Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File:                     4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier:          wfYozt/5WxS/JQCy2kQmmOzWg92Gau6pxc7FR3BjNsQ=
Subject key identifier:   2C:31:31:9D:D1:3C:7C:4A:F4:56:AC:68:8E:F7:67:56:D2:1D:37:0A
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer:       /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial:       01A1DC81FD9E58F3166020B3389D981EDB31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number:          07FA
Signing time:             Sun 15 Nov 2026 00:01:08 +0000
Manifest this update:     Sun 15 Nov 2026 00:01:08 +0000
Manifest next update:     Mon 16 Nov 2026 00:01:08 +0000
Files and hashes:         1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: tPNpoWebyrYkobj544ukRAeitwCFHtnSybLS4vXTBhY=)
                          2: 9m6XpGENN_Zc7gu4DZLgz-bFG_8.roa (hash: /mTzPbGMqBx+64njFbuyJLyG64tSV59h469Ll6ebv7Y=)
                          3: KEIqtKdHOr2xFwyul2M4Mj3OCXg.roa (hash: 3sxiPnrD0Gc6fzs8KkM4ayt1dKyCeKq1vgI2Ien7IrU=)
                          4: a7LWLvfWgtFn-hlQ7rePCg-poYE.roa (hash: VgwZIwqUK5p5zdClmFKprg0jOARykjuW1KNUaPMDVgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:81:fd:9e:58:f3:16:60:20:b3:38:9d:98:1e:db:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
        Validity
            Not Before: Nov 15 00:01:08 2026 GMT
            Not After : Nov 16 00:01:08 2026 GMT
        Subject: CN=2c31319dd13c7c4af456ac688ef76756d21d370a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:e4:81:9b:0c:5c:a9:da:69:23:db:a6:9b:
                    98:15:91:de:64:01:d0:34:39:a0:fe:89:53:66:19:
                    cd:f7:eb:8a:e7:3e:b2:b2:55:c8:13:fb:13:3f:d4:
                    a6:dd:10:04:f2:70:e7:51:39:e4:68:fc:d9:49:eb:
                    ff:72:c8:5b:18:66:88:7b:db:5d:16:0a:64:e0:f2:
                    fa:31:94:b2:f1:b2:41:1d:a7:36:0b:a7:f2:b1:1c:
                    3d:41:c3:bf:e1:37:01:bd:25:cd:ac:31:e8:1f:70:
                    d7:f4:9d:50:99:ca:81:d5:97:e4:99:01:99:7d:c3:
                    96:d3:90:54:08:7f:b7:01:03:8d:1b:38:2c:39:1a:
                    00:35:a2:42:17:fc:92:de:7b:19:ff:7d:4f:2b:13:
                    09:9b:7e:e8:f2:c3:c7:d3:68:21:d6:3b:50:c4:31:
                    f9:70:9a:40:c4:27:a5:27:0b:e3:06:c1:6b:fc:20:
                    2a:fb:d3:47:91:66:76:d0:be:da:05:db:68:f7:f4:
                    1d:0f:9f:7c:5e:ec:4f:58:07:66:0a:8a:7b:6c:d9:
                    28:e1:67:b7:d6:ea:3d:ed:da:b9:ed:99:67:7d:81:
                    aa:1a:8a:7d:a7:6e:52:cb:76:4e:b9:1c:4d:7e:6e:
                    95:81:92:d5:25:0c:c4:ab:d7:1e:b4:fa:70:03:3c:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:31:31:9D:D1:3C:7C:4A:F4:56:AC:68:8E:F7:67:56:D2:1D:37:0A
            X509v3 Authority Key Identifier:
                keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:46:46:c9:65:4f:34:b1:8c:64:22:a2:6b:3c:68:80:ad:15:
         c4:38:8a:39:4c:e6:b5:a3:e7:d1:90:a2:96:89:5a:49:e4:8c:
         19:65:9a:fb:f5:3a:c7:64:3f:9e:5b:aa:5d:48:15:fa:e4:d9:
         fd:22:43:54:07:7f:66:72:d7:9d:a4:ee:6f:f9:5c:13:48:76:
         3e:0d:b6:05:eb:fa:d7:af:d2:c3:73:b0:de:e8:f0:b8:0a:c3:
         47:b6:0a:14:e6:60:fc:c4:eb:46:84:5f:ad:9b:38:29:3d:c3:
         2e:8b:10:a1:1c:1a:eb:70:86:d1:ac:41:c9:15:42:c9:d7:3f:
         63:7e:ed:c6:90:c3:4c:9e:5d:33:b5:ae:d8:06:f9:9e:5e:45:
         12:9b:d6:6c:92:b6:03:6e:56:4c:ed:aa:26:e3:4b:82:24:9f:
         79:51:d6:fa:60:6f:9f:11:43:6d:33:cc:f0:22:59:36:1c:d2:
         db:6c:e1:59:04:bc:80:fa:da:86:7e:da:06:0d:41:b8:e5:3a:
         b7:0b:0b:7a:37:91:23:6f:dd:8d:9f:04:5e:e4:e0:fd:fe:ff:
         56:4e:24:ec:ca:90:96:85:b3:3b:f4:03:14:14:a3:c0:e8:14:
         e4:ed:d9:06:ce:9b:19:63:29:83:26:47:2e:e0:5a:d3:74:5d:
         e7:75:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:09:06 2026 by rpki-client