Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File:                     Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier:          wtVRzOLEo+8gAPzdWCTG1REKy59xKDTJm89lJcGKWr0=
Subject key identifier:   98:16:96:14:CA:2B:5D:1C:D3:99:1F:AE:B4:A3:F7:11:3F:4C:8C:39
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer:       /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial:       01A1DFF0DBDBEA334CD93AEC81071CBE920E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number:          0310
Signing time:             Sun 15 Nov 2026 16:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:06 +0000
Files and hashes:         1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
                          2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: wHXSdALGtQ8LKvYD3FTKw0gG/7bRjQIgwD5Za3llVSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f0:db:db:ea:33:4c:d9:3a:ec:81:07:1c:be:92:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
        Validity
            Not Before: Nov 15 16:01:06 2026 GMT
            Not After : Nov 16 16:01:06 2026 GMT
        Subject: CN=98169614ca2b5d1cd3991faeb4a3f7113f4c8c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:fc:2d:8a:4e:d3:66:f8:93:14:74:6b:db:
                    d2:ea:f4:11:fd:55:d4:ab:cf:a0:fb:73:8e:50:7e:
                    ae:c4:23:fb:14:36:46:bd:63:33:cf:6f:70:8c:26:
                    9d:4c:50:a0:30:24:0a:a5:01:04:2d:d0:17:40:69:
                    0e:6d:64:70:e2:12:88:b3:fc:88:59:8c:42:67:f1:
                    38:df:e1:2e:dc:d1:f1:55:67:4a:65:80:b9:ca:d3:
                    c4:98:85:ab:3d:47:be:28:56:c4:43:ce:d0:d4:ce:
                    62:93:3e:20:05:5b:b2:3a:b4:f5:43:ac:c1:70:1f:
                    c3:21:61:64:c6:55:05:f6:ad:57:26:88:24:42:3f:
                    15:29:04:e5:d2:d9:c7:ba:12:b9:28:f2:84:b9:2b:
                    3d:23:65:4f:b7:d9:0c:1d:26:a2:12:ab:bf:10:51:
                    e7:23:22:e6:1a:f9:70:0c:63:a1:63:f6:66:b6:de:
                    b5:49:39:5e:fc:e0:16:82:b8:28:46:8f:c9:53:71:
                    1a:33:9c:bb:a3:e1:94:03:1f:b0:bb:d6:f4:63:fb:
                    be:a4:9d:56:d5:70:e6:f0:33:4a:63:a2:76:69:7e:
                    4e:35:2b:32:44:43:45:3a:12:c9:cc:5f:2b:44:13:
                    b3:dd:a3:0b:62:65:af:dd:5b:70:6a:bb:82:1d:12:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:96:14:CA:2B:5D:1C:D3:99:1F:AE:B4:A3:F7:11:3F:4C:8C:39
            X509v3 Authority Key Identifier:
                keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:20:1f:44:bb:a9:42:a9:de:75:c6:99:df:4d:2c:b1:4c:
         8a:cf:8d:10:f3:76:9a:be:96:75:d3:43:42:aa:a9:d4:75:e5:
         26:8f:43:d6:6c:b3:91:5b:69:02:0a:9c:28:7e:1f:a6:18:fb:
         0d:9f:66:79:b9:28:56:f3:71:dd:89:f1:b1:ae:79:3a:b5:85:
         4c:29:63:bc:53:88:b1:75:ac:a9:ff:4f:2b:6b:86:8f:36:94:
         7a:da:c8:25:1d:30:a4:a8:5e:e4:3e:7f:48:8c:83:e3:75:e2:
         e9:3f:9a:c7:f7:b2:74:24:89:e4:bd:44:af:3f:70:6a:99:0c:
         0a:a7:7f:4c:b1:f8:a1:c2:3d:a0:44:7a:64:4d:3e:2d:31:da:
         5b:63:06:3e:a2:28:d5:a3:e9:4f:21:48:48:09:75:d6:9f:b4:
         20:88:47:fa:57:bf:78:4c:41:d6:ab:db:b8:24:01:29:a3:59:
         0a:af:30:d7:32:53:63:12:df:0d:ab:b2:c0:92:c3:d3:ba:7b:
         34:85:b9:9c:ab:cb:7d:be:cd:88:55:e5:ef:1e:41:54:8c:a9:
         1f:37:46:65:64:4d:a3:7b:94:51:c5:11:fa:57:c4:81:bc:5f:
         96:bb:e7:c8:d9:fd:91:c2:f8:6f:e1:df:65:52:49:5f:b4:fd:
         2b:99:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:56 2026 by rpki-client