Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File:                     CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier:          29jke+r4GxnYMNOuuQzJpz0qhcDMukE7XHNTfSodoag=
Subject key identifier:   6D:B0:2E:14:6E:78:7E:D6:71:E5:A7:E9:A2:2A:8A:4B:E6:CE:E7:77
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer:       /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial:       01A1DE7123A49BF2F1D9F6E8378C4D912884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number:          0739
Signing time:             Sun 15 Nov 2026 09:01:58 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:58 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:58 +0000
Files and hashes:         1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: KzSWnEm+yRu7fcY1sw5DoKgP9RwmU09dKf5EyiE0ya8=)
                          2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=)
                          3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=)
                          4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:71:23:a4:9b:f2:f1:d9:f6:e8:37:8c:4d:91:28:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
        Validity
            Not Before: Nov 15 09:01:58 2026 GMT
            Not After : Nov 16 09:01:58 2026 GMT
        Subject: CN=6db02e146e787ed671e5a7e9a22a8a4be6cee777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:06:af:51:98:ef:d2:c7:6f:f2:30:5e:f2:
                    14:e4:5a:c4:19:d2:06:7b:6d:02:af:53:7a:84:4b:
                    61:c0:93:17:39:ac:f6:06:da:74:0d:0d:65:08:9f:
                    e9:b5:60:96:94:e3:51:f3:dc:c2:d5:19:55:30:fc:
                    51:04:38:6e:39:2c:ea:a1:d7:21:24:c9:08:3e:ca:
                    22:57:97:ca:8f:0d:3a:63:4b:6a:cc:b6:1c:67:9d:
                    e6:87:b2:8a:fa:00:bb:f0:1c:5e:ab:ff:4d:07:7b:
                    13:7a:e1:f6:87:f5:91:01:ef:53:16:7e:8d:2f:c2:
                    ed:13:e0:06:11:b4:49:45:02:ed:33:dd:82:1f:f9:
                    5d:da:fd:02:e8:85:4a:a7:c8:3c:75:4b:09:3f:ec:
                    75:c5:c7:12:55:44:57:34:ca:21:fd:2b:58:60:d2:
                    da:48:f3:a3:c6:5b:a7:96:eb:fc:d2:aa:00:94:68:
                    ef:c4:38:ea:fe:0e:ec:cc:db:95:94:47:72:23:a9:
                    59:7c:b7:03:d9:6f:bb:8e:a4:60:a2:75:e6:fc:a8:
                    8b:13:54:89:53:b8:16:2e:dd:ac:f1:b1:fc:8a:b1:
                    16:61:72:5f:89:57:8e:a8:7e:c9:b3:2f:97:ee:d9:
                    f6:37:1e:b4:9d:f2:37:a0:f0:3a:ee:cb:0d:86:75:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B0:2E:14:6E:78:7E:D6:71:E5:A7:E9:A2:2A:8A:4B:E6:CE:E7:77
            X509v3 Authority Key Identifier:
                keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:c9:2b:4d:04:5e:16:fe:2f:71:6c:f9:35:51:c2:0c:49:
         bc:de:da:f5:bf:78:f8:f1:7f:38:53:7e:17:b7:8a:58:57:de:
         28:3d:5a:73:03:93:61:25:15:d8:ca:dc:c2:19:42:54:89:a8:
         93:82:71:9b:90:17:03:b4:8e:d7:05:86:f8:e4:27:da:68:23:
         36:12:dc:ad:53:b4:4b:e1:36:6f:4c:ef:13:eb:8d:b2:97:23:
         f9:55:85:73:95:34:b5:03:f5:ed:00:6a:ba:7a:04:9e:39:66:
         1e:a8:80:b3:9a:5f:e8:06:32:a8:10:1a:1e:60:08:03:63:d4:
         4b:be:6d:9d:b4:dc:3c:e0:b3:c8:49:a5:ec:51:b2:14:8e:a9:
         a7:99:d7:97:17:75:73:72:46:6e:76:1e:02:56:8f:51:05:21:
         b9:b2:3e:91:42:78:26:64:67:7b:b2:b6:be:88:1b:fa:67:07:
         36:b9:be:97:09:e7:7c:ef:06:1a:4d:f7:a5:83:e9:4e:d3:c6:
         b6:d2:6b:77:b2:1b:e9:40:7c:72:2d:a9:74:6e:d1:d9:f7:6a:
         15:49:4b:1d:35:21:92:af:d0:99:fc:ec:fb:8c:e8:4b:9f:9a:
         7e:09:2d:4a:8e:bd:04:b3:49:35:f2:0f:ec:44:1a:ff:c2:b3:
         4a:6f:fb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecSOkm/Lx2fboN4xNkSiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0
MTIxMmUwHhcNMjYxMTE1MDkwMTU4WhcNMjYxMTE2MDkwMTU4WjAzMTEwLwYDVQQD
Eyg2ZGIwMmUxNDZlNzg3ZWQ2NzFlNWE3ZTlhMjJhOGE0YmU2Y2VlNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiQGr1GY79LHb/IwXvIU5FrEGdIG
e20Cr1N6hEthwJMXOaz2Btp0DQ1lCJ/ptWCWlONR89zC1RlVMPxRBDhuOSzqodch
JMkIPsoiV5fKjw06Y0tqzLYcZ53mh7KK+gC78Bxeq/9NB3sTeuH2h/WRAe9TFn6N
L8LtE+AGEbRJRQLtM92CH/ld2v0C6IVKp8g8dUsJP+x1xccSVURXNMoh/StYYNLa
SPOjxlunluv80qoAlGjvxDjq/g7szNuVlEdyI6lZfLcD2W+7jqRgonXm/KiLE1SJ
U7gWLt2s8bH8irEWYXJfiVeOqH7Jsy+X7tn2Nx60nfI3oPA67ssNhnUEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2wLhRueH7WceWn6aIqikvmzud3MB8GA1UdIwQY
MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct
M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy
LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9HJK00E
Xhb+L3Fs+TVRwgxJvN7a9b94+PF/OFN+F7eKWFfeKD1acwOTYSUV2MrcwhlCVImo
k4Jxm5AXA7SO1wWG+OQn2mgjNhLcrVO0S+E2b0zvE+uNspcj+VWFc5U0tQP17QBq
unoEnjlmHqiAs5pf6AYyqBAaHmAIA2PUS75tnbTcPOCzyEml7FGyFI6pp5nXlxd1
c3JGbnYeAlaPUQUhubI+kUJ4JmRne7K2vogb+mcHNrm+lwnnfO8GGk33pYPpTtPG
ttJrd7Ib6UB8ci2pdG7R2fdqFUlLHTUhkq/Qmfzs+4zoS5+afgktSo69BLNJNfIP
7EQa/8KzSm/70Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:29 2026 by rpki-client