Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
File:                     m_RXG73K1sGXqwWraa_s_yq0M94.mft (raw, json)
Hash identifier:          4SZ7/tUL5lNS4OJk0WdBlIZuhogaVYgruozHLN6NxJU=
Subject key identifier:   A0:C1:46:9D:BC:F9:77:F9:95:29:2E:AC:F5:4D:6A:BB:6D:E0:11:BE
Authority key identifier: 9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE
Certificate issuer:       /CN=9bf4571bbdcad6c197ab05ab69afecff2ab433de
Certificate serial:       01A1DFBA4EE29D4E3B21754E90BDBDB760BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
Manifest number:          010A
Signing time:             Sun 15 Nov 2026 15:01:31 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:31 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:31 +0000
Files and hashes:         1: 2W10fbTAd8yGwEuKaeH7ybl8CDc.asa (hash: rzKp0oJWkHk92yLQerR5K/0WpCTmrJTmvjZ7huqWfKg=)
                          2: m_RXG73K1sGXqwWraa_s_yq0M94.crl (hash: 8fe7T0JrgO6283I17TQjvMtj4/ws1Wgy7eD6WJsXy60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:ba:4e:e2:9d:4e:3b:21:75:4e:90:bd:bd:b7:60:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf4571bbdcad6c197ab05ab69afecff2ab433de
        Validity
            Not Before: Nov 15 15:01:31 2026 GMT
            Not After : Nov 16 15:01:31 2026 GMT
        Subject: CN=a0c1469dbcf977f995292eacf54d6abb6de011be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:7f:2f:a1:a3:44:94:66:38:c5:e2:62:b9:
                    06:9f:df:8f:b9:fc:e1:c0:62:24:cf:36:d7:d4:81:
                    84:a2:77:c4:51:62:2e:8e:c5:e6:42:53:d1:c9:a5:
                    9c:98:1e:9b:ba:ba:0d:db:19:99:ab:dd:04:58:98:
                    17:33:f4:4d:83:83:ce:70:86:fb:08:99:c2:24:82:
                    63:eb:1b:71:4c:1c:af:54:9f:9b:f9:6a:ea:36:cc:
                    97:85:0a:99:3f:86:1f:66:c4:44:c3:16:da:83:f1:
                    07:88:74:4a:c3:8c:0b:c7:67:3d:df:90:d1:bd:da:
                    ab:d2:11:db:56:b2:45:60:55:6b:2b:48:0e:33:34:
                    84:bc:41:b4:98:97:82:c1:78:23:9c:2e:cf:04:c5:
                    a4:44:25:30:78:b9:21:10:67:5e:8d:de:61:c0:73:
                    15:7d:4d:e0:c2:4f:56:09:50:03:d6:4e:da:ed:85:
                    22:c5:0f:64:b3:78:5c:2e:0d:93:81:f6:9a:42:da:
                    80:98:0b:45:1e:cf:9d:4a:ab:d8:07:6a:a3:65:a4:
                    f8:bf:24:0b:0e:0c:d6:3e:0c:79:fe:b7:10:90:c3:
                    e7:46:6a:e6:a4:73:3c:55:36:32:a2:af:62:f5:c9:
                    6b:30:48:df:d2:18:38:c7:5d:59:42:58:68:a9:bc:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C1:46:9D:BC:F9:77:F9:95:29:2E:AC:F5:4D:6A:BB:6D:E0:11:BE
            X509v3 Authority Key Identifier:
