Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
File:                     z03hI7ypCDRpQQ16g98niahsaZk.mft (raw, json)
Hash identifier:          DPSM7ldsAK4EeDWt9Q1djplZV9Lue857iE811xz67Yg=
Subject key identifier:   24:B5:65:69:34:A1:00:06:25:2B:61:EC:59:AF:95:6B:81:3D:05:C7
Authority key identifier: CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
Certificate issuer:       /CN=cf4de123bca9083469410d7a83df2789a86c6999
Certificate serial:       01A1DE39A90696A717F82F0E78E94C7A2637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
Manifest number:          F1
Signing time:             Sun 15 Nov 2026 08:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:23 +0000
Files and hashes:         1: 3eLWx94YuvwwSRAoKOfCLRLl0zY.asa (hash: 79uscgj28wgq78Iu3Rnp/+KrsVCoQRVb4tTu7d98mgM=)
                          2: z03hI7ypCDRpQQ16g98niahsaZk.crl (hash: z31ZRjFOwkVt2OL+oBnMVdLtRk3/8grShR6wu/uov6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:a9:06:96:a7:17:f8:2f:0e:78:e9:4c:7a:26:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4de123bca9083469410d7a83df2789a86c6999
        Validity
            Not Before: Nov 15 08:01:23 2026 GMT
            Not After : Nov 16 08:01:23 2026 GMT
        Subject: CN=24b5656934a10006252b61ec59af956b813d05c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:04:33:02:46:55:32:0f:34:79:e1:9f:33:
                    23:ff:36:80:a8:c2:0d:dd:e4:63:d4:a6:fa:70:1a:
                    bc:31:99:37:0e:f5:b6:aa:b5:b5:6d:47:65:77:d8:
                    a1:0e:23:e4:19:a3:1f:2d:fd:17:b5:30:33:ee:a4:
                    59:53:4e:b0:36:50:94:73:1f:61:b0:94:af:9a:bf:
                    74:f7:a2:ed:6f:b7:37:1c:10:3d:29:cc:a9:f9:26:
                    ed:0d:46:49:67:ef:2c:72:79:c8:f9:98:a2:f8:0e:
                    36:c5:80:bc:c8:0a:92:2c:4e:7d:73:c3:26:a7:a8:
                    88:74:4d:e6:59:9f:38:33:35:47:18:a5:30:93:47:
                    ad:e6:9a:d0:58:61:a8:d6:6e:ea:f6:1c:0f:a7:d8:
                    69:6b:25:e1:86:64:f4:93:1d:1f:31:a7:9b:4a:8f:
                    88:04:95:c1:f2:0e:82:e7:ad:aa:16:e1:5e:40:a0:
                    07:43:b6:02:28:02:41:c7:87:7b:21:25:e7:18:39:
                    ed:f6:56:2d:0c:09:2c:55:ae:fb:af:da:21:7d:a7:
                    6c:4e:f7:f5:7f:6e:ec:a5:29:d9:9c:78:16:4c:df:
                    c2:8c:c1:93:f5:90:b2:6d:44:92:f9:5e:93:50:26:
                    c1:98:90:5c:2a:7f:83:bb:3f:6e:9b:bd:7d:a4:fd:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:65:69:34:A1:00:06:25:2B:61:EC:59:AF:95:6B:81:3D:05:C7
            X509v3 Authority Key Identifier:
