Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          lHFkprNTdXHK5QHB7Ee+Jh4o4bTx5xdVgpwUW7/GtM8=
Subject key identifier:   E2:D5:D4:58:AC:45:DD:83:B3:F9:D7:D7:F9:64:1D:52:82:D1:79:8E
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       01A1DD2702208EBBF6E7D598B47587BA566C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          1AF8
Signing time:             Sun 15 Nov 2026 03:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:23 +0000
Files and hashes:         1: 53n-AOWpOdKtTs7EO1UJQ1S9pho.roa (hash: uCpL8Y8fiLJW3n5KNyPMR09cFxVs2OcT99Laa9PNQwo=)
                          2: 7SAjGILTO59KUTiR6R25zMbi05k.roa (hash: xMkuiyV/sgEBkiNl+fbX7T0JEHyaPo3fhmMzgUh4oNo=)
                          3: OSev0vjgGDQA5-w3Tkv31qu09wc.roa (hash: pwjd8MNk+RPSr90pHaBWnVb6ON4Ty5RyozgNZzBJbhg=)
                          4: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: eCfhW3wz+vDV6NSmr6WF6bF3pYoDBT+bZTysCTPEimY=)
                          5: bQj2aTgJXbOKZNuSew15W-KvAeA.roa (hash: hVsN/hgtl18kQSDtDH8KuGPfsGuUeynR/lwAiwVmOGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:27:02:20:8e:bb:f6:e7:d5:98:b4:75:87:ba:56:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Nov 15 03:01:23 2026 GMT
            Not After : Nov 16 03:01:23 2026 GMT
        Subject: CN=e2d5d458ac45dd83b3f9d7d7f9641d5282d1798e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:1f:40:28:7a:6e:1c:eb:fc:01:01:f4:03:
                    24:5b:51:b9:6e:50:83:88:46:0e:3b:56:38:84:76:
                    1f:b5:2e:f4:8e:29:a2:44:92:6b:ca:69:eb:44:cd:
                    12:f0:49:22:5b:c6:6b:ab:da:0b:29:f5:b1:46:13:
                    cf:a9:30:e7:f4:0d:a1:b7:ac:66:af:d4:f6:55:e6:
                    c6:81:e1:c2:6a:cb:41:a5:4e:66:d1:87:b3:72:d7:
                    9f:1f:bc:fb:ed:92:b8:a7:b5:de:a0:fc:e5:0f:3a:
                    2d:3a:67:4a:e3:b9:77:36:18:44:1b:31:0c:ec:8d:
                    4c:2c:b9:ac:73:db:94:e1:ac:bb:b2:ec:72:92:c7:
                    a1:fa:2c:de:17:1d:de:8c:a8:ad:6f:cd:a5:c9:7b:
                    bf:a6:21:0c:6e:25:8a:81:be:5f:18:0a:7c:d7:59:
                    c7:b4:86:48:06:e2:96:9e:3e:79:81:10:57:97:99:
                    4b:1c:99:29:b7:36:d2:c6:66:1b:7f:5c:8d:f0:2b:
                    10:28:69:2c:3c:dc:29:21:b8:e4:6f:1b:f2:f6:94:
                    81:9e:1f:a0:0c:b8:be:78:6c:5f:12:55:7b:02:d2:
                    15:34:6c:9c:c3:8d:f3:20:31:65:7e:e7:44:49:13:
                    7d:c3:c3:d2:43:f7:2b:10:8f:b1:84:19:98:88:1f:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D5:D4:58:AC:45:DD:83:B3:F9:D7:D7:F9:64:1D:52:82:D1:79:8E
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:20:37:03:67:5e:07:ce:d5:c1:50:39:79:f0:09:a5:75:2d:
         89:20:f4:53:b8:4e:8e:73:5d:27:cd:cc:87:e0:e3:71:7d:3d:
         5a:88:df:a2:28:44:54:c4:fd:e8:22:01:d6:d7:58:61:26:1e:
         4b:aa:a8:92:f6:fb:a1:cd:8b:70:6d:1b:8d:52:c9:c5:4b:a2:
         41:34:57:8f:5c:20:08:a1:c6:31:89:ba:46:de:bd:e2:fa:a6:
         da:05:4d:f4:b5:f9:b6:2c:09:d1:f3:ef:62:ca:57:96:ca:89:
         8f:4c:c4:38:f4:46:f7:b4:35:ea:6d:1c:33:44:75:0d:6f:dd:
         64:e5:5b:da:77:7f:9e:a1:20:8f:fa:77:22:fa:0f:81:d6:cd:
         a0:23:59:1e:c7:56:e6:87:f2:65:07:a8:7a:22:44:08:7d:b5:
         1f:2b:f8:6b:85:f4:69:09:3f:03:d0:e1:2b:86:2d:c3:8f:04:
         5d:00:a0:34:51:cb:2e:aa:24:a2:f5:a7:59:38:a9:b7:04:45:
         b7:fd:61:c5:ee:db:51:5b:7d:bd:df:db:2f:b5:a2:3f:32:aa:
         43:2e:e8:6f:97:35:a9:5c:81:b3:e4:a2:a7:83:d0:32:a2:ff:
         07:d1:f9:1d:f7:d9:a5:d9:61:ba:a9:5b:c1:4a:fa:91:0d:53:
         0d:96:4a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:13:13 2026 by rpki-client