Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File:                     1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier:          ctAmfLy2uMH3YR1UISTDoA/sp0YlQkinmsa7yXvKvC8=
Subject key identifier:   FB:45:4D:E8:1D:7A:2C:AC:DA:B2:1F:28:71:1A:AC:94:20:C5:8A:B0
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer:       /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial:       01A1E05FBF961E837644A1BFB5184A8FA61C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number:          08EE
Signing time:             Sun 15 Nov 2026 18:02:13 +0000
Manifest this update:     Sun 15 Nov 2026 18:02:13 +0000
Manifest next update:     Mon 16 Nov 2026 18:02:13 +0000
Files and hashes:         1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: Rcl1a1Gg3VYMb1me6Vxs31g2RpjVAVDq9YhAOAs2hK0=)
                          2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:5f:bf:96:1e:83:76:44:a1:bf:b5:18:4a:8f:a6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
        Validity
            Not Before: Nov 15 18:02:13 2026 GMT
            Not After : Nov 16 18:02:13 2026 GMT
        Subject: CN=fb454de81d7a2cacdab21f28711aac9420c58ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:80:2c:ba:08:31:f2:7e:ec:05:81:65:fd:7e:
                    36:31:8f:ab:49:f4:14:fd:31:bc:a8:25:70:e8:bc:
                    73:ea:82:ea:c3:56:ed:f0:c9:64:63:4e:c8:e4:0d:
                    1a:21:e9:1f:14:5b:02:20:ba:1e:de:5d:ec:34:10:
                    b7:d0:29:3a:fa:81:0a:47:4a:3f:77:09:e7:c6:7f:
                    38:5a:e3:c4:5f:58:2e:7a:2f:58:96:3b:01:45:db:
                    4a:8a:7b:96:b0:4d:98:75:71:62:f8:8f:45:9c:8c:
                    4a:f3:90:cb:fa:37:ea:e2:66:5e:3d:55:3e:31:1e:
                    67:a4:d9:28:03:6f:8e:88:bc:0d:d2:24:3e:78:04:
                    78:2d:a4:58:6e:56:02:46:26:19:ee:9b:08:b7:02:
                    d7:34:26:fd:4d:4a:54:d0:ee:64:5b:cc:ae:dd:98:
                    06:2f:4b:bd:85:19:ee:c7:23:09:31:3c:46:76:0a:
                    b8:9b:6b:c4:0e:dd:47:90:96:30:0d:3f:02:a6:85:
                    71:fa:34:cd:5e:f5:21:fc:12:2d:ba:ed:d3:9d:d9:
                    e1:46:d8:a1:a2:30:ac:6c:7b:b0:67:19:ec:45:66:
                    1b:25:36:4e:ac:a1:fd:9c:22:02:71:f2:3e:02:e5:
                    23:05:6a:a7:0d:33:c6:ed:46:e7:4e:c6:da:c8:ef:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:4D:E8:1D:7A:2C:AC:DA:B2:1F:28:71:1A:AC:94:20:C5:8A:B0
            X509v3 Authority Key Identifier:
                keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:75:64:d8:5f:25:76:01:eb:34:72:30:fd:08:33:ac:33:36:
         78:cf:93:2d:ad:07:3d:22:27:f0:34:4c:0d:97:45:5f:3a:7a:
         64:f4:37:bc:de:13:8a:76:57:d6:80:70:ea:e7:80:01:5a:43:
         77:dc:ff:eb:81:c4:81:6c:cc:ab:01:c7:88:7b:50:9a:ee:86:
         e6:08:16:f3:d8:04:89:2d:ca:5c:08:82:e1:d6:c9:ec:60:78:
         5d:c7:1a:12:2b:44:e8:eb:00:3a:01:f1:af:69:b0:8c:18:dc:
         e9:ae:6b:d9:e8:12:e0:91:78:5f:4d:5f:0e:34:51:0c:61:37:
         0a:e2:ee:81:76:b1:a8:05:53:07:b7:10:54:5b:6c:59:45:73:
         4e:70:8d:1e:8d:e3:cf:e3:fa:2f:de:82:39:48:67:2f:8f:05:
         3f:b7:54:84:63:0c:70:0e:64:93:12:ac:38:6a:4e:64:94:7b:
         9b:6c:1a:71:80:da:3e:b7:c5:4c:f0:ef:7a:6c:97:ae:a5:b9:
         c7:26:e8:d1:ae:cb:56:39:26:15:5e:97:35:7a:65:f8:e6:8b:
         07:b4:18:fa:be:1b:96:ac:53:4f:d4:19:b5:71:a3:d2:e4:36:
         b6:48:3c:5b:60:85:cd:70:1b:e3:e0:a8:a4:1d:52:a3:a5:b0:
         cd:67:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:27:35 2026 by rpki-client