Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          Gd0ORjuzfToDEmdgSx7BOSzyJYASgPE3nOMw9YeyC7c=
Subject key identifier:   DD:63:C8:CA:BF:B2:DF:14:FD:8B:A6:DD:0B:02:E6:90:E4:2C:2A:C9
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       01A1DDCC4AEF8E5B5F4B0566DBE0D9AD69F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          1AFB
Signing time:             Sun 15 Nov 2026 06:01:55 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:55 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:55 +0000
Files and hashes:         1: V2qGOcFGArZxDVhU93OkH7I5tZU.roa (hash: Qx/eCdyI2+oie6BNIEJmjhm2r/dBvwBAeJ6b6LuahQY=)
                          2: WrF8RZjbYEiiD0wqPqyzH7bojHg.roa (hash: SASBUcOpWPVFaGgXimL1oxrkpjPpL7o7jdrVHK+m9J4=)
                          3: gdPavX0yF7T7Wyp2RjBRxSe2U1s.roa (hash: YT5SSoDomUlfm9K9ESFgm6mAwjS+3bk9K/ENIJxNzus=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: LwYBhRkPfcttIgUI53QfkJJBx6Sv1tyPWnZOfPEdWcI=)
                          5: m5yMYV4pBm1qpA0jit6hm99wXvM.roa (hash: 15C3Wvo3bxrDjbCmZIkVXncLYoGj5VtzpzHvZLU0GJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:4a:ef:8e:5b:5f:4b:05:66:db:e0:d9:ad:69:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Nov 15 06:01:55 2026 GMT
            Not After : Nov 16 06:01:55 2026 GMT
        Subject: CN=dd63c8cabfb2df14fd8ba6dd0b02e690e42c2ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:f7:3b:b7:ec:ca:18:ce:fc:48:b3:44:20:
                    13:8a:a8:12:a9:c8:b1:80:58:49:cf:1d:19:89:6c:
                    ca:36:16:fc:7a:4f:35:9e:38:7b:bf:6a:e0:44:db:
                    7f:94:df:67:67:2d:99:15:9f:55:04:09:15:74:ed:
                    12:36:61:57:45:70:f5:33:a1:92:76:72:85:ff:60:
                    37:60:b9:fd:e5:bf:bd:6e:d5:1c:fb:73:d5:e0:f4:
                    02:00:c7:b8:f2:a3:7e:1e:23:8a:76:6c:5c:04:81:
                    1f:ef:34:d4:2f:2f:f6:f1:20:12:88:ef:07:02:50:
                    e8:82:4f:84:76:3f:f2:1a:da:eb:c1:d7:de:8a:4f:
                    a6:7d:08:34:df:21:12:54:ab:b2:18:86:21:74:2c:
                    e1:c7:be:a0:b7:c5:1b:53:0c:bb:19:ea:32:31:81:
                    6c:89:88:66:cc:d5:d8:ef:78:2b:c4:b5:29:86:2d:
                    10:f8:ac:3e:1b:a8:25:5f:77:ee:41:30:1e:6c:76:
                    48:3c:6d:c0:fe:67:18:3b:cd:64:8c:ce:02:c7:60:
                    5e:0b:66:ee:24:2a:fa:12:2d:f7:a5:66:5d:23:34:
                    fc:4b:4c:8c:af:f7:45:fd:d0:3e:e5:17:4b:83:c1:
                    13:35:24:47:c8:f5:1e:9a:09:92:20:8e:e0:4c:4c:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:63:C8:CA:BF:B2:DF:14:FD:8B:A6:DD:0B:02:E6:90:E4:2C:2A:C9
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:97:91:21:e1:33:fe:2a:7e:aa:7a:7b:0e:1e:31:65:72:57:
         57:73:0e:ab:9e:50:4d:45:58:8f:90:e1:f8:d7:df:dc:31:4c:
         f3:28:bc:4e:75:78:b6:30:9f:99:03:9d:9d:2f:d1:75:a1:52:
         69:18:be:b1:47:fd:15:c4:05:48:ff:58:7e:e0:f9:b9:a3:35:
         b4:d5:9a:f5:e3:62:39:ef:6e:b9:3e:6a:dd:ad:a9:ea:7c:4a:
         06:9f:fc:32:45:58:0b:93:d9:e1:c8:0a:cc:ac:35:be:2b:86:
         a3:a3:13:4f:a9:73:9d:36:1b:fc:be:d6:11:66:da:c6:82:f7:
         81:0b:8a:8c:96:df:7b:c9:62:fb:05:0b:14:0d:c4:a2:97:e3:
         69:90:d6:44:43:87:2b:74:55:07:d4:e7:26:6d:31:2c:37:4a:
         6d:8e:f5:16:e8:69:20:82:eb:32:42:35:77:f0:de:c2:f1:6f:
         ee:7b:53:e5:17:cb:64:bb:de:97:63:02:6f:3a:9a:25:e5:63:
         2a:73:4c:ad:3e:19:5a:a8:16:a9:73:bc:f3:ac:b6:bc:9a:2c:
         f7:a9:9c:05:73:0b:5a:2d:f0:82:8f:f0:bc:09:29:08:3a:08:
         df:c2:a3:d7:28:7c:bc:9e:da:5f:8b:60:56:89:f0:e5:dc:9d:
         bf:3c:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:20 2026 by rpki-client