Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          e7x45ABsC8wx8358kfGaEViEnwlLgvuPDoaB9YCGIpQ=
Subject key identifier:   95:C7:D0:3A:79:A0:0F:0F:B9:2B:5E:F6:75:C4:70:46:8D:28:96:94
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       01A1DF8331E1B531FDCDF0855335AF3C642B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          1732
Signing time:             Sun 15 Nov 2026 14:01:19 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:19 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:19 +0000
Files and hashes:         1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: 7zbOtVGdwqIaRNXzN2mLgq9Qcr2fA18Y4LYgMD8ANsY=)
                          2: WBlw_6VIVJf8y8tp35IGY0KY5Sg.roa (hash: W+hfHtjijwXDntickrdwjHCaSjq3oWvPLX71M2iKqZQ=)
                          3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
                          4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:31:e1:b5:31:fd:cd:f0:85:53:35:af:3c:64:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Nov 15 14:01:19 2026 GMT
            Not After : Nov 16 14:01:19 2026 GMT
        Subject: CN=95c7d03a79a00f0fb92b5ef675c470468d289694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3b:f3:5c:1b:2b:34:ad:23:1c:59:9a:d4:86:
                    d9:0c:8d:8b:ee:ce:65:86:bb:6d:b6:1b:d4:ce:2e:
                    db:0d:de:5d:c5:a2:5e:4d:cd:42:1b:23:c4:dd:33:
                    08:7e:bf:c9:6e:c4:21:ff:6c:a7:0a:21:f0:50:57:
                    cd:ad:fe:73:94:7c:5a:57:58:e4:1a:2d:45:6b:85:
                    5f:cd:83:b5:9c:2f:a2:8a:44:91:73:6c:72:61:35:
                    ce:36:32:0c:d7:bc:ee:50:ec:df:63:8c:25:00:eb:
                    92:cf:3c:8f:f8:65:c7:68:de:96:51:e5:ae:8f:fa:
                    09:a7:39:3f:1d:c6:22:19:ae:f3:70:d3:db:ac:c9:
                    ab:a4:e5:a9:59:cd:3c:25:49:f2:5e:dc:5b:52:12:
                    60:d8:e4:90:66:47:ae:91:f3:3b:ba:4d:50:65:f9:
                    e9:73:28:09:a5:03:1b:50:66:aa:83:68:46:c5:ba:
                    fd:bb:18:0e:c8:69:b6:ce:11:00:3e:df:6b:e7:82:
                    96:36:52:94:fe:9f:dc:01:8e:f2:6a:5f:f6:67:46:
                    06:ce:82:49:a6:d5:7a:9e:1e:a9:86:a3:1d:35:2c:
                    25:f6:0a:0e:27:a2:6c:f2:f5:a3:08:9e:1d:53:81:
                    a6:08:78:3a:97:a9:ab:74:2d:87:b0:0a:9a:d3:6f:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:D0:3A:79:A0:0F:0F:B9:2B:5E:F6:75:C4:70:46:8D:28:96:94
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:55:3a:89:e6:e1:98:b6:35:6a:0a:74:b2:a6:ec:29:a9:7d:
         36:09:83:e1:33:c7:f7:dd:53:af:0f:45:74:0e:37:68:50:e1:
         0e:b4:a5:bc:82:72:86:6a:89:1c:e4:44:fb:5c:d0:0f:2f:b0:
         01:02:0f:e4:31:aa:d5:ba:cb:28:b2:ae:85:ae:78:b9:9c:ff:
         68:fd:ab:21:15:a8:55:a3:20:8c:c3:bc:c9:52:84:5e:a5:34:
         11:cc:92:99:e6:a6:8a:82:f2:8c:e0:64:89:02:a4:35:1a:ce:
         ef:15:5b:f3:1a:eb:3b:51:fd:1c:99:4d:ce:14:52:39:ef:4e:
         b9:24:b2:6b:3f:44:0d:38:9b:d0:e6:6e:90:54:dd:e3:43:f1:
         9f:17:bd:8b:67:7e:f8:e9:11:80:e7:64:ab:d9:d8:37:55:5b:
         29:65:f4:ea:7f:b9:52:9a:6a:17:28:7c:a5:26:59:b0:69:58:
         f3:07:af:1d:99:c9:3a:00:0f:44:a4:76:04:ab:43:45:96:29:
         27:81:72:35:c7:e1:a4:cf:a9:d3:e0:0a:68:c4:b7:86:be:a2:
         b9:87:47:73:3c:16:b0:d1:95:bc:ec:fb:fb:4e:1d:a4:ac:ca:
         80:21:22:91:5e:5d:c5:12:6a:ce:07:b6:ae:4d:7f:2d:2e:92:
         e0:6c:f4:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfgzHhtTH9zfCFUzWvPGQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm
MDNjNGEwHhcNMjYxMTE1MTQwMTE5WhcNMjYxMTE2MTQwMTE5WjAzMTEwLwYDVQQD
Eyg5NWM3ZDAzYTc5YTAwZjBmYjkyYjVlZjY3NWM0NzA0NjhkMjg5Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DvzXBsrNK0jHFma1IbZDI2L7s5l
hrttthvUzi7bDd5dxaJeTc1CGyPE3TMIfr/JbsQh/2ynCiHwUFfNrf5zlHxaV1jk
Gi1Fa4VfzYO1nC+iikSRc2xyYTXONjIM17zuUOzfY4wlAOuSzzyP+GXHaN6WUeWu
j/oJpzk/HcYiGa7zcNPbrMmrpOWpWc08JUnyXtxbUhJg2OSQZkeukfM7uk1QZfnp
cygJpQMbUGaqg2hGxbr9uxgOyGm2zhEAPt9r54KWNlKU/p/cAY7yal/2Z0YGzoJJ
ptV6nh6phqMdNSwl9goOJ6Js8vWjCJ4dU4GmCHg6l6mrdC2HsAqa029bfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXH0Dp5oA8PuSte9nXEcEaNKJaUMB8GA1UdIwQY
MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt
YTAxZTllNmRjYmYyLzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy
LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFU6iebh
mLY1agp0sqbsKal9NgmD4TPH991Trw9FdA43aFDhDrSlvIJyhmqJHORE+1zQDy+w
AQIP5DGq1brLKLKuha54uZz/aP2rIRWoVaMgjMO8yVKEXqU0EcySmeamioLyjOBk
iQKkNRrO7xVb8xrrO1H9HJlNzhRSOe9OuSSyaz9EDTib0OZukFTd40Pxnxe9i2d+
+OkRgOdkq9nYN1VbKWX06n+5UppqFyh8pSZZsGlY8wevHZnJOgAPRKR2BKtDRZYp
J4FyNcfhpM+p0+AKaMS3hr6iuYdHczwWsNGVvOz7+04dpKzKgCEikV5dxRJqzge2
rk1/LS6S4Gz0qw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:53:59 2026 by rpki-client