Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          4ssU7UTp9chAGlEEfV5iZXFmq8EkR9hQxmdY+S5EUdo=
Subject key identifier:   FE:CA:69:BF:2F:10:6B:84:F4:F1:B5:18:F2:B1:E5:72:22:52:50:A0
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       01A1DCF06DC4A840E03260DC5628E2003383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          1B0C
Signing time:             Sun 15 Nov 2026 02:01:46 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:46 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:46 +0000
Files and hashes:         1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: 6x5uGMT4/EIl6kdc38laH3l2YvTS9zQCTBf9C5bBCB8=)
                          2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
                          3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
                          4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
                          5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
                          6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
                          7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
                          8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
                          9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:6d:c4:a8:40:e0:32:60:dc:56:28:e2:00:33:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Nov 15 02:01:46 2026 GMT
            Not After : Nov 16 02:01:46 2026 GMT
        Subject: CN=feca69bf2f106b84f4f1b518f2b1e572225250a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:1b:b1:e1:84:73:9f:09:a8:d0:d3:94:13:
                    4d:b1:00:e2:ba:e9:6a:e3:1d:a7:90:5a:96:37:fa:
                    ee:79:dd:06:07:77:3f:ba:ef:b3:a1:56:ec:c5:c6:
                    34:72:04:e5:2b:ed:c9:60:f9:44:9a:e4:83:7a:0a:
                    a5:8e:bc:31:b6:36:58:3c:2d:02:0f:f3:d8:b3:79:
                    4f:05:59:ce:64:65:56:bd:96:df:69:dc:b3:5b:dc:
                    f4:7e:1a:41:9f:72:e8:9d:9d:c6:39:87:20:27:0e:
                    d5:45:e3:95:ba:40:03:c5:dd:e8:27:78:6b:82:27:
                    bb:bb:69:58:a8:3d:f9:e3:bc:c1:83:ce:a6:f7:0e:
                    dd:59:4d:07:e2:be:7b:71:cd:8f:39:21:04:9b:e4:
                    51:9e:ff:e8:3b:ad:9d:57:ce:55:b8:5c:04:d8:31:
                    1d:24:f7:b8:4e:26:90:69:aa:c4:ca:11:93:56:8a:
                    83:8f:5d:2e:b5:cf:a8:86:9e:90:42:e9:a2:a4:b5:
                    22:f6:1d:fd:b6:f5:15:17:7e:5c:64:39:89:75:ec:
                    fe:fb:4e:95:b7:fd:75:28:ea:d5:be:d7:4a:4c:d7:
                    2b:47:5e:c7:b1:60:fe:b2:e4:28:ea:2b:c8:78:b5:
                    40:3e:02:29:69:25:69:76:bc:e3:a5:8f:c4:f7:39:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:69:BF:2F:10:6B:84:F4:F1:B5:18:F2:B1:E5:72:22:52:50:A0
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7e:53:68:09:0e:8a:da:c7:0f:78:c4:91:8d:1e:8b:44:59:
         57:bb:a1:e5:e5:11:3a:a5:ff:69:1c:b7:0e:c5:c2:33:5f:35:
         ac:55:1f:f6:c1:9a:7e:ad:c4:e8:5f:48:a3:6b:93:76:fb:37:
         96:b0:66:2b:73:27:0d:a1:47:8f:b6:90:9e:4c:24:7a:75:67:
         43:2d:d3:3d:28:ce:d1:f6:40:4b:60:32:5a:a8:5c:ac:00:6e:
         c3:44:c4:e9:08:e6:03:88:cd:52:b0:5b:be:39:b8:3b:a2:e1:
         7a:76:ce:0a:3b:4f:ec:75:13:9b:62:e4:81:a0:9f:c0:da:84:
         d3:d0:ad:7b:3f:ea:be:61:bf:55:3d:60:c7:d8:f7:54:34:08:
         40:02:82:4b:dd:fd:ba:53:6a:c8:5c:0c:1c:09:97:d6:dc:4d:
         a5:9b:f2:ed:6d:bd:17:e3:75:20:e1:81:96:33:da:d0:83:d3:
         62:67:d8:9d:9a:16:fe:c7:50:93:b4:51:c3:71:3c:71:54:d1:
         07:75:3b:ae:9e:09:dc:45:3d:ed:94:f8:e4:ae:43:56:19:b2:
         41:76:4a:c4:7a:c1:6a:d5:9f:31:9e:f7:fd:65:59:bb:28:99:
         d5:5e:c8:34:9d:6f:4a:7c:dd:4c:1e:95:47:93:33:23:dd:fe:
         96:68:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:34:44 2026 by rpki-client