Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          IoaLReNTGpY07TkJfRPiOKrA1RffghQ8B7zxTKjWuJs=
Subject key identifier:   88:4C:81:E3:83:F0:10:D8:EB:FC:D2:0D:DF:7F:EE:1F:C2:65:93:28
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       01A1A8274C53A309289B5CD3B7A044084866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          0D88
Signing time:             Wed 04 Nov 2026 20:01:50 +0000
Manifest this update:     Wed 04 Nov 2026 20:01:50 +0000
Manifest next update:     Thu 05 Nov 2026 20:01:50 +0000
Files and hashes:         1: EySyBrJAYfrjCqEYxsmXvPf3H5s.roa (hash: nhjndHhWgofWmTA2EVlrwEYSs042l2huk+iYyhoh+2o=)
                          2: YjThpUKY8dmKpHgsGQ94ajjW1mw.roa (hash: mU028HajfQlA+sa9l/YSlDKUMFBYx7IaDAclqqbnoIg=)
                          3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: GVQf2z3BXluK/g76GlRwybfC8nXpYsGyY210HrBMftE=)
                          4: iC9fUn104zY4OEHwbqWBMRhqfeY.roa (hash: G+diZWtaeUYf2mFGQ7Kk9MtmoUpwbZKTbE2sRgcMjNs=)
                          5: zyy7DFvxeNDAh4pOqGvmANgdfpY.roa (hash: hmel/U2e/Q6evOOJkJluvCudwlyZpvn4SGB/ShoJCY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a8:27:4c:53:a3:09:28:9b:5c:d3:b7:a0:44:08:48:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Nov  4 20:01:50 2026 GMT
            Not After : Nov  5 20:01:50 2026 GMT
        Subject: CN=884c81e383f010d8ebfcd20ddf7fee1fc2659328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:80:cc:f9:fa:fe:d0:6b:e6:36:a8:59:34:
                    52:77:3d:a4:10:4b:49:d3:cf:21:23:83:dc:45:0f:
                    93:9a:20:77:ff:19:27:97:35:13:5b:a4:7c:ec:2d:
                    31:54:ed:dc:5d:0a:83:a8:b0:4d:b6:b6:01:54:b8:
                    9a:aa:40:b1:22:a7:a8:9b:cd:f3:58:18:45:a0:ad:
                    f2:8b:a6:e9:6f:55:6e:5d:3b:35:7d:1e:24:99:ec:
                    85:47:4e:eb:b7:65:56:d6:d6:1b:ff:bd:2a:53:fd:
                    15:04:9c:88:dd:77:93:8c:2c:09:e8:de:e4:fc:7a:
                    b0:5e:7a:17:71:73:93:da:70:39:70:ee:89:b7:5f:
                    c2:ea:e5:47:d2:41:14:ee:4f:dd:b7:67:46:30:db:
                    bd:2b:5e:62:34:13:ac:cc:c7:09:1e:9d:99:5b:63:
                    73:9c:5e:15:fa:ff:16:cd:05:07:94:5b:14:0c:00:
                    8f:5d:07:1e:d4:b4:51:d9:05:7b:1c:de:bf:5a:f3:
                    2f:49:1d:6c:72:48:ab:de:ee:c6:86:07:2f:6f:1f:
                    fb:a7:45:5b:89:fe:d5:8e:1d:19:e5:0b:07:b8:da:
                    5b:ef:cc:19:aa:bb:98:bf:1a:2f:59:2d:4f:88:f5:
                    f3:2d:d3:21:0d:5f:2a:3e:f7:cf:20:0a:c7:1e:6a:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4C:81:E3:83:F0:10:D8:EB:FC:D2:0D:DF:7F:EE:1F:C2:65:93:28
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:34:3e:cf:5d:20:a8:41:6d:16:45:a4:a0:2e:69:17:5c:48:
         44:3c:c4:a9:07:b6:83:76:58:62:e0:1b:a3:cd:a3:a0:99:e9:
         a3:59:49:ae:38:92:85:e9:6d:db:4d:9a:4c:1a:a1:fb:a5:6e:
         89:56:d0:b6:0b:39:cf:8a:bc:f7:4d:3c:30:0c:e7:0e:10:dc:
         1d:72:2e:0b:c3:ba:d7:be:6e:66:57:5f:71:4d:71:2b:9a:43:
         e8:90:3e:77:6c:82:e9:0b:fb:c4:f9:3a:ab:f7:b7:73:5b:f7:
         d9:aa:5f:39:15:9e:64:05:a9:1d:22:72:1b:3f:5e:15:33:65:
         04:18:77:31:4e:dc:95:74:75:99:00:be:7f:6c:47:88:93:15:
         95:1d:48:d6:01:5a:96:cb:1e:86:ce:12:4f:e6:58:bd:fc:20:
         3c:c6:11:63:ff:c1:44:63:8e:d0:26:ac:4e:bf:0d:fe:ed:be:
         07:5f:50:5b:a7:72:85:5f:85:be:14:3e:87:01:bc:d6:fe:36:
         47:d8:b5:c0:a7:a7:57:ef:e9:49:93:d7:a0:0e:d5:40:e9:b4:
         f2:f7:04:4f:6c:ed:a8:5f:c3:95:e5:d6:69:36:61:f2:7f:14:
         f2:09:ae:51:73:aa:ef:17:c2:19:63:c1:0f:61:07:21:8a:71:
         ed:02:65:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoJ0xTowkom1zTt6BECEhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2
YzQ2NTMwHhcNMjYxMTA0MjAwMTUwWhcNMjYxMTA1MjAwMTUwWjAzMTEwLwYDVQQD
Eyg4ODRjODFlMzgzZjAxMGQ4ZWJmY2QyMGRkZjdmZWUxZmMyNjU5MzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoduAzPn6/tBr5jaoWTRSdz2kEEtJ
088hI4PcRQ+TmiB3/xknlzUTW6R87C0xVO3cXQqDqLBNtrYBVLiaqkCxIqeom83z
WBhFoK3yi6bpb1VuXTs1fR4kmeyFR07rt2VW1tYb/70qU/0VBJyI3XeTjCwJ6N7k
/HqwXnoXcXOT2nA5cO6Jt1/C6uVH0kEU7k/dt2dGMNu9K15iNBOszMcJHp2ZW2Nz
nF4V+v8WzQUHlFsUDACPXQce1LRR2QV7HN6/WvMvSR1sckir3u7Ghgcvbx/7p0Vb
if7Vjh0Z5QsHuNpb78wZqruYvxovWS1PiPXzLdMhDV8qPvfPIArHHmoKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhMgeOD8BDY6/zSDd9/7h/CZZMoMB8GA1UdIwQY
MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt
Zjg3OTJmNTc3YjlhLzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh
LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITQ+z10g
qEFtFkWkoC5pF1xIRDzEqQe2g3ZYYuAbo82joJnpo1lJrjiShelt202aTBqh+6Vu
iVbQtgs5z4q89008MAznDhDcHXIuC8O6175uZldfcU1xK5pD6JA+d2yC6Qv7xPk6
q/e3c1v32apfORWeZAWpHSJyGz9eFTNlBBh3MU7clXR1mQC+f2xHiJMVlR1I1gFa
lssehs4ST+ZYvfwgPMYRY//BRGOO0CasTr8N/u2+B19QW6dyhV+FvhQ+hwG81v42
R9i1wKenV+/pSZPXoA7VQOm08vcET2ztqF/DleXWaTZh8n8U8gmuUXOq7xfCGWPB
D2EHIYpx7QJlew==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:47:49 2026 by rpki-client