Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          0X3Pw+tg9p4AVjKfrbG/YEUPeMJK7dSq84IjfNO7RIo=
Subject key identifier:   67:34:C9:13:CC:60:98:05:E3:65:AE:57:D9:7B:86:85:8A:FB:8C:C6
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       01A1DDCC4DAF473F17FD5E230EC4350B09DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          0E9C
Signing time:             Sun 15 Nov 2026 06:01:56 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:56 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:56 +0000
Files and hashes:         1: 4WPjuQdcTYFuaKklmsOnpFVG_k8.roa (hash: RCXd7tm0HqyMJHrZAkQGbR+ZGjGMt/XtYWeMv5QHcoU=)
                          2: 8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa (hash: DGlt++jIzcEyf2YY8cq7I9ry7xE+xVwo5HjB9DimFnk=)
                          3: _lawUkPbMS6rKq0eJzdtFnozaP0.roa (hash: 8VAyeac9InM+D4DkCVJjHuFb1ne2vlYSxpVOPX8DTlI=)
                          4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: 3P2au6ZIucaeg6A8KBi1PEkF5gBSLVoTBFzWgSIocXs=)
                          5: gzebHHHdaAflLrSgmd5cMThOPRk.roa (hash: UBALfYvCwMk1MgWprKN2MTqfVcb3bMaQ5vxtJue2TL0=)
                          6: xzXaYpELPohXHyaBsryyzKsxpi8.roa (hash: Pac357tmTBXSGA3lzxCsfoP5+/cvABrR8JYDv2qCuqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:4d:af:47:3f:17:fd:5e:23:0e:c4:35:0b:09:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Nov 15 06:01:56 2026 GMT
            Not After : Nov 16 06:01:56 2026 GMT
        Subject: CN=6734c913cc609805e365ae57d97b86858afb8cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:62:d2:06:1d:86:20:87:31:c5:e8:b4:59:
                    26:c3:39:0d:03:76:51:f1:92:23:b5:38:86:56:af:
                    78:50:f8:f3:89:3d:27:c8:a3:92:6d:d9:f1:7a:ed:
                    b5:4e:d4:13:97:8b:0f:49:34:68:5b:d4:5d:6c:06:
                    40:e0:38:7a:4b:2f:83:a2:d0:f9:36:b6:3a:c0:41:
                    e5:4a:9a:1a:21:76:ef:e6:14:17:a8:57:d3:96:5d:
                    4b:06:94:0a:91:85:ae:9d:3c:06:0e:de:9c:b1:3f:
                    24:99:a0:89:6c:2c:15:ad:50:b1:fd:31:dc:ca:4a:
                    67:9e:a8:0e:38:68:fb:94:72:85:0e:73:c5:f8:9d:
                    2e:55:5a:80:8b:0f:e6:0a:d5:cc:2e:a5:fe:51:a6:
                    47:74:df:da:e9:4b:15:91:74:8e:89:11:38:a8:25:
                    c1:e0:90:59:86:ea:8c:30:a2:26:26:d5:80:46:2d:
                    53:2b:99:09:42:72:13:6f:8e:21:8a:00:83:db:0a:
                    37:12:4e:38:2c:e3:da:95:c5:d9:58:6d:1f:78:96:
                    7f:24:dc:d0:e0:72:68:5b:9f:71:57:75:e6:00:1b:
                    3b:97:28:91:f2:ef:ef:8e:44:a2:77:79:57:45:60:
                    be:bb:79:d3:d2:f2:97:84:b2:4f:f5:af:c0:8d:8d:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:34:C9:13:CC:60:98:05:E3:65:AE:57:D9:7B:86:85:8A:FB:8C:C6
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:55:9f:d0:6e:ae:a1:1d:48:5e:98:c3:48:1d:3d:5d:c8:db:
         18:a2:24:65:89:94:8d:02:29:32:88:6a:44:68:07:70:49:21:
         75:f8:f5:59:3c:6b:87:fb:73:f4:08:7b:43:eb:15:31:bb:b8:
         04:da:48:14:65:ce:84:de:57:55:30:10:82:0c:1a:79:c9:50:
         d9:6e:dd:e1:3f:bb:23:29:b2:31:2c:42:5c:a8:f7:ac:37:b8:
         23:7d:e7:75:88:ef:cd:0d:80:1a:9c:10:cc:8c:05:68:64:71:
         5d:fa:bb:92:11:64:1f:c4:49:db:6a:d9:94:bb:3c:41:d6:91:
         65:37:86:24:df:63:9e:40:6f:cd:af:41:2f:49:d1:bf:c7:c2:
         21:3d:ca:84:aa:69:37:fe:8d:84:a5:89:05:ee:41:ed:5e:f4:
         3c:19:b4:5a:29:c0:26:1e:93:ae:80:e3:e8:12:e4:13:56:c8:
         c7:92:1c:ba:5f:4b:36:22:7b:b0:3b:02:b3:00:bf:82:94:e0:
         07:d3:8a:2f:67:3b:6d:81:f0:81:40:35:3c:69:7a:9f:3c:82:
         33:aa:cf:5d:61:c7:a5:77:a1:bf:b7:35:29:7f:1d:60:83:f7:
         f5:cd:7c:00:b6:c0:84:a1:51:b6:e7:6f:66:d3:a5:3a:ee:1a:
         b7:c5:2f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzE2vRz8X/V4jDsQ1CwnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0
ZjJkOTIwHhcNMjYxMTE1MDYwMTU2WhcNMjYxMTE2MDYwMTU2WjAzMTEwLwYDVQQD
Eyg2NzM0YzkxM2NjNjA5ODA1ZTM2NWFlNTdkOTdiODY4NThhZmI4Y2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR1i0gYdhiCHMcXotFkmwzkNA3ZR
8ZIjtTiGVq94UPjziT0nyKOSbdnxeu21TtQTl4sPSTRoW9RdbAZA4Dh6Sy+DotD5
NrY6wEHlSpoaIXbv5hQXqFfTll1LBpQKkYWunTwGDt6csT8kmaCJbCwVrVCx/THc
ykpnnqgOOGj7lHKFDnPF+J0uVVqAiw/mCtXMLqX+UaZHdN/a6UsVkXSOiRE4qCXB
4JBZhuqMMKImJtWARi1TK5kJQnITb44higCD2wo3Ek44LOPalcXZWG0feJZ/JNzQ
4HJoW59xV3XmABs7lyiR8u/vjkSid3lXRWC+u3nT0vKXhLJP9a/AjY1FnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc0yRPMYJgF42WuV9l7hoWK+4zGMB8GA1UdIwQY
MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt
MGUxYjhmZWE4OTEzLzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz
LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFWf0G6u
oR1IXpjDSB09XcjbGKIkZYmUjQIpMohqRGgHcEkhdfj1WTxrh/tz9Ah7Q+sVMbu4
BNpIFGXOhN5XVTAQggwaeclQ2W7d4T+7IymyMSxCXKj3rDe4I33ndYjvzQ2AGpwQ
zIwFaGRxXfq7khFkH8RJ22rZlLs8QdaRZTeGJN9jnkBvza9BL0nRv8fCIT3KhKpp
N/6NhKWJBe5B7V70PBm0WinAJh6TroDj6BLkE1bIx5Icul9LNiJ7sDsCswC/gpTg
B9OKL2c7bYHwgUA1PGl6nzyCM6rPXWHHpXehv7c1KX8dYIP39c18ALbAhKFRtudv
ZtOlOu4at8UveQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:48:07 2026 by rpki-client