3Q7be+G93LoNuHwbOUroZ6KiexHNrzfP6mp/SdM6MJHf7WRwiR6
3CMQl96vkuCiVW2sdwJuf13qcoxa+hV1pu6sXEAKWOa4dad/Ps2bQ1ap4NlLDL2M
Qwv9NLjDXWESL6NT96MM6UbHkt0eQNab95sj900cUfrogOX/eMLaXlivzqhgLNnP
g4JZ/jkGuEhsG+CYJIWOcCnuDAXGyyxkOMG+ofOUMv/o8EarvY9RkY4SCMdUlbBF
SJ5WU4hf4ZU53WmA3Qc2lUH3ldRRxaB4LcvJlz7NSbXRqxjYLv1nY8NLF9gmGk1p
NMNGz9eUYkN1RQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:43:33 2026 by rpki-client