Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File:                     DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier:          svBx+BqUJxmWeqgVeuxJ/tH430LjDNqSQlgVL8VNiKM=
Subject key identifier:   F6:E5:F4:F7:91:2F:CF:AA:A4:2F:88:C5:42:75:29:24:31:C8:52:7A
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer:       /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial:       01A1DA948BC9E98B2407646855D6E2D16B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number:          1AFB
Signing time:             Sat 14 Nov 2026 15:02:10 +0000
Manifest this update:     Sat 14 Nov 2026 15:02:10 +0000
Manifest next update:     Sun 15 Nov 2026 15:02:10 +0000
Files and hashes:         1: 1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa (hash: Q/Tsqdd7rd4T6xRRkiE1SIt+/mkcRs5YGJIeO2ihizo=)
                          2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: sejr/DDh2J2nVMVrDhGeESW12DTABruXce3SqIjin6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:94:8b:c9:e9:8b:24:07:64:68:55:d6:e2:d1:6b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
        Validity
            Not Before: Nov 14 15:02:10 2026 GMT
            Not After : Nov 15 15:02:10 2026 GMT
        Subject: CN=f6e5f4f7912fcfaaa42f88c54275292431c8527a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:b4:60:66:f1:ce:73:a5:fe:32:1d:94:6e:
                    ad:c9:0e:59:a6:01:11:f8:80:8c:18:18:d8:37:ef:
                    13:78:6e:ba:d9:57:95:09:97:f8:8c:73:62:f2:7f:
                    29:ed:37:34:57:cc:b4:b2:7b:4b:1e:59:85:45:45:
                    56:2c:96:05:ca:f7:8c:df:84:01:53:b7:16:f6:42:
                    e2:20:1b:81:3d:a6:a1:74:7e:ca:7f:e1:e0:d3:77:
                    67:b3:96:9a:3a:75:b0:68:57:52:4a:60:e7:28:be:
                    11:34:f9:6c:7b:3e:1e:73:35:bb:07:6a:10:9f:cc:
                    95:f5:ae:98:63:a8:ef:4a:c1:9f:e3:77:3d:5b:92:
                    c2:ff:44:a5:f8:7a:4e:d2:0f:1c:6c:55:33:fd:74:
                    1a:12:f3:9f:33:14:b9:e0:36:77:81:3f:09:36:cb:
                    c8:20:a7:5c:7b:b2:8f:3b:ef:d0:45:ab:14:07:86:
                    6a:33:c7:a5:c2:67:e0:bf:c4:c8:a3:8a:f9:29:6a:
                    18:8f:03:0f:ec:e0:ea:92:26:ef:fc:1e:77:51:77:
                    55:45:78:3d:d0:20:24:8b:bb:37:fb:50:12:a9:dc:
                    47:ca:7f:c4:41:7e:cc:43:6b:ed:7b:25:70:d9:a6:
                    88:47:a4:24:90:92:b3:be:a7:cf:da:24:05:72:ac:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E5:F4:F7:91:2F:CF:AA:A4:2F:88:C5:42:75:29:24:31:C8:52:7A
            X509v3 Authority Key Identifier:
                keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:30:44:3f:a5:a0:f8:25:32:e9:14:d2:7c:a6:92:26:64:
         d5:55:33:fd:0f:9a:51:c7:7d:94:5b:25:39:f4:cd:b9:71:d7:
         c1:7c:c9:55:ac:12:72:f9:fa:81:66:d5:ce:1f:0b:50:ef:de:
         23:69:23:49:b0:d1:75:8b:cb:27:e6:41:e5:cb:c0:cd:43:4f:
         e5:cd:8e:9e:f2:a5:de:5d:1d:d4:fa:c8:1f:fd:6d:41:f5:dc:
         0d:53:b2:c2:21:69:29:45:c4:8e:6b:27:67:f5:e5:9a:1c:67:
         50:14:ab:f9:44:3d:40:73:8f:84:6f:20:53:f3:6d:9a:b7:a5:
         52:c6:d1:1f:ae:d8:5e:3d:c3:23:d4:df:51:53:30:80:35:eb:
         a2:24:ab:e1:db:9d:ba:96:d2:ea:81:3f:86:e4:32:de:a8:f1:
         eb:75:bd:90:14:2a:d6:68:7b:ee:32:19:37:f4:cc:db:81:2b:
         f3:1c:f5:a1:0e:02:12:68:15:fc:95:4d:c5:6f:9a:22:ed:ce:
         cf:bc:19:49:05:3c:54:70:a7:75:58:e5:50:5e:4e:a7:a3:35:
         66:fc:c7:51:8a:1d:40:74:f6:77:97:19:ce:f7:48:5f:84:ed:
         e4:99:74:90:a0:10:bc:95:01:37:a4:83:ea:f5:9b:a5:36:bc:
         9c:b3:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:34:47 2026 by rpki-client