Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          BCR09iQ8xknwGkaDxkrj8N9VBaJkyhHkBLLCcupajZ8=
Subject key identifier:   C6:B1:E2:B7:DE:56:D0:17:3B:FB:41:7C:85:86:8A:8D:4A:C5:88:BF
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       01A1DEA777D4A0EC9F51784F2F63C26463D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          1AF9
Signing time:             Sun 15 Nov 2026 10:01:19 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:19 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:19 +0000
Files and hashes:         1: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: 59X9VGHGs9pdplGNM4Meirc1hSbO+MjYi6re7JrnPFw=)
                          2: Jkp9Zd26L_A1ZIR1VUq4tXYD330.roa (hash: T7Gs4XIXZkJFeMoCVwkPW3PWWFtLrEdzuDaxySqJtw8=)
                          3: Yd0ISItT25nHU31sDdFobBWtukM.roa (hash: BpfqZXiuQQu7xNd4WIEYwPFlxLRUFTvBsSR5u9ClQwA=)
                          4: _73P6T6R3O1x9vvtr2p4XPdIlxo.roa (hash: LQcRZBmXpQKqNcm08uPyPyuOJz2qTqd9JQZhTsJFO+g=)
                          5: eoJQmOi00RtisYT69k2lcfpvuTI.roa (hash: zyn9MIC0PYdNEQ/1NTEkC1cOqVRsDhiTSo2jAFn7xpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:77:d4:a0:ec:9f:51:78:4f:2f:63:c2:64:63:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Nov 15 10:01:19 2026 GMT
            Not After : Nov 16 10:01:19 2026 GMT
        Subject: CN=c6b1e2b7de56d0173bfb417c85868a8d4ac588bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:3f:ca:5d:ed:4c:07:0c:c1:f1:11:01:cf:
                    d0:19:f8:7c:a2:b5:57:37:e3:90:6f:e0:a9:4d:25:
                    8f:54:15:5c:0c:13:c4:c9:c0:42:0a:b0:29:df:9c:
                    6c:85:2f:f3:06:2e:e8:51:d8:4c:e6:cb:e7:2b:48:
                    ca:a0:6f:98:a3:30:de:19:bb:39:ed:36:8a:4f:77:
                    c8:63:e3:61:2a:c5:0f:78:a5:5d:cb:99:c3:24:47:
                    3f:14:42:93:65:e7:b2:39:78:22:58:da:0c:69:86:
                    14:36:ec:e8:9e:ca:d0:ce:d3:61:32:e1:cc:07:dc:
                    8b:c4:5a:11:16:be:bb:ff:a7:fa:22:76:33:48:63:
                    9f:0e:ff:a2:dc:0a:d2:6d:8d:f0:31:a5:d1:e7:65:
                    24:fd:e4:40:f7:73:b1:93:59:1a:12:89:a2:fa:21:
                    40:b9:87:52:59:f1:07:c9:88:8a:3c:1f:07:3f:db:
                    67:cf:f8:3f:2a:16:f5:7a:3b:60:d4:a6:a9:51:d5:
                    bd:69:7d:64:5c:47:b8:88:7c:05:ba:72:fa:e9:a1:
                    20:76:d0:c6:f6:0a:2d:d7:59:1a:0e:88:af:55:42:
                    32:10:22:a3:11:7a:11:c8:75:59:63:b6:1f:57:97:
