Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier:          mtGuBXmN3mlvo1QNvHNIIFT78Yj5b2XXWcWQ/AnF1wE=
Subject key identifier:   4F:7A:EC:79:8A:CE:DF:4E:32:68:0A:68:9E:FA:C9:47:0E:68:00:BE
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer:       /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial:       01A1DEDEDC35FF4DDDCFF173D6A5D84B9DF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number:          0848
Signing time:             Sun 15 Nov 2026 11:01:49 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:49 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:49 +0000
Files and hashes:         1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: sPds30nuQTCJtRJN6mezY7XmK+0tyOclwH/fmSZnLQ4=)
                          2: Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa (hash: FBeGZgtFYVn2jU+qekRgjUacFdjECcP1nPbLiXskECw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:dc:35:ff:4d:dd:cf:f1:73:d6:a5:d8:4b:9d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Validity
            Not Before: Nov 15 11:01:49 2026 GMT
            Not After : Nov 16 11:01:49 2026 GMT
        Subject: CN=4f7aec798acedf4e32680a689efac9470e6800be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:97:42:98:73:06:40:f2:cd:f4:0e:fb:88:
                    3d:0b:ff:be:cf:bb:25:f8:ab:85:dc:b9:81:b4:c8:
                    89:af:f6:3a:a8:3a:02:6b:98:8d:02:f5:0a:c6:38:
                    72:28:4d:27:f2:26:64:9d:f4:f5:44:1c:04:1d:06:
                    23:7c:5b:d4:30:af:7c:a8:a3:bc:82:f9:6d:36:62:
                    fb:1b:39:d3:a3:ef:6c:71:82:59:5c:11:31:44:2b:
                    d2:d5:0b:4f:7f:a4:85:b1:20:21:3b:5a:21:cb:aa:
                    76:81:b9:d4:66:0e:3b:af:5d:68:56:03:74:65:8b:
                    b9:36:db:cf:50:6f:e8:c4:4c:31:bd:93:cc:d8:de:
                    ed:b8:95:84:47:a3:30:7f:bf:ae:55:db:42:16:1c:
                    64:26:59:66:68:08:32:00:61:4a:85:5b:00:b2:25:
                    c5:5f:91:8c:24:2f:a7:fd:77:d3:d3:38:53:cc:ff:
                    a1:b3:58:68:66:71:52:e0:f8:45:0c:4c:ce:5b:81:
                    51:90:b4:62:c4:1e:48:ec:89:34:81:f8:81:b9:c6:
                    24:98:d1:a8:29:1f:93:99:3e:fd:90:0f:f5:5d:7c:
                    b2:5b:34:bf:cc:2b:c7:85:5e:e2:10:05:bd:b5:cb:
                    a4:f9:2f:c1:46:30:32:10:36:a9:6f:2e:fd:23:30:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:EC:79:8A:CE:DF:4E:32:68:0A:68:9E:FA:C9:47:0E:68:00:BE
            X509v3 Authority Key Identifier:
                keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:50:f8:1a:2b:a1:f3:e3:ab:fd:0f:3d:98:fe:1d:fd:f0:1e:
         63:1f:f0:5d:d0:ef:38:24:ff:46:fa:ec:31:8a:91:08:76:d8:
         46:6e:b4:cb:ca:28:04:70:dc:d3:df:ac:ff:dd:9a:b4:ef:ab:
         79:fc:a6:7d:9a:e4:01:f5:47:35:3a:f8:c0:9c:a8:bf:f1:50:
         10:dc:64:ca:26:a2:94:44:96:d0:a5:00:f1:c7:b7:5c:e4:fa:
         f2:eb:7d:7e:00:d9:cc:0c:07:28:ad:b0:03:74:4d:2b:89:0d:
         e0:84:92:38:77:f1:e2:22:82:a5:e8:03:0d:5c:5c:86:06:e2:
         51:fb:3b:16:4d:b7:dd:ce:6f:ab:ee:05:bf:c1:5f:38:54:fd:
         b1:99:01:4c:0a:f5:a8:c7:25:e5:1a:b2:27:3a:2b:36:c2:11:
         0a:52:08:4e:16:28:b9:9e:fa:e6:33:13:2e:2e:6b:96:eb:f8:
         a7:f8:dc:a9:e6:05:cb:f2:a2:02:a8:c2:7e:10:57:05:bc:d5:
         1c:ff:dd:a9:c6:7c:28:ef:87:e0:a8:94:54:9f:c1:4e:fe:6f:
         64:42:d0:a7:32:c4:71:bf:4d:3f:6a:23:13:89:56:9a:db:81:
         4e:75:a8:5f:73:b5:fd:34:ed:75:4c:1b:6c:c1:0e:c6:de:76:
         ad:08:cb:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3tw1/03dz/Fz1qXYS53yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjgwY2M5ZThiNDQ1YTA3ZmVlY2FjMGFmYzU5ZTQyZGM3
MTAyNjMwHhcNMjYxMTE1MTEwMTQ5WhcNMjYxMTE2MTEwMTQ5WjAzMTEwLwYDVQQD
Eyg0ZjdhZWM3OThhY2VkZjRlMzI2ODBhNjg5ZWZhYzk0NzBlNjgwMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXCXQphzBkDyzfQO+4g9C/++z7sl
+KuF3LmBtMiJr/Y6qDoCa5iNAvUKxjhyKE0n8iZknfT1RBwEHQYjfFvUMK98qKO8
gvltNmL7GznTo+9scYJZXBExRCvS1QtPf6SFsSAhO1ohy6p2gbnUZg47r11oVgN0
ZYu5NtvPUG/oxEwxvZPM2N7tuJWER6Mwf7+uVdtCFhxkJllmaAgyAGFKhVsAsiXF
X5GMJC+n/XfT0zhTzP+hs1hoZnFS4PhFDEzOW4FRkLRixB5I7Ik0gfiBucYkmNGo
KR+TmT79kA/1XXyyWzS/zCvHhV7iEAW9tcuk+S/BRjAyEDapby79IzAgmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE967HmKzt9OMmgKaJ76yUcOaAC+MB8GA1UdIwQY
MBaAFA74DMnotEWgf+7KwK/FnkLccQJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWIt
ODY2ZTVkNGM2ZWRiLzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWItODY2ZTVkNGM2ZWRi
LzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVD4Giuh
8+Or/Q89mP4d/fAeYx/wXdDvOCT/RvrsMYqRCHbYRm60y8ooBHDc09+s/92atO+r
efymfZrkAfVHNTr4wJyov/FQENxkyiailESW0KUA8ce3XOT68ut9fgDZzAwHKK2w
A3RNK4kN4ISSOHfx4iKCpegDDVxchgbiUfs7Fk233c5vq+4Fv8FfOFT9sZkBTAr1
qMcl5RqyJzorNsIRClIIThYouZ765jMTLi5rluv4p/jcqeYFy/KiAqjCfhBXBbzV
HP/dqcZ8KO+H4KiUVJ/BTv5vZELQpzLEcb9NP2ojE4lWmtuBTnWoX3O1/TTtdUwb
bMEOxt52rQjL7w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:53:25 2026 by rpki-client