Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File:                     H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier:          CTpR78VHfaVCNhfOXOSzmEjdSeZFqnCtyadU2ZNqSnI=
Subject key identifier:   EE:E4:74:28:2E:69:CB:B5:41:1A:16:F3:82:F5:58:CF:55:A6:1A:56
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer:       /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial:       01A1DFBA07AC07C0719B972D9152AA1DE8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number:          0ACB
Signing time:             Sun 15 Nov 2026 15:01:13 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:13 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:13 +0000
Files and hashes:         1: CtUI7FuLA9XYnGo9ANvnYk3wXvY.roa (hash: je0VlN/8mERR3XoX+3H4qOkq0hsewP/tEtzCyO0GxN4=)
                          2: Dz46KAYraGcTikQMGoMJVAAInHQ.roa (hash: NU2HWGZh7sQrY1k6J9xhsLm4R4NqLLcBXrqTHwrCQfs=)
                          3: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: cuLPE6AbRVU+2kFX+jRWYDgnxUTepAxnRfRRfYR49oA=)
                          4: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
                          5: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:ba:07:ac:07:c0:71:9b:97:2d:91:52:aa:1d:e8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
        Validity
            Not Before: Nov 15 15:01:13 2026 GMT
            Not After : Nov 16 15:01:13 2026 GMT
        Subject: CN=eee474282e69cbb5411a16f382f558cf55a61a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:f0:81:b0:63:56:cc:09:62:07:e3:9d:d1:
                    af:a4:83:21:ad:69:2b:73:ec:73:ae:50:31:06:0b:
                    09:be:60:14:76:a1:68:49:63:c5:ca:66:58:cb:d7:
                    69:26:28:53:e1:61:4d:7f:5e:ca:b1:60:a1:56:67:
                    eb:23:8e:14:1a:79:68:c1:11:a4:6f:44:ed:4b:1d:
                    cc:a5:54:52:b4:29:f9:14:75:ad:7a:c1:c6:e1:a0:
                    c3:1d:a0:d8:b6:21:e2:3c:0b:9a:49:79:df:d2:99:
                    c5:6a:b6:f7:55:fd:28:3b:10:3c:26:42:0c:f0:aa:
                    ca:66:94:4e:35:e5:34:72:f6:d6:b2:02:65:78:2d:
                    24:66:be:ba:9d:9c:91:77:b6:23:a4:6b:d3:68:d9:
                    bb:3c:d0:d2:1a:3c:12:65:02:d4:9b:08:36:af:dc:
                    27:d6:7c:8a:74:2d:16:c2:ef:95:9a:91:ad:25:0b:
                    dc:ae:ac:db:6a:77:12:00:a0:28:cd:e5:f6:ab:3d:
                    87:6d:ff:60:88:c2:f8:a7:1f:1d:aa:a1:84:72:15:
                    36:cb:63:24:6c:2c:3b:fa:23:e8:3f:a4:cd:8c:94:
                    1e:d8:07:83:35:08:67:26:9e:1e:4b:4e:70:c7:53:
                    49:e8:88:80:ef:64:1e:8a:25:74:21:17:a0:b0:0b:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E4:74:28:2E:69:CB:B5:41:1A:16:F3:82:F5:58:CF:55:A6:1A:56
            X509v3 Authority Key Identifier:
                keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c5:1a:d5:b8:b6:f7:26:35:3d:ae:1f:fb:45:fa:d1:ba:fd:
         e8:b1:9b:66:b9:46:6a:c0:d7:1f:91:85:49:3e:2a:39:30:1a:
         03:55:5a:98:2e:9e:f6:e9:37:62:0d:93:33:58:88:1f:54:5f:
         ae:9f:db:1b:e9:4a:93:00:21:c3:13:cd:cc:bc:5a:90:5a:3a:
         88:ae:b5:62:b8:a1:33:07:a1:9b:5b:06:95:70:3c:ad:40:a0:
         a3:cf:c1:b1:c8:23:d5:7b:a0:12:b1:2c:b8:92:aa:c2:ed:0f:
         ec:ec:c3:0d:43:3f:ea:19:f5:92:09:0c:67:c5:9f:76:42:cb:
         9c:66:d9:d9:fa:31:72:75:dd:93:88:2b:fa:be:57:02:c9:12:
         94:0b:bc:3f:10:4b:31:d0:21:7c:3c:d4:39:00:76:69:d2:30:
         7a:c3:b6:e8:27:24:af:a3:42:70:b3:ac:5f:b2:1d:6c:b6:65:
         75:ad:93:6d:38:65:23:8e:71:04:47:e6:12:a0:7e:da:87:bd:
         1b:ba:23:f4:cb:45:ad:bf:ff:4e:d4:54:84:87:ca:2e:fc:74:
         c0:18:f5:96:4f:2a:21:26:77:5e:f5:ae:11:4b:ad:d5:c1:ba:
         95:ea:69:45:b8:b3:8b:cc:af:2d:d0:06:b9:04:48:65:d7:b9:
         ac:9c:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:25:39 2026 by rpki-client