                keyid:CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b1:01:08:c6:46:b8:a8:96:01:c5:e9:36:b4:5a:2e:d4:fd:
         5c:33:28:7d:0f:9c:b5:22:25:f4:99:9a:31:b9:c9:cf:c2:91:
         9e:0e:66:a6:ce:0b:76:f1:f0:54:bc:f7:db:44:5e:7e:7d:16:
         31:16:53:f4:73:0f:f5:7c:f0:e6:b4:e4:c5:76:3d:34:d9:8e:
         36:7b:e3:fb:ec:c7:9f:32:ed:55:b7:c6:79:dd:60:09:2a:95:
         0e:0b:6f:a0:19:73:7f:20:17:95:ad:06:0b:a9:c4:b2:0e:a9:
         19:fc:e8:93:f9:c6:2d:00:34:01:4b:5d:e4:0f:b8:f3:d8:86:
         71:cc:be:37:2c:77:d4:2a:98:86:71:42:03:9c:87:27:bb:4d:
         ea:83:f8:e6:55:01:f4:7c:f1:55:00:2c:4a:a0:45:3a:eb:43:
         1b:8e:5e:89:64:c1:41:4c:b2:65:b3:29:77:b8:a8:d2:81:e2:
         cf:3a:2a:f1:d4:21:07:de:8f:ca:e5:c5:fd:a4:a9:f7:93:49:
         1e:aa:fe:28:61:1d:2b:e3:84:c9:63:b3:b1:17:de:6a:19:b5:
         55:ad:84:11:5a:30:e3:7d:50:70:cd:37:76:23:1e:fc:af:10:
         ec:82:8b:42:40:a1:47:63:52:b7:f1:b2:c4:1b:d3:e4:c4:4e:
         41:67:f0:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOakGlqcX+C8OeOlMeiY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNGRlMTIzYmNhOTA4MzQ2OTQxMGQ3YTgzZGYyNzg5YTg2
YzY5OTkwHhcNMjYxMTE1MDgwMTIzWhcNMjYxMTE2MDgwMTIzWjAzMTEwLwYDVQQD
EygyNGI1NjU2OTM0YTEwMDA2MjUyYjYxZWM1OWFmOTU2YjgxM2QwNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTUEMwJGVTIPNHnhnzMj/zaAqMIN
3eRj1Kb6cBq8MZk3DvW2qrW1bUdld9ihDiPkGaMfLf0XtTAz7qRZU06wNlCUcx9h
sJSvmr9096Ltb7c3HBA9Kcyp+SbtDUZJZ+8scnnI+Zii+A42xYC8yAqSLE59c8Mm
p6iIdE3mWZ84MzVHGKUwk0et5prQWGGo1m7q9hwPp9hpayXhhmT0kx0fMaebSo+I
BJXB8g6C562qFuFeQKAHQ7YCKAJBx4d7ISXnGDnt9lYtDAksVa77r9ohfadsTvf1
f27spSnZnHgWTN/CjMGT9ZCybUSS+V6TUCbBmJBcKn+Duz9um719pP2rNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS1ZWk0oQAGJSth7FmvlWuBPQXHMB8GA1UdIwQY
MBaAFM9N4SO8qQg0aUENeoPfJ4mobGmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejAzaEk3eXBDRFJwUVExNmc5OG5pYWhzYVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZjZjNmUtZmIzZC00OTFlLWIzMzYt
ZTYwM2E0OGE2NTNlLzEvejAzaEk3eXBDRFJwUVExNmc5OG5pYWhzYVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZjZjNmUtZmIzZC00OTFlLWIzMzYtZTYwM2E0OGE2NTNl
LzEvejAzaEk3eXBDRFJwUVExNmc5OG5pYWhzYVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLEBCMZG
uKiWAcXpNrRaLtT9XDMofQ+ctSIl9JmaMbnJz8KRng5mps4LdvHwVLz320Refn0W
MRZT9HMP9Xzw5rTkxXY9NNmONnvj++zHnzLtVbfGed1gCSqVDgtvoBlzfyAXla0G
C6nEsg6pGfzok/nGLQA0AUtd5A+489iGccy+Nyx31CqYhnFCA5yHJ7tN6oP45lUB
9HzxVQAsSqBFOutDG45eiWTBQUyyZbMpd7io0oHizzoq8dQhB96PyuXF/aSp95NJ
Hqr+KGEdK+OEyWOzsRfeahm1Va2EEVow431QcM03diMe/K8Q7IKLQkChR2NSt/Gy
xBvT5MROQWfwrw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:02 2026 by rpki-client