Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
File:                     fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json)
Hash identifier:          vvkFxZ4Bw9WTCDJswMwvebFQsgySmadYemOS5u2nJC0=
Subject key identifier:   88:89:66:11:85:31:3D:47:F2:7F:34:0B:D4:08:87:41:37:D3:5C:0F
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       01A1DF4C91ABDE0422AE4FF1482E37B40392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
Manifest number:          171B
Signing time:             Sun 15 Nov 2026 13:01:39 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:39 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:39 +0000
Files and hashes:         1: 0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa (hash: 9PNcCkZrauXgW+3YFUtyOx9/rmS3W9JA5UUSg4BFsGU=)
                          2: 2diwtm0Zbf_bmsdktiMcMcOMQg8.roa (hash: eVMbVKsLzh2plyfnoFozWhZn/xVtpLdpwRt+PjQnri4=)
                          3: 2hKTftFtuQRMT1oaso9aJ2Fwbhs.roa (hash: yt73gkjCnEpWOl4mDI2UvWLYkd+MzKzlxXOQLXQ8/rg=)
                          4: 3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa (hash: 5c1NCBuQPjwD9eR+7rowyJnrFaKqJ48pXAIHslQmr00=)
                          5: 8NYcGLI50NHf_-GqbpzZZr4ltLA.roa (hash: fEaVNw2Wyd4+MGZ7FzjbEUafcEBr+2hDrYVvqLoZo5Q=)
                          6: 8jfqpIUKuOw3bEeNl0QjuTIts5w.roa (hash: lA+JjzalnUsshqDeIEjkif9B6fmiylkMishkEuJTw+c=)
                          7: 9JzLr_kY6fV9XLrISkFEllTE8Yg.roa (hash: vLCl7UqAkvLu4Gv7Uv3OI5gYhrAd84MopPXeYDD7onk=)
                          8: 9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa (hash: jjpO0DxwKQMyYQwBPNQVarsVnFCb4DMo73zMMJVeyFI=)
                          9: BHMecBG9x9xUY8jTjlOT7nNxN9k.roa (hash: HYJY2r76YQlta0gJBproON2MhOd3SZjrPkPVpXkWpDU=)
                          10: Ez7vdg6eB07lFL05DPjqJKCOdIo.roa (hash: fBYYvlQ87n8J9SuhX/gsPnpOFHNxq/I9XnmkEjxP+Js=)
                          11: FLQX7VTxwFaQrQRyhh5AZ1ehPTU.roa (hash: TCoATecBzXKE+6xHAeP7h7guA+jHThVu36yV5nbsOcM=)
                          12: HMUv5O_IloNPK-xnYoboUUQaw9I.roa (hash: pWKPihhcLAd/kMZDUiPWP3Bf2PaOFgTs9krixFbyXKg=)
                          13: M23E5jFvo9QE4PZ22sZCcc77gm0.roa (hash: ez6ZtNmZWmq4SxAtsTn9ZRzqCWD4ICp/AVepQiwyNEI=)
                          14: M9SkjzKgp0C1w36F_3V-rwxzPrM.roa (hash: NOgmWBFIBR8qfeBLcrBHcBrGBBxychhI5zlw8nvAaeE=)
                          15: TCIbufkPjrOPAFHbaMVz2PJuwNQ.roa (hash: WtRiQqaxy0ZXMWLqBVnrOC4eZHImJ1xhzNYsapZ1pnA=)
                          16: UiWVNnunpHFmIczXpq49fnvJeYs.roa (hash: w0Bd3rOlh3OoeFYCrP5Yaea4iK5WgTyMFaHq0kqZRqk=)
                          17: WToUjwUwqxWGFX7YfgHrsOMgM_8.roa (hash: kIIRszKRMT6GNaYzUy0dv+/IIIR5RaGl85LSnUgSJ+k=)
                          18: ZmxAzTdpyOHGn1oGXDJkCvMWh_A.roa (hash: RJ1urSQtZ0MaFoKerRAcxgAUxsoMUSf8Kqmy+pHBJcs=)
                          19: bxDMk8rDIjX1JIaOhPkkS6agVn8.roa (hash: qdJb7Cn9TFHTehw1Um25RR8YIvGg9qXGmexGQanw2Jc=)
                          20: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: HmlihvF1A0AjbIztprPON9jTcv6+jiOE0S67OFzifIY=)
                          21: gnDB9W02-r6mUcSzv9GpwgZT3jo.roa (hash: xF1q8i5GseG2Y/ChOFm114hCxbfrQRyX8F0vQWk71OI=)
                          22: go1rZLit0ECxEQHq3kpBk2CE4Qg.roa (hash: hJVabNE+muWiI6lmIeSiA8icGMZrwMb4YKQs1wbCUu8=)
                          23: kx0iDFbsXmf1_joPchYNl-Qa3D0.roa (hash: 0natnuOE/XONkp7+7SAGpqgXtC+NNO9MQZlBw7eJSr0=)
