Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          lZuBoOQ37SG6vluwh2T4z2u3SFwSL1lul4v2aFT3uvs=
Subject key identifier:   34:68:72:DD:79:D6:D0:74:D6:22:E5:07:C0:B4:17:5A:93:B6:FA:86
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       01A1DEDEBDFCE8E388E57AC424B17238104F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          1AFA
Signing time:             Sun 15 Nov 2026 11:01:41 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:41 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:41 +0000
Files and hashes:         1: GJZwZ1mhnOH65Nouqdeal3NahIo.asa (hash: nsKksxN8E+XqWBRESNIPZeDToWlex4siuJfC0nnT4wg=)
                          2: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: m+2ugeg+F/Xn7TWwD4GBd5mqt5dqKXvGgUyXDu7yKe4=)
                          3: grSCYxr48GkiiLbXBFVvfPRGYDo.roa (hash: ORzXiCXEzDF1CBNSnKaHZkAM6lGFJh0djBj0NrfV6eg=)
                          4: mzEPgdHmNv6bVe96qDtXIbjnZeI.roa (hash: tpqt79V0TYHF3bsLDiHBBd9SAjg/wnNF2aCiJu5NIss=)
                          5: nqWceW59cc5C0IxxcTrydFGb1mM.roa (hash: Mg96y0myQny6t5nbNgLVhCKgERm7JW8N5FpEDhGxjoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:bd:fc:e8:e3:88:e5:7a:c4:24:b1:72:38:10:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Nov 15 11:01:41 2026 GMT
            Not After : Nov 16 11:01:41 2026 GMT
        Subject: CN=346872dd79d6d074d622e507c0b4175a93b6fa86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:c2:11:f1:1f:f5:e4:d5:b4:8e:d6:2a:05:
                    72:c0:64:d1:b0:6e:a2:48:26:55:28:30:0c:c8:60:
                    cc:d3:f1:c4:92:8d:1d:8c:32:78:54:72:eb:89:3f:
                    56:e2:59:34:75:a1:91:33:59:a9:d9:0e:ab:ba:c5:
                    8f:78:99:4e:82:14:bb:7f:5e:64:08:ab:1b:c6:b3:
                    f0:8e:55:b9:cd:bf:ec:d2:e3:c2:ea:f8:0e:0f:c6:
                    8e:ca:6b:0d:f2:68:a0:be:a7:fb:b1:79:c8:54:11:
                    86:2a:23:22:a9:07:8d:9a:42:b2:af:f9:02:da:2e:
                    27:e4:8b:0a:64:a9:87:c9:41:3e:c3:cf:9b:c7:09:
                    a4:66:1e:6b:12:99:c1:34:43:51:a8:21:95:b7:09:
                    17:67:46:90:b8:cf:da:3a:bc:d0:ef:65:e6:5a:e9:
                    b9:06:24:53:81:e2:ee:b9:f2:f1:17:22:0f:b1:54:
                    eb:a2:4f:83:5f:af:96:7b:6a:09:37:8b:39:26:e9:
                    45:de:8e:4c:e8:35:a7:7c:7b:d5:68:ca:19:de:f5:
                    1d:c1:33:f9:6b:64:19:cb:54:4c:c8:ec:31:97:eb:
                    b4:2d:56:be:df:5b:c6:a6:8e:83:05:f9:46:d1:55:
                    6b:8f:45:f1:07:6d:85:1e:bd:e4:0b:93:63:69:5b:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:72:DD:79:D6:D0:74:D6:22:E5:07:C0:B4:17:5A:93:B6:FA:86
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:28:bf:fb:14:6d:d0:14:74:62:6b:60:1b:fc:05:32:4e:4c:
         79:6d:d4:7e:8c:b7:d0:56:d4:7e:4b:7b:aa:fd:ce:b3:c1:93:
         e6:8a:f4:ea:ad:b1:71:f0:7f:09:3a:b6:9a:53:0a:ca:50:e9:
         9e:4c:6a:7c:3e:c4:86:22:f7:9f:b8:98:56:be:71:90:70:a9:
         09:13:b3:7b:12:8a:10:43:ad:56:0e:91:80:48:00:7d:3c:23:
         ff:b0:0e:5c:93:49:d2:b0:b7:dd:a2:b7:b9:e6:39:68:7e:66:
         b4:22:6a:49:dd:69:94:0b:25:01:9c:20:2d:51:6e:16:15:72:
         37:34:32:69:0a:a3:3d:08:86:07:7a:ce:43:95:64:85:66:c5:
         68:8f:5b:79:ab:90:36:ad:ae:cf:a4:04:88:5d:c6:12:68:e8:
         2d:92:71:dd:c6:a1:b0:16:24:b6:96:eb:7d:5a:c5:c6:2c:c8:
         d4:e0:69:e9:ba:fe:d7:2c:ba:1f:c0:9f:a7:71:ba:00:a2:8a:
         20:50:ce:1c:9c:fd:df:22:0c:bb:5a:15:96:7a:f3:83:25:64:
         1d:49:60:2f:5b:52:07:c7:60:fb:e2:c9:76:77:0d:22:63:41:
         8c:d8:0c:45:07:50:9e:1a:57:7c:1d:c4:5d:30:1c:40:6c:ad:
         8f:68:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:51:44 2026 by rpki-client