Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          FCTWErkBfssOV036gnx9pd+Q+JuaAbWek2s1voCyld8=
Subject key identifier:   92:0B:58:97:02:DD:84:9C:64:86:3B:9C:1E:98:66:93:07:31:6F:D2
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       01A1DD9482BA9C1D231C06EA0F8C5EEDCC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          15FF
Signing time:             Sun 15 Nov 2026 05:00:59 +0000
Manifest this update:     Sun 15 Nov 2026 05:00:59 +0000
Manifest next update:     Mon 16 Nov 2026 05:00:59 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: kWV2WLXZ+ba+8nCZM49tk9SB5TIXU6CvZvV3o99r66U=)
                          2: vUFwfEY11W7JpynTF9BbfUWs9-w.roa (hash: eu7mWQahLyPxvPg5BFYa4l+E4W1NHB0xDJbdLJnBmrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:82:ba:9c:1d:23:1c:06:ea:0f:8c:5e:ed:cc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Nov 15 05:00:59 2026 GMT
            Not After : Nov 16 05:00:59 2026 GMT
        Subject: CN=920b589702dd849c64863b9c1e98669307316fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:c2:a7:d7:96:bc:6e:f6:83:00:03:5b:8b:
                    ab:e2:6c:4b:8c:cc:b4:85:5b:b9:f2:dd:fb:40:a0:
                    62:63:70:7d:45:fb:cc:73:de:50:40:2f:1f:3a:dc:
                    a0:f8:f2:75:74:14:f0:9f:65:51:d6:f7:5d:c1:d3:
                    88:5c:f7:c6:ea:66:24:65:78:35:05:9e:57:94:84:
                    a1:0d:94:f6:b5:49:f9:73:d5:74:40:b6:28:2d:69:
                    fb:e6:25:9b:ba:56:e4:89:3c:0f:9c:b5:14:a3:2d:
                    d2:a4:cc:10:9f:23:0d:03:0a:6a:0e:2e:c0:ea:46:
                    cb:0d:42:20:9c:ed:ec:4f:15:fb:49:40:91:85:ce:
                    58:f1:62:c7:ef:bc:d1:8d:37:cd:d3:6d:b5:a8:0e:
                    f5:68:1f:cc:1b:d6:c6:cd:9b:37:92:c9:9e:11:fd:
                    33:57:25:56:f3:db:84:14:65:10:31:fe:8c:ef:27:
                    9b:e5:cf:47:25:87:64:67:6c:49:c8:bb:41:eb:e5:
                    3d:55:7b:c9:56:92:45:00:bd:03:8b:b3:e0:d4:cf:
                    32:f8:71:7c:24:ee:d0:bd:f3:f6:36:18:88:af:57:
                    59:f1:c3:9f:cc:ac:e6:eb:72:df:47:a6:3f:40:06:
                    1e:eb:f5:e9:2e:b9:39:88:4a:9e:7e:49:15:8c:f4:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0B:58:97:02:DD:84:9C:64:86:3B:9C:1E:98:66:93:07:31:6F:D2
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c7:dd:7c:25:2e:1a:86:f8:3f:a2:a5:77:36:36:e2:31:3c:
         de:da:71:33:c3:85:c3:85:17:95:bc:cb:08:c3:bc:d9:15:fd:
         0a:a9:3c:c5:6a:d0:c9:3f:a8:3a:ed:7e:a9:34:eb:da:d2:79:
         48:5a:e7:2c:61:c4:13:b0:d1:1c:60:d7:06:b7:82:e6:4f:35:
         db:32:0c:c0:70:cc:34:d5:bd:37:ef:5f:c7:22:15:05:dd:cd:
         03:3e:a9:e6:37:f0:38:6d:49:e5:46:4c:73:c0:20:44:b4:a1:
         c8:b8:63:e3:8f:79:6c:f6:ef:e7:d7:08:69:a2:94:1b:08:5b:
         66:24:1d:71:3b:b5:e0:1d:cd:37:cf:8d:aa:74:da:46:11:63:
         07:c7:3e:6c:c9:89:df:28:08:b4:bf:6f:34:a6:9e:c2:9d:11:
         a8:df:88:e5:7f:e3:8c:cf:45:23:90:d6:20:18:b3:80:63:bf:
         4a:61:62:de:ca:a0:24:0c:9d:48:c2:d6:90:89:5c:2a:fb:f0:
         08:13:00:7c:d6:f2:31:ae:cd:9e:98:fa:94:e8:ef:b6:40:56:
         7d:93:c3:9b:6c:c4:46:65:aa:bb:dc:82:55:6b:25:02:6e:88:
         13:5f:4d:78:a2:88:95:e3:a5:b3:4a:1a:f4:22:34:30:b8:67:
         a2:cd:5e:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlIK6nB0jHAbqD4xe7cyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2M4NWM0NDJjY2FiNzVlMmNlNmRlMjlkYjVmZDAwZjMy
Njc0OWQwHhcNMjYxMTE1MDUwMDU5WhcNMjYxMTE2MDUwMDU5WjAzMTEwLwYDVQQD
Eyg5MjBiNTg5NzAyZGQ4NDljNjQ4NjNiOWMxZTk4NjY5MzA3MzE2ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq7Cp9eWvG72gwADW4ur4mxLjMy0
hVu58t37QKBiY3B9RfvMc95QQC8fOtyg+PJ1dBTwn2VR1vddwdOIXPfG6mYkZXg1
BZ5XlIShDZT2tUn5c9V0QLYoLWn75iWbulbkiTwPnLUUoy3SpMwQnyMNAwpqDi7A
6kbLDUIgnO3sTxX7SUCRhc5Y8WLH77zRjTfN0221qA71aB/MG9bGzZs3ksmeEf0z
VyVW89uEFGUQMf6M7yeb5c9HJYdkZ2xJyLtB6+U9VXvJVpJFAL0Di7Pg1M8y+HF8
JO7QvfP2NhiIr1dZ8cOfzKzm63LfR6Y/QAYe6/XpLrk5iEqefkkVjPQsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJILWJcC3YScZIY7nB6YZpMHMW/SMB8GA1UdIwQY
MBaAFOt8hcRCzKt14s5t4p21/QDzJnSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMt
NGU2NTlkMmJlNjU0LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMtNGU2NTlkMmJlNjU0
LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcfdfCUu
Gob4P6KldzY24jE83tpxM8OFw4UXlbzLCMO82RX9Cqk8xWrQyT+oOu1+qTTr2tJ5
SFrnLGHEE7DRHGDXBreC5k812zIMwHDMNNW9N+9fxyIVBd3NAz6p5jfwOG1J5UZM
c8AgRLShyLhj4495bPbv59cIaaKUGwhbZiQdcTu14B3NN8+NqnTaRhFjB8c+bMmJ
3ygItL9vNKaewp0RqN+I5X/jjM9FI5DWIBizgGO/SmFi3sqgJAydSMLWkIlcKvvw
CBMAfNbyMa7Nnpj6lOjvtkBWfZPDm2zERmWqu9yCVWslAm6IE19NeKKIleOls0oa
9CI0MLhnos1eXA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:50:50 2026 by rpki-client