Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          auNu/BUm82OkeEGDeZ8iL8YvSIsPImJQcR6qd/6cJv4=
Subject key identifier:   00:E0:F2:82:81:7F:93:0A:12:AC:8F:52:72:EA:71:3B:CE:22:E8:15
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       01A1DDCC5635212FF5DEE019D50494D0BE9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          1B09
Signing time:             Sun 15 Nov 2026 06:01:58 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:58 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:58 +0000
Files and hashes:         1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
                          2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
                          3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
                          4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
                          5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: INowoZtsHNj5Th6fG8ny6cdahT+3jr8W7b4yJW1PSMA=)
                          7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:56:35:21:2f:f5:de:e0:19:d5:04:94:d0:be:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Nov 15 06:01:58 2026 GMT
            Not After : Nov 16 06:01:58 2026 GMT
        Subject: CN=00e0f282817f930a12ac8f5272ea713bce22e815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:93:5c:84:bd:52:3b:1c:64:af:83:78:4c:
                    f1:7b:68:72:88:3b:04:3d:01:01:bc:ef:78:db:67:
                    df:7c:72:b8:0f:8d:a6:c0:f3:50:af:be:ba:e8:5e:
                    6a:e7:ee:da:20:e6:fa:df:52:79:c9:8b:ab:51:38:
                    84:08:d9:03:8c:d9:7e:73:04:7f:f1:2d:72:01:c7:
                    9b:ed:60:0b:1f:ae:12:e5:c6:54:fe:6b:7d:af:85:
                    fb:90:98:fe:58:f9:5e:a7:2b:a8:14:9c:6a:ce:66:
                    3b:1a:f5:57:c9:92:8e:96:20:97:5e:a8:c0:d4:7d:
                    ad:82:49:d1:a1:08:6b:ff:7d:92:98:e1:60:51:bb:
                    e0:ea:22:cd:6a:1b:aa:9a:e5:db:f2:0e:a9:c9:4f:
                    7c:f9:e2:f4:09:f8:c6:39:74:41:6e:f2:90:f9:f0:
                    44:78:48:24:f0:d2:93:e3:00:2f:78:20:18:4e:e4:
                    19:71:3d:47:c0:cf:22:1e:92:dc:06:6e:3a:e2:b3:
                    61:4b:72:30:55:b7:da:ee:c4:9a:a1:bb:cf:e3:21:
                    f8:cb:41:1d:61:9a:12:fa:09:9d:f2:b8:95:f5:78:
                    9f:8e:e2:2d:0d:46:3b:85:10:90:47:a0:d0:43:39:
                    62:71:87:40:d3:2d:60:d1:f2:75:27:df:b2:61:da:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:F2:82:81:7F:93:0A:12:AC:8F:52:72:EA:71:3B:CE:22:E8:15
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:39:19:68:f9:da:a4:0d:c4:58:db:8f:8e:cf:15:69:db:4d:
         2e:64:f2:a7:ee:f5:7f:30:b5:7e:81:f3:65:35:f1:43:2f:7f:
         97:95:ef:00:a0:4b:9c:71:85:2a:7b:42:8a:a8:66:fd:ba:f0:
         96:85:92:3b:38:73:c0:2d:6d:c6:4a:12:82:c5:d6:0b:73:0f:
         b7:0f:47:6e:38:22:30:05:74:1e:f4:ed:d4:f4:6b:c0:68:f7:
         2d:fa:b0:35:00:04:3a:a3:39:73:48:1f:52:2d:cb:f6:ab:d3:
         72:f1:88:d6:44:2e:be:e3:05:b7:d5:4a:e6:e3:61:e1:98:ba:
         1e:01:b5:02:94:2d:da:af:11:6b:b3:80:bc:05:a2:31:cd:0b:
         45:09:fd:20:5f:d9:7c:5b:02:af:7c:18:1e:af:ad:71:a6:2e:
         4c:69:ed:f2:c0:f5:82:bc:12:10:3b:45:52:0c:6d:f7:9e:9c:
         a6:02:60:bb:b7:31:db:31:6f:e3:d4:0c:f0:15:5d:5b:81:75:
         4d:9d:2d:08:53:3c:da:32:f3:6e:0f:28:09:af:14:8d:83:85:
         41:39:3e:0b:17:e7:d8:78:8d:ae:21:5f:58:87:d2:51:d2:6b:
         1c:29:28:20:8b:94:d8:dc:8c:b3:23:ea:66:be:5d:67:ab:db:
         5f:80:32:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzFY1IS/13uAZ1QSU0L6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi
OTdiYTYwHhcNMjYxMTE1MDYwMTU4WhcNMjYxMTE2MDYwMTU4WjAzMTEwLwYDVQQD
EygwMGUwZjI4MjgxN2Y5MzBhMTJhYzhmNTI3MmVhNzEzYmNlMjJlODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBSTXIS9UjscZK+DeEzxe2hyiDsE
PQEBvO9422fffHK4D42mwPNQr7666F5q5+7aIOb631J5yYurUTiECNkDjNl+cwR/
8S1yAceb7WALH64S5cZU/mt9r4X7kJj+WPlepyuoFJxqzmY7GvVXyZKOliCXXqjA
1H2tgknRoQhr/32SmOFgUbvg6iLNahuqmuXb8g6pyU98+eL0CfjGOXRBbvKQ+fBE
eEgk8NKT4wAveCAYTuQZcT1HwM8iHpLcBm464rNhS3IwVbfa7sSaobvP4yH4y0Ed
YZoS+gmd8riV9XifjuItDUY7hRCQR6DQQzlicYdA0y1g0fJ1J9+yYdpUBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADg8oKBf5MKEqyPUnLqcTvOIugVMB8GA1UdIwQY
MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt
MTIwMjVjNTRmNDg0LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0
LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDkZaPna
pA3EWNuPjs8VadtNLmTyp+71fzC1foHzZTXxQy9/l5XvAKBLnHGFKntCiqhm/brw
loWSOzhzwC1txkoSgsXWC3MPtw9HbjgiMAV0HvTt1PRrwGj3LfqwNQAEOqM5c0gf
Ui3L9qvTcvGI1kQuvuMFt9VK5uNh4Zi6HgG1ApQt2q8Ra7OAvAWiMc0LRQn9IF/Z
fFsCr3wYHq+tcaYuTGnt8sD1grwSEDtFUgxt956cpgJgu7cx2zFv49QM8BVdW4F1
TZ0tCFM82jLzbg8oCa8UjYOFQTk+Cxfn2HiNriFfWIfSUdJrHCkoIIuU2NyMsyPq
Zr5dZ6vbX4AypA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:12 2026 by rpki-client