                          24: lqCu78LtvHJishdD6N4eR-R7RIM.roa (hash: iKTkz66NrpLAcH4+xiDnu+/37wuOGvm5ZNIxFMyUSUw=)
                          25: ovaw2-C0aLc15MUNM--nHeVzXAk.roa (hash: k6KOhUlHQLtwN5AMkDyj19Newr/qZ7SL0hXw1sn09K8=)
                          26: ovqAK3pYOqxaHlVK-LqO8cHqIYM.roa (hash: W0pJB/sjr5+69ynLbPfenFx2cuPhFShby13x0oho2no=)
                          27: pv9Cpord1y0tCGV7NVJXrmWgS28.roa (hash: ue24VSBSX2J82akgvFk1ddcbgpuIzB8HeE+GFQFimS4=)
                          28: qvYAP-lSXmNoClOM3rygyr0zdI0.roa (hash: XZWaUj3+lj06izt55k5PBSAGEgz79sdEGihL99kraEo=)
                          29: xWAzCmZMcG-JDSiQJKOLozSrRc0.roa (hash: lzdIYy1HSi547j5LHsPdxL03SsyIBHEZ8dTINmo4ArY=)
                          30: zN7eJocMGhWq5niF73RM-dIuVIM.roa (hash: oo32X248IIf2Wa+j4gsxo5ikGlQv9o+0FiBYs6RXCgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:91:ab:de:04:22:ae:4f:f1:48:2e:37:b4:03:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Nov 15 13:01:39 2026 GMT
            Not After : Nov 16 13:01:39 2026 GMT
        Subject: CN=8889661185313d47f27f340bd408874137d35c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:5b:d5:74:1c:04:31:eb:7b:73:80:7a:d2:
                    3a:64:a4:4b:f7:e1:17:75:8e:e0:c9:e3:ff:c6:56:
                    6d:e5:57:3d:fe:23:26:f7:9c:26:b5:a8:7d:a6:80:
                    a7:51:e3:f6:76:a7:6b:4a:f8:d1:ef:94:c2:88:43:
                    13:2d:26:05:60:7c:e0:cf:31:9e:d1:85:6a:9f:dc:
                    06:f0:4e:66:78:2f:4e:a8:80:5b:4c:d2:df:1d:50:
                    6e:45:6d:de:d2:d6:1e:c4:e9:64:9a:49:8f:1c:e0:
                    5e:5e:cb:2c:85:b7:cc:c7:33:f2:66:59:e4:07:5f:
                    c4:17:13:ee:08:4e:12:66:37:3e:4a:10:0f:99:a0:
                    37:eb:ca:55:b6:b0:e0:18:c5:8c:b6:1c:ac:3e:94:
                    9a:2d:e4:2f:ee:ea:f6:ee:8f:7a:29:9f:9d:22:fd:
                    cb:b6:dc:cd:53:ac:f6:7a:d0:dc:50:e8:4f:af:1b:
                    34:1d:99:b4:32:53:53:36:ec:d8:9c:89:5a:ec:82:
                    e9:dc:ae:82:45:40:cf:3d:09:49:4d:f5:32:64:d1:
                    54:98:26:ae:ad:43:e3:24:f5:7e:70:25:77:22:c4:
                    38:8e:00:65:1f:73:83:0f:64:88:7f:82:d5:f9:a1:
                    82:a6:ff:92:79:03:c3:57:3a:35:6c:78:9e:73:1f:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:89:66:11:85:31:3D:47:F2:7F:34:0B:D4:08:87:41:37:D3:5C:0F
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:7a:45:91:ca:49:a8:72:b0:66:d2:5b:6b:07:5e:28:29:50:
         71:d5:e7:37:a9:af:de:bf:5b:50:80:db:51:74:45:b7:b3:c2:
         27:99:16:a1:a8:30:73:42:57:1d:be:5b:ad:85:75:a9:bb:b2:
         f0:04:fe:fe:98:07:a7:ef:bc:e0:c2:61:c4:da:cf:45:37:73:
         80:e2:0b:25:f9:bb:9e:87:3e:a8:72:6d:90:31:57:93:aa:0a:
         cf:0d:c8:b6:3a:95:86:7c:30:70:50:4c:ba:f8:d9:f6:64:5d:
         4e:ac:bb:28:6e:54:1e:ea:bd:c6:6f:3b:a7:32:73:21:63:6f:
         3b:14:8c:61:e1:94:eb:74:3f:b3:0e:9e:da:8c:6a:4a:26:37:
         a8:0f:ed:35:b9:b8:1a:5d:17:89:7a:28:f3:e9:25:a8:21:91:
         30:23:85:5c:65:92:29:d9:92:dc:a7:59:b3:bb:73:fe:4e:df:
         12:93:92:ce:12:e5:f3:9c:e7:e9:f3:ef:1c:24:52:46:bb:7c:
         68:54:e7:0e:0d:47:d4:4c:9b:09:ac:f3:0e:67:29:f7:31:9e:
         f3:eb:76:ce:5a:5e:45:18:03:1c:fc:64:c0:1a:57:aa:99:39:
         d7:ff:f2:83:1c:e2:ad:96:eb:91:49:10:7a:92:04:8b:3b:db:
         3f:2d:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:30:49 2026 by rpki-client