Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File:                     zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier:          SxVOalps/CUODGYuqSRI0GKGqd0u+xRz0QZKeVgr3r4=
Subject key identifier:   77:4F:E2:21:30:FA:12:CB:11:ED:6E:07:B6:C7:B8:67:FB:01:08:FC
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer:       /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial:       01A1E0CCA419FDFB53EF1D66CBB971B387C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number:          1B09
Signing time:             Sun 15 Nov 2026 20:01:10 +0000
Manifest this update:     Sun 15 Nov 2026 20:01:10 +0000
Manifest next update:     Mon 16 Nov 2026 20:01:10 +0000
Files and hashes:         1: efPNeN_0KirVowyqOO81ber6Zg8.roa (hash: 0sZnmeXPSX5yamGjUWVvInbw7JdGyiWW9gzFR1D9bNU=)
                          2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: EirgG3kl2gFnfOTqjxMxC05yIRLRB5W4/xGC9fFV/Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:cc:a4:19:fd:fb:53:ef:1d:66:cb:b9:71:b3:87:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
        Validity
            Not Before: Nov 15 20:01:10 2026 GMT
            Not After : Nov 16 20:01:10 2026 GMT
        Subject: CN=774fe22130fa12cb11ed6e07b6c7b867fb0108fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:24:26:d3:cd:68:96:57:45:c0:aa:bd:1b:
                    70:a9:59:2c:98:6a:a2:10:a4:c8:01:36:85:cc:97:
                    cd:63:7c:0f:5c:e9:95:0d:3a:73:7b:bb:1b:fe:e6:
                    c6:8d:24:c4:b7:be:fa:c2:90:94:11:ca:59:57:ff:
                    ba:e0:81:af:c3:b3:58:4b:6e:56:48:5e:ff:5f:99:
                    da:9c:8c:32:96:73:70:0e:b3:6d:67:b1:3c:c1:26:
                    25:1f:aa:dc:3f:4a:85:a1:5d:15:82:82:a3:f8:3e:
                    c2:6d:5f:38:ee:d4:ab:86:4f:58:a0:44:f1:44:c3:
                    ac:44:02:19:95:49:fb:65:81:ce:e7:05:a7:0f:e1:
                    a5:89:ac:77:93:4b:8e:f0:41:7d:19:04:c5:bd:61:
                    ae:c9:bb:12:75:2c:00:7b:8e:d8:1b:67:db:00:7f:
                    8c:a6:df:5c:ff:03:b7:5d:04:5c:20:15:1e:d8:30:
                    7e:29:38:80:7e:c5:9c:e4:bb:6c:e7:21:4b:e5:14:
                    47:b4:60:2e:a3:e9:b8:8d:17:e2:40:0a:e8:ee:45:
                    15:c8:d5:d2:16:18:cd:c8:e8:a1:3e:02:b5:78:d9:
                    73:08:9d:e9:a7:58:37:49:73:f7:53:07:33:72:a8:
                    30:32:61:10:e6:f0:63:5f:83:b8:7d:f6:c0:6d:d2:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:E2:21:30:FA:12:CB:11:ED:6E:07:B6:C7:B8:67:FB:01:08:FC
            X509v3 Authority Key Identifier:
                keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:f6:5c:a1:9b:88:6f:17:41:bc:eb:23:1c:bf:44:94:35:
         cc:a7:24:fb:62:49:31:28:cf:ce:01:7d:af:70:03:d7:a0:17:
         63:ee:9e:61:f6:a9:42:90:f4:22:6b:9d:2f:4b:92:72:74:1b:
         58:99:1f:09:33:96:b7:df:59:bd:62:5e:83:14:ed:b5:3b:25:
         3a:92:44:03:b2:e0:e7:2a:9c:66:1c:31:91:24:e5:cb:86:31:
         78:21:f7:00:79:4d:bb:a5:88:14:0a:ae:87:63:c5:6b:00:a0:
         e7:aa:58:36:a7:22:ab:96:b0:ba:97:b9:2d:18:32:4f:34:d3:
         05:61:64:ce:98:b6:6b:68:d8:c8:73:04:e4:2a:03:02:1e:86:
         fb:55:fb:31:3d:f2:4f:66:77:b3:2c:5b:07:1a:6c:50:e7:66:
         da:3a:d3:87:6f:4b:41:22:3e:16:2f:31:f4:59:ed:6f:fd:b1:
         8d:3c:6d:ae:0b:c0:23:96:cb:26:5e:0c:28:56:27:e3:6c:02:
         d0:29:39:ff:5b:8f:3d:7e:8f:de:c8:cb:c4:09:be:b0:d2:4d:
         dc:09:90:0e:67:e3:f7:2d:74:ff:3a:1a:21:e9:c1:ad:99:d5:
         a1:1c:65:49:2f:71:ac:19:40:e7:d9:ef:99:97:f1:02:cf:0c:
         8d:0f:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:27:06 2026 by rpki-client