Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File:                     1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier:          O8u7L8qNSFVSOsquN1iej2135SFaAwirwv6jiyzoVk4=
Subject key identifier:   D5:31:44:69:54:17:F8:63:80:51:83:A2:73:0E:49:0B:D3:41:29:61
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       01A1DE711D4383696CD2C26670C209C377A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number:          15FF
Signing time:             Sun 15 Nov 2026 09:01:57 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:57 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:57 +0000
Files and hashes:         1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: rVpGuNAtCJLoFb/06q+VkhdDG/CZPpejlM01vNuNls0=)
                          2: Gq5m_G-Nn2cWTHSMId-lsWbhgww.roa (hash: II7AjmOdLqNqKi9JZQ0wHWiOvxzW1DAYgv+REwV7TLk=)
                          3: L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa (hash: Ktu7W01HQP3w+NwclsoGu7pxp+ATVr6cehyCqENMhvY=)
                          4: OyDJxa-IKI9M6DEab_QdT2ZiPxM.roa (hash: TllnG1yiPkW1Kik3L852N3VXwGZ/qaH7M72QCj3GUaE=)
                          5: UZ7ePce2V0p3ZbzWXJ1ZgbnwDMQ.roa (hash: 3DbxDok/x0GzcOvaTUOPhPb4K0GtiOZj5rAjknMwnN0=)
                          6: xW-_5BziklddMP4N1WRDWUysaGI.roa (hash: 2PigZdbAmf20HzjgKmVA5WGwWsuRJUzgmLUGliAvzus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:71:1d:43:83:69:6c:d2:c2:66:70:c2:09:c3:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Nov 15 09:01:57 2026 GMT
            Not After : Nov 16 09:01:57 2026 GMT
        Subject: CN=d53144695417f863805183a2730e490bd3412961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:04:05:6b:81:c3:49:21:85:ad:6d:76:3a:
                    a5:de:39:4e:af:c9:68:cd:5b:9a:12:44:27:42:4a:
                    7e:61:0f:0f:a4:ca:0c:e8:15:9e:3b:a7:41:f1:d3:
                    5c:c8:e8:1d:05:d2:42:a3:96:22:6b:2a:0c:24:57:
                    90:12:b8:06:e3:ab:89:ff:88:77:8a:7d:49:df:ec:
                    8e:c3:a1:ec:ca:ac:14:e1:cd:94:2c:ce:4d:dd:d4:
                    82:83:83:63:1b:4b:be:9a:35:56:87:ab:ef:3a:cc:
                    8e:84:75:1a:8c:78:92:18:91:50:a2:ab:4f:24:a2:
                    34:6d:fc:e6:82:f0:10:c8:f5:da:37:40:a7:a1:33:
                    9e:bd:c8:71:fa:3f:b8:b8:87:e4:d1:6e:9b:4b:6d:
                    c7:1a:b3:1d:1d:a0:db:bc:3c:6b:2d:2b:ad:67:ee:
                    ba:78:0b:d0:96:a9:55:17:db:aa:30:01:ba:4b:37:
                    42:c7:15:7d:7c:d1:b4:76:1f:41:62:ac:85:c6:2d:
                    e3:44:2c:9f:40:73:78:4d:3b:af:d8:00:9f:22:e9:
                    94:47:39:fe:08:73:56:bb:c9:9a:ab:79:e1:7e:f6:
                    d8:82:f9:28:1f:52:63:e0:ee:86:db:7a:3f:13:50:
                    d9:a8:3f:6f:be:b7:d1:6d:49:42:2f:26:41:c1:d9:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:31:44:69:54:17:F8:63:80:51:83:A2:73:0E:49:0B:D3:41:29:61
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d1:9f:ee:3e:f7:ad:60:5c:81:5f:e1:70:14:ac:ed:a9:69:
         d2:0b:01:60:fe:e4:86:3a:23:a2:06:64:7a:a1:d8:38:8b:be:
         39:c1:5e:94:88:42:7f:44:18:6e:3c:90:1c:f7:c4:9e:06:76:
         c1:d6:0e:9d:c1:9b:11:23:eb:75:3e:6a:31:31:66:93:6d:60:
         85:93:fd:31:dd:e0:ce:ac:41:06:a9:03:75:bc:a8:af:78:af:
         bb:ae:69:d5:f3:9c:fd:12:ef:34:8f:9b:f0:65:31:cc:64:48:
         5e:d8:86:d0:e4:e9:9c:67:f3:66:57:99:65:0f:0f:2c:00:d5:
         1d:f4:c7:86:fd:d9:61:17:16:44:1f:ea:b1:ec:3b:88:79:9d:
         8d:be:60:3e:f3:96:6d:40:e6:77:cd:a2:7a:f3:e9:54:70:75:
         c4:d4:57:30:41:70:82:1e:12:b8:65:73:97:e0:e2:ee:6c:b9:
         2f:db:e4:86:6b:17:b6:a7:b1:2f:ad:b0:84:06:31:8e:72:f8:
         0c:bf:76:af:77:eb:b4:9d:19:10:39:0b:e2:75:2d:ed:83:a5:
         fb:c5:4d:63:37:88:d6:94:f1:6a:dd:f3:d8:07:5a:70:00:d7:
         dc:a7:ee:a0:f1:92:9d:ce:9e:9e:f7:7a:98:60:f6:3b:72:a5:
         ec:0d:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:50:59 2026 by rpki-client