                keyid:9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:10:81:8b:1e:83:5a:da:6d:8c:11:68:35:ec:cd:3c:32:50:
         22:cc:f5:e6:68:40:da:b9:5b:9c:6a:4b:b2:00:24:35:58:3d:
         a3:f8:e9:94:fa:a4:a0:ef:a7:ae:1c:3c:9a:34:81:37:78:c9:
         81:1b:8c:4e:cc:d0:cc:ca:a5:36:da:5d:ed:ce:eb:47:c7:31:
         14:1a:45:52:94:f5:d0:e2:98:c0:d0:b0:84:2f:37:9c:08:2b:
         ff:0a:e2:a0:70:c3:fa:f3:ca:7e:bd:f6:98:e2:16:22:5a:76:
         2b:e7:92:d6:54:3c:08:d9:33:77:b1:21:47:21:94:7f:7a:3f:
         7a:39:98:7b:4a:b2:1f:86:04:5a:77:67:5e:76:09:26:6e:f1:
         b5:46:19:5e:b7:e8:0a:09:30:95:86:a8:36:fa:65:87:bc:f1:
         ae:f2:f3:d5:d1:00:33:61:96:55:fa:b9:ce:fa:2d:9b:cb:0d:
         3f:80:35:fd:38:3a:f3:16:0b:db:12:b1:b8:3d:26:4b:9e:dc:
         21:92:22:0a:2f:1b:2c:ba:b9:9f:e7:b7:ad:51:19:d0:8d:02:
         57:78:e9:a0:98:a8:b4:1d:17:83:be:4d:3e:14:27:09:bd:d6:
         ec:51:73:75:72:a3:e4:52:5e:43:5c:66:74:fa:40:16:03:3a:
         40:34:0b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfuk7inU47IXVOkL29t2C/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZjQ1NzFiYmRjYWQ2YzE5N2FiMDVhYjY5YWZlY2ZmMmFi
NDMzZGUwHhcNMjYxMTE1MTUwMTMxWhcNMjYxMTE2MTUwMTMxWjAzMTEwLwYDVQQD
EyhhMGMxNDY5ZGJjZjk3N2Y5OTUyOTJlYWNmNTRkNmFiYjZkZTAxMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bx/L6GjRJRmOMXiYrkGn9+Pufzh
wGIkzzbX1IGEonfEUWIujsXmQlPRyaWcmB6buroN2xmZq90EWJgXM/RNg4POcIb7
CJnCJIJj6xtxTByvVJ+b+WrqNsyXhQqZP4YfZsREwxbag/EHiHRKw4wLx2c935DR
vdqr0hHbVrJFYFVrK0gOMzSEvEG0mJeCwXgjnC7PBMWkRCUweLkhEGdejd5hwHMV
fU3gwk9WCVAD1k7a7YUixQ9ks3hcLg2TgfaaQtqAmAtFHs+dSqvYB2qjZaT4vyQL
DgzWPgx5/rcQkMPnRmrmpHM8VTYyoq9i9clrMEjf0hg4x11ZQlhoqbwqFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDBRp28+Xf5lSkurPVNartt4BG+MB8GA1UdIwQY
MBaAFJv0Vxu9ytbBl6sFq2mv7P8qtDPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV9SWEc3M0sxc0dYcXdXcmFhX3NfeXEwTTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81MGVkZjEtY2NhYS00ZDNhLTg2ZDkt
NGRkMjQ0MWMyY2IyLzEvbV9SWEc3M0sxc0dYcXdXcmFhX3NfeXEwTTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81MGVkZjEtY2NhYS00ZDNhLTg2ZDktNGRkMjQ0MWMyY2Iy
LzEvbV9SWEc3M0sxc0dYcXdXcmFhX3NfeXEwTTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxCBix6D
WtptjBFoNezNPDJQIsz15mhA2rlbnGpLsgAkNVg9o/jplPqkoO+nrhw8mjSBN3jJ
gRuMTszQzMqlNtpd7c7rR8cxFBpFUpT10OKYwNCwhC83nAgr/wrioHDD+vPKfr32
mOIWIlp2K+eS1lQ8CNkzd7EhRyGUf3o/ejmYe0qyH4YEWndnXnYJJm7xtUYZXrfo
CgkwlYaoNvplh7zxrvLz1dEAM2GWVfq5zvotm8sNP4A1/Tg68xYL2xKxuD0mS57c
IZIiCi8bLLq5n+e3rVEZ0I0CV3jpoJiotB0Xg75NPhQnCb3W7FFzdXKj5FJeQ1xm
dPpAFgM6QDQLeA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:44:58 2026 by rpki-client