Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File:                     1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier:          socTjLqQBTwByRjRPpm72XmKl3KwYWph0gaAtrJ6Bz8=
Subject key identifier:   1F:84:CE:8A:C4:20:7B:DD:35:49:F4:03:DD:76:98:3D:06:65:D2:35
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer:       /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial:       01A1C40BB3FD3BCE65DEE9291ECBE643BAC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number:          168F
Signing time:             Tue 10 Nov 2026 06:01:03 +0000
Manifest this update:     Tue 10 Nov 2026 06:01:03 +0000
Manifest next update:     Wed 11 Nov 2026 06:01:03 +0000
Files and hashes:         1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: YTYT3NGLyIwJXYmR8XP/TrSC4Ow/tk46oVLIilHGeV0=)
                          2: 4h5jFmUAHogYMzFmPzLef51aEOo.roa (hash: +Vnh/sN48kb2A3UtpPAdLkn1qR/raYPxhCm9aIXa9vk=)
                          3: IejMQZqryCYEJhPt3g_AUlVHwbc.roa (hash: nNLRvEhZpJTRNsbKaW/XctbPiknRbtd4nqAjqgh3BSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 22:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c4:0b:b3:fd:3b:ce:65:de:e9:29:1e:cb:e6:43:ba:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
        Validity
            Not Before: Nov 10 06:01:03 2026 GMT
            Not After : Nov 11 06:01:03 2026 GMT
        Subject: CN=1f84ce8ac4207bdd3549f403dd76983d0665d235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:7c:dc:b1:34:4e:c7:a9:7d:4e:87:3d:40:
                    82:0f:e2:78:2b:2a:e1:a3:9c:89:f7:11:0d:0a:f9:
                    07:c3:e5:d2:2e:3e:2e:f1:af:04:21:a3:50:d8:1c:
                    8b:20:ba:c6:3a:ef:63:5c:73:79:d3:30:9f:22:3f:
                    e7:07:8e:1d:e1:a8:73:a6:b3:8c:0c:92:8d:cb:ff:
                    ba:67:24:39:66:79:54:c5:c5:af:0b:83:32:f6:90:
                    d3:71:0f:9d:c5:b3:c6:2b:2a:0c:da:0f:41:17:47:
                    ce:ba:bd:d9:72:d6:57:33:57:4f:27:e8:77:ac:c5:
                    3e:37:14:43:b1:fe:99:5e:ef:10:05:62:5a:09:3a:
                    62:a5:50:10:94:7f:23:be:b0:51:8d:1d:32:0f:db:
                    e1:c7:9d:e0:de:8d:35:72:0d:06:24:9d:0e:9c:ff:
                    12:48:5c:05:91:1a:dd:7f:37:0d:b7:2e:f0:31:a0:
                    11:d4:1d:76:9d:77:d5:8a:3a:1f:e5:0e:b7:6d:f3:
                    b3:08:71:73:c3:90:a0:63:2c:c6:81:54:1b:79:52:
                    8e:86:d9:b0:02:95:1c:08:1a:3f:60:f5:2a:ef:74:
                    3e:11:4b:ab:27:1f:e5:97:69:08:41:1a:a6:28:df:
                    c0:2b:30:e5:ca:6b:81:b4:70:3c:dc:39:46:5d:6f:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:84:CE:8A:C4:20:7B:DD:35:49:F4:03:DD:76:98:3D:06:65:D2:35