                    75:27:5d:f7:a7:b0:98:f6:81:94:d5:fc:1f:ac:75:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B1:E2:B7:DE:56:D0:17:3B:FB:41:7C:85:86:8A:8D:4A:C5:88:BF
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:22:6a:7b:42:ff:ad:4e:3e:24:f2:d5:82:18:08:d6:8a:fc:
         c4:9c:68:eb:c8:f3:a8:c6:79:31:5c:09:05:15:82:cc:e7:70:
         f9:88:3c:5b:9d:25:d2:6e:1e:a5:c7:08:6b:72:18:d2:36:65:
         5e:ea:92:ba:22:74:d9:0d:05:32:0f:bc:b5:27:be:53:6e:99:
         7c:b9:ee:38:80:59:31:98:52:de:1b:37:a9:cb:b3:cf:90:6a:
         ee:80:2e:12:9f:49:2a:a5:1c:5c:51:41:27:f4:70:7f:41:13:
         89:84:bb:cc:03:5b:a6:bf:af:db:89:be:44:8d:bf:4a:0c:39:
         b6:8a:5c:fa:64:79:5d:ae:db:25:bd:54:7b:95:19:7f:9b:78:
         d9:e7:50:2e:96:9d:a5:72:ae:c1:71:d2:b0:ed:30:b0:ab:30:
         d9:31:a4:f2:b6:24:d7:5a:ff:99:43:02:b6:d1:c4:31:05:e5:
         9b:3f:db:ff:56:de:79:63:16:9f:72:42:67:57:ea:9c:7f:61:
         20:12:50:41:d9:c3:75:6d:31:d4:f0:71:e8:44:ab:af:31:4f:
         7e:f1:e3:a9:ab:89:a8:74:0f:24:06:39:be:50:47:a1:18:e7:
         45:ca:e6:c5:e6:73:c1:8b:64:a8:c2:92:ca:93:96:8d:9a:dc:
         fe:5a:e1:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep3fUoOyfUXhPL2PCZGPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzJiMGVlMTg3OTI4NDA5MDY1ZDE5ZWU5YzA4NThlOGMx
N2VhMTMwHhcNMjYxMTE1MTAwMTE5WhcNMjYxMTE2MTAwMTE5WjAzMTEwLwYDVQQD
EyhjNmIxZTJiN2RlNTZkMDE3M2JmYjQxN2M4NTg2OGE4ZDRhYzU4OGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj0/yl3tTAcMwfERAc/QGfh8orVX
N+OQb+CpTSWPVBVcDBPEycBCCrAp35xshS/zBi7oUdhM5svnK0jKoG+YozDeGbs5
7TaKT3fIY+NhKsUPeKVdy5nDJEc/FEKTZeeyOXgiWNoMaYYUNuzonsrQztNhMuHM
B9yLxFoRFr67/6f6InYzSGOfDv+i3ArSbY3wMaXR52Uk/eRA93Oxk1kaEomi+iFA
uYdSWfEHyYiKPB8HP9tnz/g/Khb1ejtg1KapUdW9aX1kXEe4iHwFunL66aEgdtDG
9got11kaDoivVUIyECKjEXoRyHVZY7YfV5d1J133p7CY9oGU1fwfrHUJtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMax4rfeVtAXO/tBfIWGio1KxYi/MB8GA1UdIwQY
MBaAFNLCsO4YeShAkGXRnunAhY6MF+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2Et
YzhlODYzYzFhOGQxLzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2EtYzhlODYzYzFhOGQx
LzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiJqe0L/
rU4+JPLVghgI1or8xJxo68jzqMZ5MVwJBRWCzOdw+Yg8W50l0m4epccIa3IY0jZl
XuqSuiJ02Q0FMg+8tSe+U26ZfLnuOIBZMZhS3hs3qcuzz5Bq7oAuEp9JKqUcXFFB
J/Rwf0ETiYS7zANbpr+v24m+RI2/Sgw5topc+mR5Xa7bJb1Ue5UZf5t42edQLpad
pXKuwXHSsO0wsKsw2TGk8rYk11r/mUMCttHEMQXlmz/b/1beeWMWn3JCZ1fqnH9h
IBJQQdnDdW0x1PBx6ESrrzFPfvHjqauJqHQPJAY5vlBHoRjnRcrmxeZzwYtkqMKS
ypOWjZrc/lrhDg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:11 2026 by rpki-client