Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          SljTvuVLqtCW4P0eZEG8FOHukzmmvr6mlPimqrhGTXs=
Subject key identifier:   B2:79:E5:AE:EC:D1:91:66:FB:EE:D4:43:87:C9:D5:F8:B0:EB:F9:8E
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       01A1C065C2107E3F86A0A70F167729FEC312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          15A7
Signing time:             Mon 09 Nov 2026 13:00:56 +0000
Manifest this update:     Mon 09 Nov 2026 13:00:56 +0000
Manifest next update:     Tue 10 Nov 2026 13:00:56 +0000
Files and hashes:         1: 00mpbC_1JmCGvHKe0z2zaHtA5PQ.roa (hash: LLmDkjRvFt1hVBFvKuw7Zmu70GRGPD2J1bIXkVgO/r8=)
                          2: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
                          3: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
                          4: YXA35Xy8YGhh6Hvtl9PgHxWLedk.roa (hash: A4FJG1g2cKuymT/9NuMnoHDOpw+liuhXg740fo3M3h8=)
                          5: o_KgOnMxvvekvBuPyEEYSnKNWEc.roa (hash: mk2PcWlp1oVsxXXBvuzmUNaWlANp8uf/qu/yWtEPDuk=)
                          6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: 0b3Mog0PHwYRarhMNSHh/+d4qfoKYrvEDJ2S077I3DA=)
                          7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c0:65:c2:10:7e:3f:86:a0:a7:0f:16:77:29:fe:c3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Nov  9 13:00:56 2026 GMT
            Not After : Nov 10 13:00:56 2026 GMT
        Subject: CN=b279e5aeecd19166fbeed44387c9d5f8b0ebf98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:a5:bc:2d:bb:3a:f4:d6:84:db:98:c3:69:
                    24:c2:2d:0b:54:9f:e6:2d:58:d1:65:af:5c:54:2e:
                    84:b6:74:07:45:8d:57:d7:5d:c3:60:78:7d:78:1b:
                    80:33:ee:76:84:de:88:c2:4b:64:0a:0e:4e:2b:42:
                    72:e0:61:2a:33:87:18:e5:c8:99:29:8a:2a:e9:96:
                    89:8b:98:7b:7e:58:d1:62:77:c3:79:83:56:4c:cf:
                    9a:e3:d9:a2:11:e2:62:6e:fe:16:70:71:b6:15:34:
                    8e:b2:9d:3f:fa:93:3f:30:bb:b4:02:87:00:4c:20:
                    50:c8:42:8f:69:33:df:e5:f1:7c:a2:5a:56:e6:2c:
                    e9:49:71:9a:e3:f6:4b:1c:71:ee:73:04:10:97:83:
                    8d:65:90:a6:06:d9:99:8e:bf:c3:cb:1f:85:6e:c2:
                    86:80:e3:20:48:26:2e:cf:b0:7f:10:ac:b2:1e:1b:
                    ee:fd:7a:72:ff:72:a8:48:19:e8:38:cb:9c:0c:be:
                    86:79:99:83:6a:76:81:2f:5e:ee:32:aa:e8:8e:e0:
                    19:41:0d:82:44:74:a9:f4:48:ed:b4:b8:3b:be:57:
                    0f:7a:b9:00:14:be:17:99:1f:ec:70:24:44:02:67:
                    a5:99:c7:5a:b9:04:2b:1f:e0:d5:ea:b0:2d:28:48:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:79:E5:AE:EC:D1:91:66:FB:EE:D4:43:87:C9:D5:F8:B0:EB:F9:8E
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:05:c6:a6:b5:3e:be:41:44:16:37:52:85:cc:14:f3:d9:2a:
         03:64:be:bd:85:d8:72:2d:f1:43:c2:04:0f:d0:50:8f:8f:21:
         50:ea:68:b3:47:fb:01:80:3d:8d:10:bf:b5:0d:67:c6:15:0e:
         af:a1:72:68:63:de:d8:41:3c:ab:72:40:af:d0:1c:e7:84:f8:
         9e:dc:19:98:1a:72:80:c7:c3:dd:6b:49:56:13:6b:f8:46:9d:
         21:04:30:27:8c:41:8d:db:a1:cf:51:5c:15:5a:65:fe:0d:e7:
         2f:95:9d:aa:cc:d1:10:ea:e8:98:5f:20:e5:b9:28:92:8a:15:
         fd:40:e5:04:5e:5a:3e:b9:0a:82:77:d0:18:86:dc:25:07:30:
         01:36:2c:f0:18:06:0a:0e:8a:fe:09:96:8b:65:56:53:02:22:
         93:db:12:e1:90:d0:a8:8b:ff:77:7e:c0:58:90:c5:8f:03:6b:
         43:d8:c4:09:bb:c9:2d:b4:38:5d:ce:1f:11:cb:9b:ac:41:9f:
         8d:55:6a:17:8a:ba:0a:a6:17:87:03:3b:16:91:c2:ea:77:2c:
         ee:d8:4a:6e:b0:da:33:6c:f1:d7:9a:1a:3d:53:a4:03:96:fd:
         65:75:93:d2:92:72:a6:a8:95:b5:43:00:1d:b7:05:bd:d7:21:
         d7:b8:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:23:51 2026 by rpki-client