            X509v3 Authority Key Identifier:
                keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:b9:37:2b:88:8b:bc:94:d6:b4:80:3c:1d:9c:a8:5e:16:
         b5:e1:35:e5:29:8e:12:a6:93:eb:d3:ac:42:fc:a1:17:7a:e4:
         d9:32:ad:1c:6f:d9:9a:20:89:b2:31:63:f7:91:25:ca:ab:8a:
         28:af:6a:c3:9f:48:44:cd:69:6d:5a:f2:64:15:e3:4d:4e:3d:
         34:6a:c9:d0:d8:20:81:20:83:b9:98:26:cf:fb:11:0b:90:73:
         1e:c0:34:01:a1:80:e8:f2:b1:64:ac:83:9f:40:c5:fa:01:ca:
         96:f5:94:bd:b6:b1:1e:0d:1f:59:99:a4:de:03:28:92:bc:d0:
         91:84:39:84:5c:45:6d:0b:cb:de:78:12:d6:e0:04:13:38:ec:
         1d:ca:67:15:e7:f5:ea:a4:dd:85:36:e9:41:9d:ef:35:4e:1e:
         93:44:66:d7:e7:55:3f:17:71:1b:d6:0e:33:51:a6:30:a1:50:
         f5:99:e7:d0:37:50:09:45:00:56:c5:64:be:b2:3e:19:2c:9e:
         6d:42:1c:3d:06:49:b6:74:df:ce:1f:c3:4f:35:da:8d:74:84:
         f3:62:18:2a:a4:03:5a:9d:c4:bc:e6:61:ad:c9:b9:4b:ae:f2:
         dc:3f:04:8d:e1:c3:fa:f6:00:03:47:55:a3:78:2b:fa:22:8b:
         13:dc:ee:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHEC7P9O85l3ukpHsvmQ7rDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDBmYjM5ZDZiMTFmZDE1ZmNiYjQxNjM0MDMxNTVkMWQ0
NTVjMDUwHhcNMjYxMTEwMDYwMTAzWhcNMjYxMTExMDYwMTAzWjAzMTEwLwYDVQQD
EygxZjg0Y2U4YWM0MjA3YmRkMzU0OWY0MDNkZDc2OTgzZDA2NjVkMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6x83LE0TsepfU6HPUCCD+J4Kyrh
o5yJ9xENCvkHw+XSLj4u8a8EIaNQ2ByLILrGOu9jXHN50zCfIj/nB44d4ahzprOM
DJKNy/+6ZyQ5ZnlUxcWvC4My9pDTcQ+dxbPGKyoM2g9BF0fOur3ZctZXM1dPJ+h3
rMU+NxRDsf6ZXu8QBWJaCTpipVAQlH8jvrBRjR0yD9vhx53g3o01cg0GJJ0OnP8S
SFwFkRrdfzcNty7wMaAR1B12nXfVijof5Q63bfOzCHFzw5CgYyzGgVQbeVKOhtmw
ApUcCBo/YPUq73Q+EUurJx/ll2kIQRqmKN/AKzDlymuBtHA83DlGXW/paQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFB+EzorEIHvdNUn0A912mD0GZdI1MB8GA1UdIwQY
MBaAFPrQ+znWsR/RX8u0FjQDFV0dRVwFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10RDdPZGF4SDlGZnk3UVdOQU1WWFIxRlhBVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvMzA0ZTNkLTFmMGUtNDRlYi1iMmMx
LWU3OTJmODljYmNlMi8xLzEtdEQ3T2RheEg5RmZ5N1FXTkFNVlhSMUZYQVUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzMwNGUzZC0xZjBlLTQ0ZWItYjJjMS1lNzkyZjg5Y2Jj
ZTIvMS8xLXREN09kYXhIOUZmeTdRV05BTVZYUjFGWEFVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLS5
NyuIi7yU1rSAPB2cqF4WteE15SmOEqaT69OsQvyhF3rk2TKtHG/ZmiCJsjFj95El
yquKKK9qw59IRM1pbVryZBXjTU49NGrJ0NgggSCDuZgmz/sRC5BzHsA0AaGA6PKx
ZKyDn0DF+gHKlvWUvbaxHg0fWZmk3gMokrzQkYQ5hFxFbQvL3ngS1uAEEzjsHcpn
Fef16qTdhTbpQZ3vNU4ek0Rm1+dVPxdxG9YOM1GmMKFQ9Znn0DdQCUUAVsVkvrI+
GSyebUIcPQZJtnTfzh/DTzXajXSE82IYKqQDWp3EvOZhrcm5S67y3D8EjeHD+vYA
A0dVo3gr+iKLE9zu4A==
-----END CERTIFICATE-----
Generated at Tue Nov 10 08:54:32 2026 by rpki-client