Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File:                     ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier:          tcAdITmOzuplYKzP8tmbTP16jDi0R0B0/piqPZuKRB4=
Subject key identifier:   55:ED:5C:1B:5F:0D:74:CC:05:E4:1E:AE:A7:C7:C9:54:5B:B5:99:78
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer:       /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial:       01A1DEDE7B7B0DB283A7D50AAB36BCC6C725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number:          13E9
Signing time:             Sun 15 Nov 2026 11:01:24 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:24 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:24 +0000
Files and hashes:         1: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (hash: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54=)
                          2: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (hash: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM=)
                          3: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: SXNtq8zdV3VoUZktPMRczLGAr9bcxF3axy0OUs6tMH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:7b:7b:0d:b2:83:a7:d5:0a:ab:36:bc:c6:c7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
        Validity
            Not Before: Nov 15 11:01:24 2026 GMT
            Not After : Nov 16 11:01:24 2026 GMT
        Subject: CN=55ed5c1b5f0d74cc05e41eaea7c7c9545bb59978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:11:b1:81:60:3d:8a:c0:e3:30:07:09:d4:
                    7f:86:72:88:80:fd:f1:c1:26:7d:fc:4b:35:da:55:
                    11:15:83:99:ee:45:53:32:93:9c:9f:61:93:d1:a5:
                    7e:14:9f:f1:6c:10:ed:9d:1e:64:4c:0f:0e:b5:45:
                    a7:fa:bf:4d:19:9c:ff:bb:de:07:5d:da:86:b4:86:
                    1a:5f:0d:10:a6:37:86:ad:22:bd:e6:ce:a9:b3:44:
                    43:5e:8b:50:05:5c:54:8c:42:3c:17:e2:e4:59:e0:
                    63:91:b3:6b:ff:f2:41:0e:0a:89:26:5f:1a:e7:60:
                    76:59:45:b7:1e:06:dc:91:d1:a9:3e:dd:cd:8d:e6:
                    2f:0e:06:19:16:3c:27:5d:e1:02:8e:c7:4e:5a:e0:
                    97:f3:dc:53:03:ff:13:40:64:6c:9f:a2:b5:52:56:
                    cf:8a:e7:4d:02:d5:d0:14:e5:8f:9b:2d:bc:a9:c2:
                    e9:af:46:6a:53:df:fb:05:a1:7d:61:14:23:8c:db:
                    22:bf:f4:71:8a:20:c9:fc:dd:bf:e4:31:90:70:e5:
                    86:23:31:75:04:d0:39:19:66:34:2f:71:c1:a0:4d:
                    ac:4b:39:91:ad:3b:60:26:f8:15:34:e1:b4:66:ac:
                    5f:d8:22:28:46:5b:d1:13:4c:b5:a6:e3:94:c7:f7:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:ED:5C:1B:5F:0D:74:CC:05:E4:1E:AE:A7:C7:C9:54:5B:B5:99:78
            X509v3 Authority Key Identifier:
                keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:da:23:62:25:3b:17:ff:93:89:bd:72:c3:5d:76:f3:f5:
         c8:14:61:76:a6:50:9b:2e:f7:0e:6e:1d:3f:3f:41:e7:14:15:
         09:97:09:a3:86:af:0f:48:d0:48:25:6f:6e:ab:1d:2f:b0:67:
         56:ca:aa:71:9a:89:1f:d6:db:84:ad:3b:36:cb:70:da:9c:b0:
         25:a5:b6:8d:24:ed:ba:e3:a0:af:c0:d2:0c:9a:b4:ae:8b:a9:
         c8:28:7f:f9:ae:b3:0a:d1:99:9e:49:41:28:79:b6:d8:da:69:
         77:24:29:8f:82:57:1a:a6:7f:c6:81:ac:d5:f9:2c:a6:9f:98:
         9a:12:e8:47:ca:d2:de:e8:07:f2:d9:c7:b7:46:33:19:9f:00:
         e3:65:2b:9d:38:37:17:0c:37:3c:e5:8c:e7:2c:87:38:ef:2a:
         e3:e3:ef:d8:5e:fd:cb:d0:69:b6:3d:6e:81:27:f5:62:8c:61:
         4a:93:dc:9e:47:c0:2a:3a:48:5a:f1:40:99:37:b1:19:c2:d8:
         16:37:d0:10:cc:45:88:19:80:57:f2:b3:ed:f6:48:3e:60:c8:
         cd:82:be:0c:ea:1b:04:9d:bf:eb:98:7d:f3:e9:45:4d:98:94:
         20:71:d3:b0:28:20:5a:ba:b6:c9:66:48:0e:66:cd:a0:01:a4:
         16:d3:fa:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3nt7DbKDp9UKqza8xsclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWJmMDI5MjhjY2NiNTE2YjcxOWZlNTU4ODg0ODQyZjE5
YzA4NzcwHhcNMjYxMTE1MTEwMTI0WhcNMjYxMTE2MTEwMTI0WjAzMTEwLwYDVQQD
Eyg1NWVkNWMxYjVmMGQ3NGNjMDVlNDFlYWVhN2M3Yzk1NDViYjU5OTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5QRsYFgPYrA4zAHCdR/hnKIgP3x
wSZ9/Es12lURFYOZ7kVTMpOcn2GT0aV+FJ/xbBDtnR5kTA8OtUWn+r9NGZz/u94H
XdqGtIYaXw0QpjeGrSK95s6ps0RDXotQBVxUjEI8F+LkWeBjkbNr//JBDgqJJl8a
52B2WUW3HgbckdGpPt3NjeYvDgYZFjwnXeECjsdOWuCX89xTA/8TQGRsn6K1UlbP
iudNAtXQFOWPmy28qcLpr0ZqU9/7BaF9YRQjjNsiv/RxiiDJ/N2/5DGQcOWGIzF1
BNA5GWY0L3HBoE2sSzmRrTtgJvgVNOG0Zqxf2CIoRlvRE0y1puOUx/dgvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXtXBtfDXTMBeQerqfHyVRbtZl4MB8GA1UdIwQY
MBaAFAEb8CkozMtRa3Gf5ViISELxnAh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYt
N2U5YzBiMDIyNDhlLzEvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYtN2U5YzBiMDIyNDhl
LzEvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm3aI2Il
Oxf/k4m9csNddvP1yBRhdqZQmy73Dm4dPz9B5xQVCZcJo4avD0jQSCVvbqsdL7Bn
VsqqcZqJH9bbhK07Nstw2pywJaW2jSTtuuOgr8DSDJq0roupyCh/+a6zCtGZnklB
KHm22NppdyQpj4JXGqZ/xoGs1fkspp+YmhLoR8rS3ugH8tnHt0YzGZ8A42UrnTg3
Fww3POWM5yyHOO8q4+Pv2F79y9Bptj1ugSf1YoxhSpPcnkfAKjpIWvFAmTexGcLY
FjfQEMxFiBmAV/Kz7fZIPmDIzYK+DOobBJ2/65h98+lFTZiUIHHTsCggWrq2yWZI
DmbNoAGkFtP6MA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:20:01 2026 by rpki-client