Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
File:                     RV9UXiqU8FHOuPgPRGwcthwObI4.mft (raw, json)
Hash identifier:          6hp9MJodg2HXOORT2BTIh0yookbXNJ0F8OYC2FNuL0k=
Subject key identifier:   A5:37:EB:B2:A6:C5:2F:7F:DC:1F:F2:7A:EC:46:2D:57:9D:B5:2A:0B
Authority key identifier: 45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
Certificate issuer:       /CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Certificate serial:       01A1DF1555309FC35A289A40E667196C85EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
Manifest number:          051B
Signing time:             Sun 15 Nov 2026 12:01:19 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:19 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:19 +0000
Files and hashes:         1: RV9UXiqU8FHOuPgPRGwcthwObI4.crl (hash: 0cam0ctEGJNhwkf7IjWdc/uvZNXCxHCzBa5/lxLfBKE=)
                          2: TGnGTCkP1dTeSG5Z0jeGksx2_TM.roa (hash: 4RJjvyKtkRooo1Te20TythHJtDrbG5VCS6d6MKrm0hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:55:30:9f:c3:5a:28:9a:40:e6:67:19:6c:85:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
        Validity
            Not Before: Nov 15 12:01:19 2026 GMT
            Not After : Nov 16 12:01:19 2026 GMT
        Subject: CN=a537ebb2a6c52f7fdc1ff27aec462d579db52a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:82:d3:5f:ef:e4:8d:14:73:3d:47:6c:27:48:
                    e3:27:41:b2:ab:cc:44:1a:e0:5c:10:35:d8:16:f9:
                    58:0c:2f:2f:91:05:0b:2f:27:51:16:39:49:91:8e:
                    f9:42:b6:d3:5e:42:30:47:b7:fd:30:b3:77:34:ef:
                    4d:7f:57:19:c1:32:d0:0b:98:d8:f1:fa:a1:13:f3:
                    b0:ba:13:22:02:11:ed:0f:1b:a8:ab:f2:ec:64:55:
                    34:6c:13:45:bc:7c:25:f6:0c:45:b4:ff:19:de:2e:
                    23:69:63:fd:dd:5d:91:36:82:db:2f:a5:c3:f5:5e:
                    d9:ad:74:2e:71:c1:50:85:78:a0:ce:b2:3c:14:f4:
                    fd:25:6b:1b:7a:0c:65:21:9b:76:48:df:34:22:65:
                    33:93:25:59:6d:c0:05:a2:fa:18:9a:17:54:2d:d2:
                    91:0e:a5:80:bc:44:c5:0d:50:93:50:f5:78:7a:e0:
                    44:60:37:ca:18:73:4b:e0:fd:f1:ce:8a:15:f1:dc:
                    d7:f3:ac:50:5c:dd:cb:14:8f:63:68:9b:b1:72:dd:
                    d5:9b:a2:12:0f:45:4f:7f:90:ae:10:39:2c:3a:23:
                    2f:29:3e:73:60:51:38:ce:be:05:67:45:57:a0:40:
                    ca:59:9e:05:f9:e7:af:73:d7:9e:6a:47:f3:b0:ee:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:37:EB:B2:A6:C5:2F:7F:DC:1F:F2:7A:EC:46:2D:57:9D:B5:2A:0B
            X509v3 Authority Key Identifier:
                keyid:45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:45:38:d8:60:a5:5d:96:23:83:7a:55:e9:5b:01:3c:8b:6a:
         3c:3f:2b:49:3a:93:56:fe:13:40:f8:2c:05:3e:5f:a9:4b:f9:
         bc:05:0e:6f:3d:f2:8d:a7:c1:55:6d:38:2b:87:8b:96:e7:4a:
         9c:a2:e2:93:c8:94:45:06:43:8e:a8:8a:b6:ca:ff:7f:d4:ae:
         ff:21:8f:cb:7f:d1:ff:4f:a9:b1:10:a9:e0:e3:96:73:d5:e3:
         44:38:a1:56:e0:5d:59:7c:4b:f6:b1:17:62:77:af:7c:cc:9b:
         d5:02:bd:8f:da:e5:fd:f0:c8:36:a2:9f:88:6e:9e:b9:81:3f:
         2a:07:69:c4:ec:59:50:43:f9:7f:25:1a:41:45:15:9d:c2:47:
         ad:31:91:b5:ad:ab:ab:97:e7:b0:b7:0b:eb:a8:51:bb:07:83:
         57:8c:5d:ef:23:59:d6:5b:c6:0e:ac:13:f4:4c:99:f6:4d:93:
         6a:7c:1e:78:ad:0a:99:8b:8f:1e:f2:09:d6:58:d6:d2:9e:ca:
         dc:94:14:b0:68:b3:88:d2:7b:59:30:43:83:82:bf:14:74:23:
         82:59:1b:23:fd:66:19:9f:15:7c:22:17:d2:99:ae:6b:71:ad:
         35:a2:2d:46:af:85:cd:37:0e:e6:b3:3b:d7:8f:89:91:ea:59:
         ff:82:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:31:55 2026 by rpki-client