Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          PR7KPYdD4y6XrTuh5lbtY/HpUwDy0YuFpMYqvrko1h0=
Subject key identifier:   90:3E:BC:28:40:AD:84:9B:4A:B1:3D:D2:67:EB:2C:A1:EC:C1:D7:6A
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       01A1DCF01378764AC78B24BCFBC1F9BDF178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          1AF6
Signing time:             Sun 15 Nov 2026 02:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:23 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: Y0QEtutaiSCWokGgFBXx+95HJ9MkLWi19MDuCYzAcio=)
                          2: Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa (hash: CBRZQkgyapVEnN+KlGzYptdXDl00PSWBvuMGdvm4uCg=)
                          3: Lnic-b8RKeW1rpPqbvXKHlom-ys.roa (hash: 2KTr1u+98H46S2uNewgTQPp+snCfpr8r+A46P3ahmR4=)
                          4: QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa (hash: K9uUssgaA9Cw/QN8kWZlExQkvdqZ4stsO6RuK8HpBDo=)
                          5: TyGVkDRU5VuGCHmgtXtvADqB47k.roa (hash: zZ1WNsnAjF4PPiuPy/odw3fOv3vMdCoVvaWlx1hFRXc=)
                          6: qm1N6afKIHDIeVkklPLOLKGaS4s.roa (hash: ewBUJyCJZqBY4ReNaWU+ZIFZCEk2IZ7kEhQ4Bd+n260=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:13:78:76:4a:c7:8b:24:bc:fb:c1:f9:bd:f1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Nov 15 02:01:23 2026 GMT
            Not After : Nov 16 02:01:23 2026 GMT
        Subject: CN=903ebc2840ad849b4ab13dd267eb2ca1ecc1d76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:04:0d:67:0f:dd:9c:7d:cf:80:fd:46:d5:3f:
                    88:e0:16:c9:d0:d5:68:4b:f2:e7:d1:fa:28:51:1e:
                    fa:b7:bc:60:ad:6c:83:f1:e6:4f:bb:ed:29:eb:18:
                    ab:47:ab:46:ee:a8:f6:40:07:e0:97:1d:15:e6:36:
                    64:d5:bf:8a:1e:dd:bc:b5:4a:05:ad:1b:bf:44:7f:
                    6c:6d:73:f8:a4:ea:d1:d7:75:c2:60:ec:41:b9:f4:
                    d6:54:f2:90:e1:f5:33:17:36:9e:ec:ee:c3:05:9b:
                    44:5b:92:dd:38:4f:c1:4d:eb:62:14:eb:b1:6e:6f:
                    5a:22:68:b1:e5:4a:0c:fb:62:8e:45:52:c7:df:f5:
                    5e:f0:cb:d5:df:c7:39:81:fd:6c:f9:bd:8f:47:47:
                    64:0d:0d:12:78:6c:bc:e2:53:95:93:16:99:dd:9f:
                    4d:02:ef:82:59:24:cf:11:7a:74:dc:ae:2f:75:5e:
                    3a:8b:fc:b4:e1:02:ff:d2:cf:38:7f:a7:01:79:52:
                    31:5b:6f:8f:f3:3f:0b:60:c6:c2:55:29:83:95:91:
                    58:82:e7:2b:79:c3:98:7b:f5:a6:97:fa:9f:07:2d:
                    5a:cc:5f:c7:5d:5c:55:df:5e:29:b1:74:d7:bf:6b:
                    a2:80:b3:3d:e1:e4:3b:af:08:59:2e:27:de:52:77:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:BC:28:40:AD:84:9B:4A:B1:3D:D2:67:EB:2C:A1:EC:C1:D7:6A
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d8:d5:43:7c:b4:3b:87:ca:c1:c7:5b:84:a2:5f:38:9b:15:
         0d:b7:f5:f3:bc:e7:5c:8f:89:fd:b8:9c:17:36:77:fc:97:16:
         4e:7c:42:59:ae:6a:a9:e3:41:02:ef:2b:b5:56:dd:dc:5a:ac:
         50:a1:c0:07:8d:ef:7d:c4:9c:65:58:4c:9d:30:1c:c6:35:04:
         26:16:10:61:91:e6:1b:16:78:36:e5:ac:6a:6a:6b:ab:93:d2:
         76:f0:3d:e8:db:0f:53:24:37:2a:f4:ec:64:c8:05:2f:63:56:
         6f:f4:0f:79:85:b3:9e:e9:94:55:fc:2e:54:22:12:78:10:0e:
         79:b1:9b:57:d5:f3:f9:c7:65:54:ad:1f:ec:73:c0:b4:d6:4d:
         18:5c:de:09:17:e3:70:22:91:92:80:d5:6e:1c:cb:0e:43:3f:
         4e:a8:c5:61:21:5d:e5:16:8a:49:f9:2d:02:f1:1d:fc:8e:ef:
         a6:ba:09:56:fd:46:d1:a8:83:b4:d7:e2:fd:dd:20:d5:45:8c:
         05:3a:87:c4:29:10:22:7a:7a:83:43:49:6e:0c:46:0b:c9:f2:
         ec:44:6c:5f:2a:66:a1:9e:de:72:e0:af:ac:f0:2b:4b:0a:1d:
         e7:fa:77:69:20:82:9d:be:02:0f:95:b5:e9:57:c5:6c:e4:21:
         24:56:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:04 2026 by rpki-client