Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File:                     DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier:          m7eL8H9OX/AGNQLRCqKMUjcXCduCS7QGsN2bZAELypw=
Subject key identifier:   55:20:20:B7:C6:D8:E6:55:F0:40:48:8F:8C:30:5A:14:A5:B3:B6:B1
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer:       /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial:       01A1C1E6366B83BA96D604C7D98E4FA502EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number:          1AE7
Signing time:             Mon 09 Nov 2026 20:00:52 +0000
Manifest this update:     Mon 09 Nov 2026 20:00:52 +0000
Manifest next update:     Tue 10 Nov 2026 20:00:52 +0000
Files and hashes:         1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
                          2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: mKweP55qI6NW/eNWE4pCvD9u1Sh0WwD94PGzGt3Jkto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c1:e6:36:6b:83:ba:96:d6:04:c7:d9:8e:4f:a5:02:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
        Validity
            Not Before: Nov  9 20:00:52 2026 GMT
            Not After : Nov 10 20:00:52 2026 GMT
        Subject: CN=552020b7c6d8e655f040488f8c305a14a5b3b6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:d2:82:71:e4:86:55:60:00:b9:9b:8c:95:
                    d2:9d:82:f9:ae:a9:5d:7d:10:8a:a5:4b:e4:d9:ea:
                    60:49:c0:e2:db:8f:0c:52:a5:64:ee:65:0e:2b:b2:
                    85:aa:26:c9:d5:90:cb:01:26:96:be:46:30:b5:05:
                    21:4a:b5:76:39:35:ad:ed:e4:44:97:4d:d1:54:2f:
                    58:9c:d0:8d:e7:e8:07:8c:67:96:b5:cb:29:9d:3e:
                    31:a3:7c:64:fb:14:96:81:f4:b9:1b:5c:2e:94:07:
                    a3:46:10:24:a9:a4:51:53:bf:aa:78:b1:9c:d0:93:
                    9c:db:66:2a:50:6b:bc:27:a8:a1:9e:8f:cd:f9:4e:
                    23:89:8b:e4:5f:5c:c2:42:4f:50:a2:78:16:42:b5:
                    26:16:db:8f:c1:44:2a:62:a7:9f:31:11:66:a0:9b:
                    04:be:27:ef:4f:98:22:51:46:1f:31:c2:9d:ba:01:
                    be:27:06:5d:8e:2d:30:20:4c:9e:57:e5:6c:8c:d2:
                    7c:f9:8f:76:3e:fc:5e:4e:cc:e0:ae:59:93:89:c4:
                    3e:cb:4d:3c:5d:8e:5c:a6:cf:7c:50:18:11:eb:a2:
                    bd:7c:f4:3c:f9:0b:67:aa:7f:21:33:e8:10:50:24:
                    17:de:15:95:0c:fe:70:b8:a7:51:ba:ff:5a:26:99:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:20:20:B7:C6:D8:E6:55:F0:40:48:8F:8C:30:5A:14:A5:B3:B6:B1
            X509v3 Authority Key Identifier:
                keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:d5:f1:03:2b:a5:14:2a:7f:53:18:78:f8:93:f3:86:8c:
         38:b9:10:0c:ab:35:0e:00:0c:1e:34:b8:6a:c5:97:ca:f1:11:
         6a:10:39:f7:dd:85:fe:01:7f:95:4b:d1:ab:a8:e3:78:a7:a1:
         7b:5e:80:e5:92:a0:cf:0b:b6:bd:e5:79:c7:c1:39:65:95:ef:
         23:5d:cf:0c:c0:aa:37:cf:5f:f6:8c:58:ba:77:aa:71:92:49:
         e1:81:8e:ca:f7:ce:58:2d:3b:2c:d4:a4:2b:9c:6d:64:2c:b6:
         0c:cc:ae:64:d7:96:c5:b6:6d:75:a3:e8:19:66:3c:90:2b:fb:
         7d:d9:7c:16:bf:7a:76:d1:da:63:4d:cb:40:48:37:05:c5:16:
         6a:79:ee:b6:bb:e0:c3:e5:87:a6:14:ea:16:a0:57:82:3c:8f:
         d1:31:67:f0:76:18:c9:62:88:f9:76:36:89:7e:7a:70:70:ea:
         a1:0e:5e:50:23:c9:72:20:c5:ce:76:8d:43:ff:e7:3c:da:a8:
         e7:34:52:2c:fb:94:b3:71:01:16:f3:df:82:6f:65:67:af:a6:
         05:73:17:61:20:c2:88:6c:63:8f:5a:34:1d:dd:ed:83:67:5c:
         03:b7:1d:bb:47:bd:18:a2:7e:d4:6c:ec:60:38:2a:ca:ef:7f:
         54:a6:ad:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHB5jZrg7qW1gTH2Y5PpQLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2
YzA1ZjAwHhcNMjYxMTA5MjAwMDUyWhcNMjYxMTEwMjAwMDUyWjAzMTEwLwYDVQQD
Eyg1NTIwMjBiN2M2ZDhlNjU1ZjA0MDQ4OGY4YzMwNWExNGE1YjNiNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n3SgnHkhlVgALmbjJXSnYL5rqld
fRCKpUvk2epgScDi248MUqVk7mUOK7KFqibJ1ZDLASaWvkYwtQUhSrV2OTWt7eRE
l03RVC9YnNCN5+gHjGeWtcspnT4xo3xk+xSWgfS5G1wulAejRhAkqaRRU7+qeLGc
0JOc22YqUGu8J6ihno/N+U4jiYvkX1zCQk9QongWQrUmFtuPwUQqYqefMRFmoJsE
vifvT5giUUYfMcKdugG+JwZdji0wIEyeV+VsjNJ8+Y92PvxeTszgrlmTicQ+y008
XY5cps98UBgR66K9fPQ8+Qtnqn8hM+gQUCQX3hWVDP5wuKdRuv9aJpn7PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUgILfG2OZV8EBIj4wwWhSls7axMB8GA1UdIwQY
MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et
MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh
LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsjV8QMr
pRQqf1MYePiT84aMOLkQDKs1DgAMHjS4asWXyvERahA5992F/gF/lUvRq6jjeKeh
e16A5ZKgzwu2veV5x8E5ZZXvI13PDMCqN89f9oxYuneqcZJJ4YGOyvfOWC07LNSk
K5xtZCy2DMyuZNeWxbZtdaPoGWY8kCv7fdl8Fr96dtHaY03LQEg3BcUWannutrvg
w+WHphTqFqBXgjyP0TFn8HYYyWKI+XY2iX56cHDqoQ5eUCPJciDFznaNQ//nPNqo
5zRSLPuUs3EBFvPfgm9lZ6+mBXMXYSDCiGxjj1o0Hd3tg2dcA7cdu0e9GKJ+1Gzs
YDgqyu9/VKatJQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 05:52:59 2026 by rpki-client