Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          A/9es6ZlnAyyS9YZL0DjAAvDWu3RUfcHsRDvYSl+1k4=
Subject key identifier:   4A:BB:EE:0F:D4:7D:FC:9F:01:C6:1F:43:8E:CD:9B:DD:AD:EF:1E:D7
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       01A1DFBA6B0BF1FE8BE8045BE2D880D6A87A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          1B00
Signing time:             Sun 15 Nov 2026 15:01:38 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:38 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:38 +0000
Files and hashes:         1: 2WzfG0V96raprl5tsrksiHfaCdM.roa (hash: cj3zFnBwwSp9dR2SjduOa1CA7OqZ5tws9MqCW7cLVIs=)
                          2: GwGQYsMzCM-acyFwRTD_V6RJb1M.roa (hash: yUvTGQ5x8/a8Em1WiCW5G1UcimmI7vXu3ljW5sL9lrQ=)
                          3: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (hash: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c=)
                          4: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: CYVcDQqN4wFeDJorxrSPcaU2qmce5chF8PPSb3QPkL8=)
                          5: rjeQuso8QDTQv-e8DadgkyEpULg.roa (hash: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:ba:6b:0b:f1:fe:8b:e8:04:5b:e2:d8:80:d6:a8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Nov 15 15:01:38 2026 GMT
            Not After : Nov 16 15:01:38 2026 GMT
        Subject: CN=4abbee0fd47dfc9f01c61f438ecd9bddadef1ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:14:c7:9f:89:92:02:90:af:d9:17:e3:df:
                    8a:f6:7f:1b:f7:cd:70:bf:93:a1:24:06:4d:45:c4:
                    64:96:f3:27:74:09:28:85:96:a4:b7:f1:f7:82:9b:
                    c4:d4:a4:88:2e:56:53:c8:5d:06:ca:dc:b3:69:09:
                    26:8c:09:f2:54:d1:72:1c:a6:42:6b:32:9d:b5:de:
                    7f:64:8a:0a:4b:7e:4c:3f:df:b2:ab:6b:ad:bf:c6:
                    d2:f4:30:77:f6:53:56:1e:30:a2:7a:03:db:12:77:
                    99:37:cd:76:e5:2c:cf:05:40:d6:c0:4d:6c:f4:0e:
                    fc:55:1f:ed:bc:b8:0b:4c:dc:cd:9f:e9:f5:de:ec:
                    4c:a6:74:5d:34:0b:46:4b:36:d1:4b:79:5a:ec:79:
                    e1:65:20:05:6a:e2:4a:f5:ce:a1:a2:8e:d3:cf:1b:
                    8e:68:52:fb:24:4f:cd:c6:3b:1d:fc:4a:23:ec:64:
                    1c:59:d3:02:08:47:26:48:5e:4d:22:bf:31:a5:32:
                    f0:b4:10:b4:41:8f:ef:0f:9d:ab:4c:01:f6:22:4d:
                    b5:b0:d1:0f:2b:40:d4:b0:59:4f:d5:af:25:6c:76:
                    f6:a0:88:14:ee:6f:d9:e0:0c:02:56:91:b4:2e:c8:
                    a7:84:11:94:a2:7a:b9:fe:ee:ed:e7:ae:f4:05:de:
                    66:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BB:EE:0F:D4:7D:FC:9F:01:C6:1F:43:8E:CD:9B:DD:AD:EF:1E:D7
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2d:0c:11:8d:cb:04:a6:9b:58:1a:17:22:4f:b3:59:89:09:
         f8:3a:57:de:ae:40:14:28:94:a4:31:8f:41:da:9f:e0:eb:68:
         a6:02:b6:fe:d2:5a:63:85:76:f7:ad:37:58:ff:ee:30:c7:93:
         87:71:20:9d:e4:8f:4c:6e:09:83:21:b4:9a:d0:77:f6:7c:bc:
         37:b9:d6:ea:68:4b:08:de:e5:47:60:70:25:6c:01:d1:7c:1a:
         aa:30:44:88:da:f8:6a:97:7c:a7:d2:1c:63:a4:d3:f9:cc:ce:
         42:bd:3d:98:4c:9e:ad:8e:10:33:df:1a:51:ca:fb:63:34:ea:
         4b:43:89:fc:4a:e5:7f:65:aa:6f:22:39:f4:a5:6e:52:39:3f:
         5a:3e:5e:1d:e6:87:4b:1e:34:e0:2b:b1:b1:85:c3:41:d9:d3:
         f5:71:ee:31:54:b5:07:1a:45:98:7a:01:3b:ef:ed:43:f7:21:
         d8:5c:3b:98:38:e8:86:bb:a6:03:c3:4b:db:d5:93:75:d3:1b:
         c8:dd:fe:18:5a:94:e1:81:38:5c:4c:bb:9c:b4:05:bc:ec:79:
         38:eb:06:5e:e5:b5:e2:64:89:0e:31:aa:7e:2b:38:d3:c4:0e:
         cc:82:3e:12:87:2a:c8:67:b2:71:fd:34:9f:0f:fd:35:33:a8:
         f5:fe:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:59:33 2026 by rpki-client