Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File:                     55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier:          OFs2RjxVLm77qr9lxMunCv9alFCSUrmw9irLQUkKPf4=
Subject key identifier:   AF:30:D4:AD:A8:16:92:2D:53:C5:FE:C6:A4:BA:2D:74:9E:92:67:1C
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer:       /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial:       01A1DF834330B23CE211224BDD3EC6327707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number:          15F5
Signing time:             Sun 15 Nov 2026 14:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:23 +0000
Files and hashes:         1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: j9XP9wKnCI4oSNPQr8vqOkhw9KWQxp7pd/m67EAy4tI=)
                          2: JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa (hash: rObYpAP50FsAJbWUILnwA87gkFrmltk/+8uJWoHJQsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:43:30:b2:3c:e2:11:22:4b:dd:3e:c6:32:77:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
        Validity
            Not Before: Nov 15 14:01:23 2026 GMT
            Not After : Nov 16 14:01:23 2026 GMT
        Subject: CN=af30d4ada816922d53c5fec6a4ba2d749e92671c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:41:3d:b4:a6:2b:a7:94:80:48:88:11:2f:
                    08:11:e5:d1:a7:3b:6d:9d:97:12:44:54:c2:25:4d:
                    62:5e:25:43:69:29:54:b5:56:80:5a:d9:5e:2d:59:
                    8b:8e:da:84:67:91:07:eb:3c:e7:8e:47:30:c8:19:
                    e3:32:29:f9:b5:d3:ea:22:b2:bd:39:2b:16:32:c7:
                    93:f3:c8:cb:db:62:12:e2:09:c5:21:d7:31:06:39:
                    23:02:23:30:ff:7c:27:06:3a:6b:cc:ed:b1:12:55:
                    ab:32:4e:ae:b4:cb:15:11:80:e3:ac:5a:5c:23:e7:
                    12:46:9f:6e:6d:9d:95:b0:9a:30:e8:5d:84:aa:8d:
                    48:4b:08:e0:12:27:3f:14:ae:45:a8:cd:d1:12:0d:
                    6b:01:34:31:d5:86:c4:8f:48:00:e2:8e:9e:48:80:
                    c0:95:83:86:e3:70:66:aa:1e:62:1e:94:b3:6d:78:
                    77:0f:21:0c:b4:c4:3b:03:80:68:85:7e:af:4e:92:
                    52:ae:98:17:f5:68:8c:78:42:24:2a:8c:99:1c:f1:
                    3f:de:c0:79:d1:fc:d6:d7:ab:df:4b:32:ee:00:50:
                    01:cb:b2:67:f3:c0:b8:23:86:00:7d:fb:11:0e:19:
                    86:54:d9:10:6d:1d:12:26:be:e6:6e:63:5e:f3:6a:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:D4:AD:A8:16:92:2D:53:C5:FE:C6:A4:BA:2D:74:9E:92:67:1C
            X509v3 Authority Key Identifier:
                keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:00:c7:92:d2:0e:06:4e:91:ad:1a:e7:a2:98:48:19:bc:a5:
         ca:c8:c7:99:f7:2b:2f:45:d1:39:94:a5:c5:3f:a1:1b:0d:b0:
         b5:c8:54:5f:d7:aa:7c:b5:ec:32:84:77:7e:8b:c4:ed:20:99:
         88:97:fa:2a:e8:21:ef:9e:cf:49:73:95:d5:c4:b2:0c:51:27:
         24:06:dc:f2:c3:6e:26:db:db:97:8c:79:c3:c3:85:44:7a:dd:
         a1:31:3d:37:b4:7e:20:21:f8:59:8b:ec:00:8d:21:45:d7:02:
         be:88:1f:8f:98:f5:9c:00:5e:0b:5a:c1:10:79:96:fe:77:2b:
         4d:55:29:60:14:7f:77:01:d0:49:28:c8:f2:1a:58:18:83:8c:
         e3:9e:e5:58:22:2c:ef:de:1d:0f:bd:40:83:91:2e:14:c0:73:
         c5:08:de:c0:03:88:8a:0b:73:c8:b3:02:b9:b9:b2:ee:52:a1:
         ca:0a:90:b3:21:97:6a:bd:cd:f8:14:51:31:f2:8a:24:d9:e5:
         3d:71:40:00:b0:3c:f7:1d:5b:0f:87:f4:d2:20:63:7a:46:3c:
         2e:40:1d:e2:c3:70:c6:be:1a:ee:92:77:74:7d:54:fb:95:a1:
         8b:dd:d5:5c:82:2a:d0:16:fa:84:62:a7:83:61:ad:f3:59:84:
         bd:27:55:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfg0MwsjziESJL3T7GMncHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh
MjQ0ZmEwHhcNMjYxMTE1MTQwMTIzWhcNMjYxMTE2MTQwMTIzWjAzMTEwLwYDVQQD
EyhhZjMwZDRhZGE4MTY5MjJkNTNjNWZlYzZhNGJhMmQ3NDllOTI2NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR1BPbSmK6eUgEiIES8IEeXRpztt
nZcSRFTCJU1iXiVDaSlUtVaAWtleLVmLjtqEZ5EH6zznjkcwyBnjMin5tdPqIrK9
OSsWMseT88jL22IS4gnFIdcxBjkjAiMw/3wnBjprzO2xElWrMk6utMsVEYDjrFpc
I+cSRp9ubZ2VsJow6F2Eqo1ISwjgEic/FK5FqM3REg1rATQx1YbEj0gA4o6eSIDA
lYOG43Bmqh5iHpSzbXh3DyEMtMQ7A4BohX6vTpJSrpgX9WiMeEIkKoyZHPE/3sB5
0fzW16vfSzLuAFABy7Jn88C4I4YAffsRDhmGVNkQbR0SJr7mbmNe82pFnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8w1K2oFpItU8X+xqS6LXSekmccMB8GA1UdIwQY
MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt
NDJiZDkyZjMwYTk3LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3
LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwDHktIO
Bk6RrRrnophIGbylysjHmfcrL0XROZSlxT+hGw2wtchUX9eqfLXsMoR3fovE7SCZ
iJf6Kugh757PSXOV1cSyDFEnJAbc8sNuJtvbl4x5w8OFRHrdoTE9N7R+ICH4WYvs
AI0hRdcCvogfj5j1nABeC1rBEHmW/ncrTVUpYBR/dwHQSSjI8hpYGIOM457lWCIs
794dD71Ag5EuFMBzxQjewAOIigtzyLMCubmy7lKhygqQsyGXar3N+BRRMfKKJNnl
PXFAALA89x1bD4f00iBjekY8LkAd4sNwxr4a7pJ3dH1U+5Whi93VXIIq0Bb6hGKn
g2Gt81mEvSdVJw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:35:17 2026 by rpki-client