Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
File:                     c_-bDajLqCMr_Xx3EPBFN2eInp0.mft (raw, json)
Hash identifier:          ti+1sLhAoVYDGLe6AmR/kIIJYALnHtMA9IQWjpS59+M=
Subject key identifier:   FE:B7:27:FD:25:75:7F:CE:D0:D5:F4:FA:80:62:F6:F5:8B:35:EE:FD
Authority key identifier: 73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
Certificate issuer:       /CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Certificate serial:       01A1E05EA89A2A580870A7F48DF26BBB461F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
Manifest number:          0172
Signing time:             Sun 15 Nov 2026 18:01:02 +0000
Manifest this update:     Sun 15 Nov 2026 18:01:02 +0000
Manifest next update:     Mon 16 Nov 2026 18:01:02 +0000
Files and hashes:         1: c_-bDajLqCMr_Xx3EPBFN2eInp0.crl (hash: CpGRAXn0zPzVxKfqwO7Ith262aYy7SY7D0xh4edBEsM=)
                          2: vTX4iIqH_CJW3BVeMGACQiGfVBw.roa (hash: B07mgx6eQq4EygaQx3Hss2ApntF23K/SLlLex5sG5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:5e:a8:9a:2a:58:08:70:a7:f4:8d:f2:6b:bb:46:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
        Validity
            Not Before: Nov 15 18:01:02 2026 GMT
            Not After : Nov 16 18:01:02 2026 GMT
        Subject: CN=feb727fd25757fced0d5f4fa8062f6f58b35eefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:3e:31:ef:32:13:fe:92:31:97:68:b1:8b:
                    ce:84:f3:ef:f4:e4:32:c7:39:ad:fb:e2:51:5c:5d:
                    28:21:09:8e:fc:aa:6e:f1:9c:76:48:aa:e1:e9:63:
                    ce:da:7e:34:e8:61:99:20:0a:86:bc:2c:b3:8d:8b:
                    95:d7:50:a1:ed:e4:52:fc:5f:6f:28:52:f5:39:e4:
                    23:91:52:1a:a0:40:58:3a:76:00:ff:a6:14:25:30:
                    36:00:90:44:6d:b8:9a:52:dd:a7:69:57:4f:71:2f:
                    c9:37:55:62:bc:ce:d7:46:9a:2d:17:2f:2b:26:53:
                    bc:7a:71:db:ac:94:22:3c:bf:f5:28:c6:1c:09:2c:
                    78:a7:32:8f:c4:d5:2c:70:4f:c8:cc:72:3d:cc:ac:
                    3e:cc:38:4b:af:ac:54:1f:a7:2e:19:fc:16:45:e6:
                    62:51:ef:07:b5:26:a0:e5:d4:27:a1:95:19:80:3f:
                    41:68:02:5e:83:ab:c4:b2:5d:68:cb:06:45:6d:b2:
                    f1:56:13:63:e1:44:a9:48:11:69:86:15:57:44:e4:
                    cc:68:b4:3d:11:f5:ce:42:38:50:68:26:9a:44:fc:
                    c9:6f:d0:23:4b:0f:0d:0d:0f:69:06:6f:12:ab:00:
                    e7:ef:aa:56:69:37:0a:8b:e8:e9:65:02:81:88:d7:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B7:27:FD:25:75:7F:CE:D0:D5:F4:FA:80:62:F6:F5:8B:35:EE:FD
            X509v3 Authority Key Identifier:
                keyid:73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:1a:b9:2a:e1:5c:6c:67:54:13:08:2b:b0:24:a1:ca:bb:
         eb:42:c6:be:2d:a5:7d:89:55:26:f8:1f:4e:34:27:23:de:95:
         0e:99:96:fe:81:3f:ea:94:27:1a:eb:32:77:97:a6:8c:be:b4:
         13:e7:0d:43:a4:2d:f1:41:86:95:12:16:e7:7a:f9:68:d9:1e:
         2d:0b:06:e3:8a:35:3a:a9:c4:e2:96:49:76:d4:ee:74:35:d7:
         ed:8f:a3:bf:61:23:08:de:d9:9b:f9:e3:fc:32:ad:86:28:27:
         c9:26:bc:c8:36:b7:34:11:32:c5:0f:21:8d:3b:88:49:b0:85:
         f9:ab:11:c3:72:2f:32:6f:78:82:3f:1e:03:bd:08:07:fc:5f:
         77:d1:4b:41:56:9a:73:2d:de:c0:4f:ae:c5:e2:39:7b:36:ec:
         35:24:95:68:8b:c7:da:ec:38:c9:21:76:e8:95:23:f1:32:77:
         a5:72:2a:92:db:3c:93:9a:da:60:da:2b:89:11:2d:81:d0:29:
         96:c0:eb:2b:7b:a0:d4:c2:90:10:de:65:15:41:23:55:8d:4c:
         6d:76:6f:09:40:10:75:4f:9e:40:f3:3f:57:38:ec:1f:a0:ca:
         85:48:16:15:5e:1f:2d:9b:96:61:7b:c6:20:b3:4e:9f:6c:d6:
         81:1d:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:32 2026 by rpki-client