Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          NcWuyi1slfsbgRxTZtkYku34wUifAEJ2XPDblXgxToA=
Subject key identifier:   11:44:6F:41:B5:56:2D:A2:42:0C:41:39:EA:F2:58:60:C0:AD:12:08
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       01A1DDCC36C384DB018DCC5F8FAC10C91327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          11C7
Signing time:             Sun 15 Nov 2026 06:01:50 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:50 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:50 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: rdb5CZ4gItNW7fAcSEiehYdfbXwZ0n8kBdwqJSZvM94=)
                          2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:36:c3:84:db:01:8d:cc:5f:8f:ac:10:c9:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Nov 15 06:01:50 2026 GMT
            Not After : Nov 16 06:01:50 2026 GMT
        Subject: CN=11446f41b5562da2420c4139eaf25860c0ad1208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:95:24:e6:c3:e7:3f:1b:aa:7d:8c:1a:28:
                    71:55:40:ad:0e:ae:fe:41:8e:73:4b:d3:a0:a1:3d:
                    51:da:8b:fb:c2:c6:bb:7f:d9:af:18:ca:28:ec:53:
                    43:92:8d:e6:f6:55:60:b4:d9:c2:28:91:39:c9:35:
                    12:74:53:4e:1d:cf:87:08:94:34:09:66:01:d6:11:
                    f6:dc:1d:17:0e:79:20:8c:2e:b8:df:ea:86:ff:d5:
                    b6:33:cf:1c:37:93:44:8e:bf:e4:4b:10:0d:dc:ee:
                    aa:b4:10:fd:ca:05:64:c4:1c:f2:14:a4:a0:a4:88:
                    92:56:98:3d:59:0d:0e:c0:82:37:3e:79:f1:e9:6b:
                    b2:f1:3a:6d:50:06:27:a5:af:2a:75:16:3d:d5:34:
                    81:09:d8:bf:50:16:b7:c5:96:99:91:cd:f2:5d:f6:
                    76:36:f5:72:2f:80:aa:ad:4b:46:df:a0:b8:2e:27:
                    e9:bc:50:4f:d0:ff:c7:2f:e9:9b:b4:88:56:29:2b:
                    20:6f:65:53:51:03:9c:96:56:4b:2a:a1:21:0c:4f:
                    35:cf:87:90:74:98:07:26:a9:14:cf:4b:fc:ca:56:
                    a2:42:d4:0e:81:f5:08:a0:00:09:3b:02:c7:e3:b0:
                    af:ab:66:3b:d1:f4:57:30:75:e0:9c:4a:5e:50:9c:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:44:6F:41:B5:56:2D:A2:42:0C:41:39:EA:F2:58:60:C0:AD:12:08
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:6c:90:ed:55:19:dc:68:74:fc:87:49:13:d9:5b:ac:a6:
         5f:12:5c:8f:0e:49:81:24:4c:05:3d:66:85:5e:e9:93:f6:73:
         c7:c9:76:38:16:7d:a2:58:0e:cc:d8:6d:0b:1b:35:e6:0c:ac:
         90:01:a3:2c:ea:4a:53:8f:35:ba:e1:0b:d5:43:fb:f9:fe:e2:
         a3:df:e3:90:cf:8f:6d:7d:a7:ae:02:72:29:6a:91:f1:73:c4:
         1c:c1:8f:9b:aa:d4:79:81:0b:c6:18:0a:e8:f6:eb:61:be:86:
         42:8d:e4:f3:17:7d:85:69:f6:bc:bc:06:23:ec:cd:b7:b2:cb:
         3f:6f:49:3f:6d:1d:f4:40:fb:a4:6b:9d:2f:b8:b2:44:73:44:
         10:a6:96:8b:18:90:1b:dd:45:90:69:53:60:72:53:25:5d:a4:
         00:ad:7c:8a:f7:7b:b6:b3:fc:16:f1:8c:8d:45:97:74:10:83:
         82:0a:d2:50:63:aa:80:4c:e3:b2:bf:49:44:15:2f:0d:0b:3c:
         30:1f:02:c4:17:3d:12:48:c3:91:04:b4:7b:b6:81:8b:e3:02:
         44:86:a9:a8:3a:93:18:0f:47:e6:6f:fe:d7:ba:18:d9:99:d5:
         37:72:2c:02:26:43:ce:82:b9:49:51:02:e3:5b:fc:cf:df:51:
         4e:b0:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:36:20 2026 by rpki-client