Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File:                     CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier:          vxLwbR9CP9C6nz7aI01Sun4w1xs/My347gZnL8k8GQM=
Subject key identifier:   56:33:67:AB:D5:F1:A0:6F:A0:D2:B0:62:AF:AB:15:92:89:CC:3A:45
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       01A1DF82E8C2D443155BB30B5D22A8B55879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number:          1733
Signing time:             Sun 15 Nov 2026 14:01:00 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:00 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:00 +0000
Files and hashes:         1: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: ZFyBv0mSoqWYvuhI1Ux9EcG4SR19WoE8JmUqqjuVeoI=)
                          2: Zd7N4oi7jgCKvlVl_PSF0xPERYA.roa (hash: EyGQp9Tr3UHMVF5vszwF0WIX2jRn29S+5KpDje4nblg=)
                          3: _5XI55CGPr_29rfxJRh8PWW9xI0.roa (hash: +AqJmUu9717kFBpcrIYfXtKgNzPHUS4Q+/khsyHEsCw=)
                          4: gebfehKBm0ZMvC6QIM8PvsoEboo.roa (hash: IX5MGc/yeIa0cd1NLArqnrmm5WQdn3pQJr9AOfiIcCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:82:e8:c2:d4:43:15:5b:b3:0b:5d:22:a8:b5:58:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Nov 15 14:01:00 2026 GMT
            Not After : Nov 16 14:01:00 2026 GMT
        Subject: CN=563367abd5f1a06fa0d2b062afab159289cc3a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:b6:64:1d:fa:07:c7:35:e3:12:a9:a3:1e:
                    54:9f:d5:e0:a8:d4:1f:1b:ad:8e:f7:8d:59:cf:ca:
                    2a:62:54:83:93:d6:a4:0e:dc:f3:41:2f:6b:68:3f:
                    4b:d3:04:32:96:1d:52:2f:36:e1:78:9e:ac:ea:fd:
                    17:eb:d2:26:fe:50:6b:ff:9b:66:fc:91:ad:70:7e:
                    30:09:4e:d7:98:3e:d5:82:1e:25:43:b7:a2:e7:a4:
                    0d:a1:54:a3:35:b2:e7:37:51:21:22:81:50:e6:d0:
                    41:56:8b:1e:83:d0:87:8b:09:a0:f0:1f:23:59:3d:
                    7c:7b:92:ad:85:a7:90:04:cc:ba:a9:7a:88:bb:32:
                    2b:2e:af:52:d5:6e:77:b3:b6:f7:9a:0b:06:1a:aa:
                    55:c4:a6:80:82:b9:bc:de:00:89:73:3d:5c:e1:24:
                    00:bf:b8:95:ac:fb:d5:b4:c7:f0:39:e4:45:80:c8:
                    f3:ef:8a:29:f7:6c:6f:7c:b9:a4:2b:5b:47:27:d8:
                    f9:c3:2d:ac:19:d7:f2:33:b3:88:c5:48:69:ed:af:
                    94:5f:ca:5e:b8:12:5d:ca:82:8a:8b:07:79:fc:d1:
                    6e:5c:63:ae:54:76:ec:ff:fc:23:1f:d4:de:c2:02:
                    f1:34:17:a8:65:1f:1b:90:06:80:4c:51:ce:83:2a:
                    38:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:67:AB:D5:F1:A0:6F:A0:D2:B0:62:AF:AB:15:92:89:CC:3A:45
