Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File:                     73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier:          dl6zuf8lsy+utiiE+RCrboUwrvihR+AoZxTQBoZwT3w=
Subject key identifier:   01:6D:F5:BD:95:7A:DE:5B:3A:89:E4:DD:F3:9B:FF:2C:D5:C3:51:1F
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer:       /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial:       01A1C1AEE362364D1A4807BB35460DCD6EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number:          1AEA
Signing time:             Mon 09 Nov 2026 19:00:26 +0000
Manifest this update:     Mon 09 Nov 2026 19:00:26 +0000
Manifest next update:     Tue 10 Nov 2026 19:00:26 +0000
Files and hashes:         1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: 2uosSfcq5b02nrd9xSFAV7JRWtdD0NMBE8zQ/NHIsg8=)
                          2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c1:ae:e3:62:36:4d:1a:48:07:bb:35:46:0d:cd:6e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
        Validity
            Not Before: Nov  9 19:00:26 2026 GMT
            Not After : Nov 10 19:00:26 2026 GMT
        Subject: CN=016df5bd957ade5b3a89e4ddf39bff2cd5c3511f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:9a:6a:5a:4c:b6:b2:16:c5:c2:32:a3:ea:
                    a9:24:2d:31:a3:77:ce:f2:c0:e1:f1:6b:9b:7c:d7:
                    a4:5f:c5:8a:1f:ee:8c:5a:78:61:86:10:43:a9:60:
                    7f:b9:de:3b:78:73:3a:f2:ad:aa:24:b4:62:eb:ce:
                    46:2b:51:96:b7:03:44:c1:6d:12:8e:ca:cb:2c:b6:
                    ce:34:c8:be:ad:6a:67:7f:63:33:7a:8c:a2:9a:d2:
                    d4:81:fe:bc:60:e1:24:5c:eb:e1:de:8b:79:5f:54:
                    c0:f2:49:65:be:ef:84:76:83:d3:59:bf:2f:0a:01:
                    03:cf:05:2c:2f:ae:49:54:9e:cc:f9:e9:19:0f:cf:
                    74:43:c9:78:e7:61:0c:1b:dd:65:fc:08:cb:a5:a3:
                    9c:fc:6d:1d:08:ff:53:f4:1e:f4:ec:9e:6f:5c:80:
                    f6:de:3a:cf:cc:52:e1:40:57:04:6e:d8:76:9e:dd:
                    5f:95:98:44:76:64:2a:17:1e:36:8d:4e:39:0a:f7:
                    6e:d8:c1:dc:ea:20:f2:12:5d:27:b8:dc:30:c9:1a:
                    23:85:4f:22:d5:a2:a4:c5:2a:e7:9c:48:fb:30:bf:
                    b4:8d:35:de:b6:c7:6b:46:36:fc:e7:f8:81:c8:d4:
                    dc:d5:93:70:11:05:7a:e2:69:35:95:5d:85:e8:1c:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:F5:BD:95:7A:DE:5B:3A:89:E4:DD:F3:9B:FF:2C:D5:C3:51:1F
            X509v3 Authority Key Identifier:
                keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:63:47:16:aa:73:34:75:12:ba:c9:6f:47:10:fd:65:80:54:
         68:70:44:c1:e1:49:c9:da:ae:54:4a:56:12:49:8a:a0:34:68:
         74:89:70:fd:05:85:ee:08:04:91:aa:31:65:6f:f7:31:33:83:
         c7:da:af:1e:cb:01:30:8c:6c:df:e8:b6:3a:4c:da:19:53:3c:
         f5:8a:03:cd:c0:75:12:d6:27:88:81:7c:e1:2a:17:42:d3:8f:
         1f:cd:93:92:ad:25:e7:10:ef:fd:74:e6:18:cd:38:6b:b7:23:
         d1:ca:35:19:11:0f:f6:b5:47:cd:20:a4:a9:e8:83:b2:78:86:
         78:7e:76:3c:e3:53:67:ab:93:8c:fd:ab:79:1a:f9:d1:ce:5d:
         ca:ba:84:09:d1:a5:13:d2:5a:e9:90:07:68:bb:04:ee:96:e4:
         76:f4:1e:7a:f3:cc:36:a5:6e:f7:86:80:e7:ef:e1:16:95:d8:
         2a:a4:fb:7c:cc:da:c2:85:6d:5f:c3:7d:68:75:28:65:e7:c4:
         2d:c3:74:21:aa:16:3c:78:f3:45:3b:fd:6e:c4:ed:01:3e:2b:
         43:58:59:df:92:af:92:30:48:71:ed:f6:aa:2b:c1:e6:25:31:
         63:4d:c4:52:6b:4b:0f:42:f3:5f:16:f4:c0:1a:0f:3d:86:78:
         39:e1:62:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:14:36 2026 by rpki-client