Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File:                     9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier:          wv5Opcyi6/RWkSIGocJ2ewNr0cthvoQg5di8KtQ021o=
Subject key identifier:   04:31:51:2A:47:1A:AC:0B:E8:6B:B2:60:E3:F5:3B:78:B1:B9:1B:3B
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer:       /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial:       01A1C479BE730C68A17CFB5A7DA1A04F5DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number:          1AEB
Signing time:             Tue 10 Nov 2026 08:01:15 +0000
Manifest this update:     Tue 10 Nov 2026 08:01:15 +0000
Manifest next update:     Wed 11 Nov 2026 08:01:15 +0000
Files and hashes:         1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: YJSn/9/RqJNzgKHL7c5GrCGJ9N3QbqJVY0uWGzOHXzU=)
                          2: PTGVKq0rtp-W0LQXrCMcfxye3TY.roa (hash: CHD9DCCggVJLAY5cygmu9cgDCvnD2GXCe9SYsLHbrlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c4:79:be:73:0c:68:a1:7c:fb:5a:7d:a1:a0:4f:5d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
        Validity
            Not Before: Nov 10 08:01:15 2026 GMT
            Not After : Nov 11 08:01:15 2026 GMT
        Subject: CN=0431512a471aac0be86bb260e3f53b78b1b91b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:46:27:dd:cb:5e:61:e4:91:99:76:32:32:
                    32:1d:15:7f:75:7f:01:23:22:20:05:2e:a4:11:dc:
                    de:60:4b:d1:a5:50:8f:4c:be:e6:03:2e:92:57:2e:
                    54:d1:e1:a9:45:cc:12:08:41:d1:98:d8:e3:06:7a:
                    8b:9d:de:8e:00:df:d3:72:f3:38:cf:77:f5:74:8c:
                    03:a9:a0:0c:71:ab:47:67:72:7c:10:6e:f7:6a:29:
                    c0:f2:7c:b3:dc:77:ad:67:0d:36:20:f6:60:09:07:
                    8e:fc:5b:02:8c:bf:65:dd:a7:bf:52:6c:19:9e:12:
                    6d:25:42:e8:54:fa:39:4e:16:48:01:d5:37:1a:1f:
                    06:44:20:b4:70:bf:22:74:cf:4c:37:4a:ad:bf:00:
                    c4:f9:05:06:9c:d4:60:c7:88:c0:e1:4a:7f:45:16:
                    78:a1:a6:a2:10:83:cb:68:01:c7:2a:3b:55:8f:06:
                    a0:f0:20:56:60:a7:ab:81:66:a2:d4:9b:29:c1:d6:
                    69:db:9b:1d:4e:69:f3:da:11:5d:2e:13:ec:55:78:
                    69:74:28:09:72:54:4d:0c:a5:8c:f3:76:96:f3:83:
                    56:e4:e5:b8:b6:d6:62:d5:5a:4d:e0:de:37:56:b6:
                    95:32:32:6b:c9:d8:68:38:29:da:4f:1c:43:69:bc:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:31:51:2A:47:1A:AC:0B:E8:6B:B2:60:E3:F5:3B:78:B1:B9:1B:3B
            X509v3 Authority Key Identifier:
                keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b8:3c:c5:51:e9:a1:d0:3a:89:b3:aa:f7:ee:26:59:e2:57:
         a5:ca:ee:67:b6:c9:11:38:c2:96:99:43:69:c9:99:5b:d4:60:
         ff:f6:f3:bc:c3:b5:54:6d:d2:f4:e3:e6:06:c7:0b:8b:e1:b9:
         9c:e7:4b:c5:33:99:da:6c:c0:3d:d0:57:65:d5:00:e5:01:7b:
         f4:0b:1b:b6:c1:81:2b:b8:1a:39:78:0a:07:4d:a9:5b:73:db:
         9a:ed:32:fd:d4:7b:88:42:95:1f:7c:8a:07:ff:3c:5d:cf:b8:
         8a:ff:cb:c0:c0:ee:51:9c:98:95:38:89:e3:ed:aa:35:68:b3:
         69:45:d6:b7:7b:a4:89:f2:9f:2f:8f:50:f2:48:c6:88:17:9e:
         c1:ab:b3:17:37:84:36:67:ce:a1:46:be:df:8f:55:45:17:9d:
         e4:1c:06:b0:e8:3b:22:22:42:2a:e2:f7:31:45:65:b3:38:e3:
         ef:15:6d:b0:8a:39:45:b7:bc:41:bd:ff:09:4b:69:93:00:d9:
         f3:0c:76:09:40:6a:c6:6d:6a:08:66:f3:1f:fa:00:49:69:52:
         74:21:df:a0:d4:0e:ba:dc:04:f2:93:7c:87:ea:53:13:ab:30:
         f4:95:c7:0d:16:33:38:62:4c:33:0b:b9:48:aa:f3:91:53:29:
         80:b9:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:32:14 2026 by rpki-client