Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          vbT/NwIgMLMEWZ9MxUV0NQcw+iVU71CTZeHaYP3bZWU=
Subject key identifier:   71:3A:F3:B9:14:D3:19:4C:E7:97:A7:0E:1C:D3:26:BB:48:9A:83:27
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       01A1E05FB752DF73B0916B3F1D863BB0B5F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          1A2E
Signing time:             Sun 15 Nov 2026 18:02:11 +0000
Manifest this update:     Sun 15 Nov 2026 18:02:11 +0000
Manifest next update:     Mon 16 Nov 2026 18:02:11 +0000
Files and hashes:         1: NGSRZ0UFf37oBgMflKRqMJVzu1A.roa (hash: QQl6ufsi4HXmy3ASinxAh+zaiJ4iVflIUzf0L3Srl8Q=)
                          2: cnqrVuurtzefRH7SXfJZEmIqN0c.roa (hash: Vh3D8b6qjUnsJyNx9UNrDRqqXIGsiNFhU3lLE/75w7s=)
                          3: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: NmGyY/JTgfU0sVh/cxXdpHR4ohrfHUbJ/ZX2SCmgnDM=)
                          4: sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa (hash: GJ8bFB5CbpvRHqB9ftaag6jbvrupCXTR5QaGBQCK/Ms=)
                          5: uLKZdDovNYh-DpBqqKP-yEKFq6g.roa (hash: VXKMVBqqwBpyEzSrFgtoLzoyOdF5dlP0dTicEmqV8zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:5f:b7:52:df:73:b0:91:6b:3f:1d:86:3b:b0:b5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Nov 15 18:02:11 2026 GMT
            Not After : Nov 16 18:02:11 2026 GMT
        Subject: CN=713af3b914d3194ce797a70e1cd326bb489a8327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:65:ea:da:42:0f:39:a5:d5:cc:1c:63:02:
                    ec:69:00:cf:29:ed:ad:8b:1a:90:47:ed:d6:a2:df:
                    2b:c3:cb:ff:e5:c5:70:78:14:fd:4e:b7:84:b5:4e:
                    cd:44:80:00:90:99:58:1d:1b:83:15:f3:45:cb:18:
                    d7:e6:31:f5:c3:81:a1:69:14:3a:57:ad:ac:dd:6b:
                    3a:ed:c5:e6:f6:4d:a4:02:ee:7d:cc:6d:6f:97:65:
                    d0:97:3f:87:bf:5d:24:79:cd:47:2d:09:ab:1f:64:
                    b9:5f:0e:7b:95:9f:73:b4:3c:bf:cb:da:40:ca:c0:
                    81:46:0d:50:e7:be:67:82:bc:fd:12:00:80:bc:54:
                    48:1f:77:fb:d8:8c:b9:59:15:e4:6c:57:6d:c7:b3:
                    a9:49:6d:f6:96:16:95:48:00:74:83:e8:87:a1:de:
                    f5:e4:97:94:68:99:48:10:24:78:ef:f0:40:37:a7:
                    9a:b4:7c:70:46:30:eb:13:3d:0a:30:e4:ad:93:6a:
                    9d:f3:39:a0:24:f6:a1:cb:e2:c9:ae:1c:43:c8:35:
                    90:e4:6a:3f:f0:02:02:56:42:95:b9:59:31:37:48:
                    80:d2:7c:fe:c6:2d:61:0b:d5:f3:99:26:1d:53:6b:
                    9f:15:71:a3:57:79:c8:63:31:f3:0b:43:ee:d8:b4:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3A:F3:B9:14:D3:19:4C:E7:97:A7:0E:1C:D3:26:BB:48:9A:83:27
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a9:8f:fb:62:86:f4:8a:e3:a4:5c:8c:35:74:7a:df:0f:6d:
         b8:cf:da:af:88:ac:4f:82:eb:1f:43:d1:a4:65:59:60:5b:77:
         43:55:13:57:a5:cb:09:a1:e3:e6:e3:d9:e4:3c:33:ed:1b:b9:
         1a:d4:3e:f0:bf:18:23:ff:1f:c8:f0:46:a7:21:ef:ed:bb:9a:
         58:51:b2:99:ac:97:87:dd:61:0d:09:c2:d2:80:27:16:64:f9:
         fd:0b:32:59:1d:c4:23:0e:32:1a:f2:6d:28:62:b7:02:a9:d9:
         b0:65:49:ed:49:dd:c7:c7:91:bc:c5:7e:28:1d:fc:b0:fa:84:
         a1:ec:15:67:20:e3:91:29:c7:19:b2:c4:82:a2:cf:08:b7:7a:
         31:e2:63:67:9a:b1:b0:72:cd:c7:1b:49:26:71:79:d8:f6:7d:
         a4:fa:c8:1a:22:21:83:59:6b:be:65:90:52:9e:77:0b:6f:5d:
         84:88:d7:49:d2:e3:bb:30:fe:dd:f8:54:d4:d9:9f:9f:ec:86:
         e6:83:e9:13:9e:59:8f:89:66:4d:27:c1:86:28:e3:db:6d:f0:
         c8:93:40:2a:35:b1:04:ac:5b:b6:40:eb:5e:d9:b8:71:aa:45:
         46:90:0d:00:b5:c6:a9:48:65:b0:9a:4b:7c:1d:76:1d:2d:27:
         63:b0:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:42 2026 by rpki-client