Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
File:                     XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft (raw, json)
Hash identifier:          g01+rp/fbzECjUNfwo/ISB4GMyi9PFkAPNzitDkdGNc=
Subject key identifier:   94:ED:FF:6A:43:DC:69:FD:38:C3:52:64:D9:0D:62:C4:B4:B0:7B:12
Authority key identifier: 5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
Certificate issuer:       /CN=5dd312211f1957129c21c417503d43b00aa26b43
Certificate serial:       01A1DF83053F235B5592795624B578F9D6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
Manifest number:          93
Signing time:             Sun 15 Nov 2026 14:01:08 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:08 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:08 +0000
Files and hashes:         1: 28w2hpHigCKe0F0MAKosL3WGTtk.roa (hash: SUNgt+RCKbkoZC99lR1Udo1kH5JcTbA0j1lguQ7eVUM=)
                          2: XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl (hash: 9v7Y5DPDn2LB25/UDoc9sLPkHkeM8DGbXwNxN7DwaAo=)
                          3: XwsEHTTfKZyOfZioYcd5xK-7DUY.roa (hash: W0QoWvYYKuoimLyk595xMNCZXWen03Fn/n2Kgoe4UIg=)
                          4: dFXsJZfQgG4PPcKpL9A4u7SceGI.roa (hash: +r3bmYepYhEkqhELDDbQyhEm/b/SgOFhDC0nC5oacBE=)
                          5: f7jNgyX3U7nRaIQOMvon2qMm6C0.roa (hash: cq89l6N2m5eqO0lq5rpFf8M82iYDKzuFWGU5MwkZAi4=)
                          6: tlPhgJrYrC8oySm3UeQESAEzsZw.roa (hash: XK/LL5VakqWxgYff8rMzkZEOne7oJFvF+WwLbSMcQXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:05:3f:23:5b:55:92:79:56:24:b5:78:f9:d6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd312211f1957129c21c417503d43b00aa26b43
        Validity
            Not Before: Nov 15 14:01:08 2026 GMT
            Not After : Nov 16 14:01:08 2026 GMT
        Subject: CN=94edff6a43dc69fd38c35264d90d62c4b4b07b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:6f:d9:7b:12:2f:41:a3:8c:c3:01:38:be:
                    e8:40:88:03:f9:91:f8:87:09:73:61:96:c6:7a:6e:
                    46:0a:21:e1:68:fb:8a:8e:d9:61:c3:fa:af:63:cd:
                    f5:e1:7c:43:16:63:41:cb:ec:50:c2:e1:e7:cc:b9:
                    55:96:79:de:3c:c5:2e:f9:7f:4b:f6:83:8b:10:6e:
                    3f:c7:b6:dd:f8:14:a8:c4:7a:9d:4f:f1:59:50:99:
                    37:22:b2:78:38:83:46:81:75:db:59:05:d6:db:c0:
                    c6:05:1e:8c:df:ac:b5:2a:56:49:c7:f2:88:7c:a7:
                    e5:ff:92:56:e2:b1:1a:9b:f7:79:68:2b:d3:30:cb:
                    9e:ea:a1:ba:7e:d6:91:92:b5:ab:f1:72:38:ba:6d:
                    d2:71:7f:82:4a:44:24:e6:ee:da:2d:4b:70:ac:bd:
                    d1:31:e8:f4:b3:9f:bb:a0:d0:7e:19:6e:d9:61:06:
                    2f:e2:55:f9:bf:03:dc:43:73:58:b3:4d:4c:b4:b7:
                    5c:5b:7b:23:80:37:f8:43:fd:f1:f1:87:97:e1:88:
                    d5:86:dc:65:ce:94:f9:82:9f:05:a6:94:62:92:8a:
                    37:73:e1:82:df:73:a7:1a:03:13:5d:1b:40:39:dc:
                    8a:93:44:56:8f:d1:36:75:54:ea:f8:72:55:f1:10:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:FF:6A:43:DC:69:FD:38:C3:52:64:D9:0D:62:C4:B4:B0:7B:12
            X509v3 Authority Key Identifier:
                keyid:5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:8d:0a:4e:ee:80:1f:48:a4:ed:45:de:69:6b:62:8d:80:d5:
         10:13:53:16:8f:03:fa:c4:cc:2d:6c:29:8e:16:02:21:66:55:
         1d:77:ca:67:07:f5:47:7c:41:e2:28:e3:73:74:d4:48:c1:ce:
         eb:59:d4:52:a9:fb:67:84:fb:09:a4:fd:2f:f0:75:06:81:db:
         e4:3c:b4:7f:c8:3c:60:6b:e6:48:25:f1:71:ff:ba:3c:7a:e0:
         46:c1:45:6a:ee:82:49:7d:b6:e8:4f:d4:3d:0c:fd:97:62:55:
         0a:4f:e0:e6:3f:11:f7:7d:05:b7:ed:ab:84:45:77:d6:62:8c:
         61:d3:dd:ea:da:36:9a:13:4a:3a:fd:5e:4e:3a:15:6e:2d:d4:
         7b:4f:6c:71:34:6e:8b:a1:94:86:89:15:31:59:7e:eb:87:44:
         bd:c1:26:c3:9c:a3:61:26:3a:80:a1:7b:05:15:2e:9f:7d:d0:
         58:64:34:a1:46:19:1c:90:bd:48:8a:98:ae:4a:51:c3:b9:af:
         7d:dc:78:60:06:49:cb:1d:a7:5e:92:bb:ce:0a:cd:45:c9:05:
         7e:84:23:81:71:3a:b0:a5:40:47:95:3b:d1:ac:82:6b:8a:29:
         f1:eb:83:8c:2e:41:30:64:b0:8d:a8:0d:3f:76:5e:5c:4d:ac:
         51:35:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:24 2026 by rpki-client