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:49:88:f5:b1:06:1a:ec:0f:24:b6:ec:67:37:90:2e:d5:bf:
         a1:bd:55:d8:fc:4f:bf:cf:d5:2f:14:c6:48:9c:e6:f0:a0:87:
         50:a6:48:a7:f4:df:f6:37:42:84:3d:a1:94:a4:3b:ab:41:e6:
         aa:3f:f8:2c:2b:7d:17:ba:8e:3d:dd:35:cd:e0:f9:db:1f:37:
         48:8d:ff:c3:ae:f8:4e:eb:a8:1f:f3:b1:15:c0:0c:87:8f:2f:
         a1:16:b1:91:99:28:ab:83:0f:d2:6a:c6:03:41:26:e7:a6:32:
         a6:eb:46:4b:65:01:3a:a5:c8:a0:52:74:56:0d:82:31:80:f8:
         fb:38:7e:e0:b3:b2:7a:e4:ce:49:b8:5a:5b:62:9d:b1:f0:11:
         05:5d:81:02:44:bd:57:00:6b:27:dd:bb:b0:b6:65:4c:dd:5f:
         cf:ab:b3:54:2a:b6:dd:14:ce:6f:48:68:ed:f5:31:f6:b3:5d:
         3d:bb:d9:c7:73:9f:5a:c6:ee:03:14:91:ac:8d:f6:93:9b:6b:
         66:c6:52:4a:f7:2f:ab:9c:68:9d:ea:a4:66:dc:ed:19:0c:61:
         80:78:98:59:44:d4:02:85:c3:c9:00:8f:84:b0:0a:c1:56:24:
         8d:0e:57:7d:0d:01:dd:02:c4:cc:7b:e3:5f:49:a4:33:ff:e4:
         ae:90:1c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfgujC1EMVW7MLXSKotVh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDE4NDc4OTE0ODcxYWFiMGUxYzAwMzZkMzYyNmViYWQ2
ZTIwY2MwHhcNMjYxMTE1MTQwMTAwWhcNMjYxMTE2MTQwMTAwWjAzMTEwLwYDVQQD
Eyg1NjMzNjdhYmQ1ZjFhMDZmYTBkMmIwNjJhZmFiMTU5Mjg5Y2MzYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApky2ZB36B8c14xKpox5Un9XgqNQf
G62O941Zz8oqYlSDk9akDtzzQS9raD9L0wQylh1SLzbheJ6s6v0X69Im/lBr/5tm
/JGtcH4wCU7XmD7Vgh4lQ7ei56QNoVSjNbLnN1EhIoFQ5tBBVoseg9CHiwmg8B8j
WT18e5KthaeQBMy6qXqIuzIrLq9S1W53s7b3mgsGGqpVxKaAgrm83gCJcz1c4SQA
v7iVrPvVtMfwOeRFgMjz74op92xvfLmkK1tHJ9j5wy2sGdfyM7OIxUhp7a+UX8pe
uBJdyoKKiwd5/NFuXGOuVHbs//wjH9TewgLxNBeoZR8bkAaATFHOgyo4cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYzZ6vV8aBvoNKwYq+rFZKJzDpFMB8GA1UdIwQY
MBaAFAgBhHiRSHGqsOHAA202JuutbiDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FHRWVKRkljYXF3NGNBRGJUWW02NjF1SU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81ZjgzYzQtNjQwZC00ZmYzLTljZjQt
NjA2MjdlMTE1MjY5LzEvQ0FHRWVKRkljYXF3NGNBRGJUWW02NjF1SU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81ZjgzYzQtNjQwZC00ZmYzLTljZjQtNjA2MjdlMTE1MjY5
LzEvQ0FHRWVKRkljYXF3NGNBRGJUWW02NjF1SU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUmI9bEG
GuwPJLbsZzeQLtW/ob1V2PxPv8/VLxTGSJzm8KCHUKZIp/Tf9jdChD2hlKQ7q0Hm
qj/4LCt9F7qOPd01zeD52x83SI3/w674TuuoH/OxFcAMh48voRaxkZkoq4MP0mrG
A0Em56YyputGS2UBOqXIoFJ0Vg2CMYD4+zh+4LOyeuTOSbhaW2KdsfARBV2BAkS9
VwBrJ927sLZlTN1fz6uzVCq23RTOb0ho7fUx9rNdPbvZx3OfWsbuAxSRrI32k5tr
ZsZSSvcvq5xoneqkZtztGQxhgHiYWUTUAoXDyQCPhLAKwVYkjQ5XfQ0B3QLEzHvj
X0mkM//krpAchQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:07:08 2026 by rpki-client