Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
File:                     mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft (raw, json)
Hash identifier:          q2Jp6jt2M5igL98W0VaG+yQp+pX2jQfYtV4Nz75J9oc=
Subject key identifier:   2A:C0:D6:85:DA:AC:75:3A:5B:F4:DD:F5:C1:0C:32:BE:AC:47:0C:7F
Authority key identifier: 98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB
Certificate issuer:       /CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
Certificate serial:       01A1DFB9EF039DB6FD0734EFB980156E1932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
Manifest number:          93
Signing time:             Sun 15 Nov 2026 15:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:06 +0000
Files and hashes:         1: be_gkUlk9308BGLed9e-cdXDJwc.roa (hash: KnE/equmjlrwzaYmtyOj+kmh0gRoZ+9TcyDh0b0mqM0=)
                          2: mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl (hash: 9ma9NDHc7s5s2UtsBl16MZ8sU0q01ly3pm3FxS8aNPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:b9:ef:03:9d:b6:fd:07:34:ef:b9:80:15:6e:19:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
        Validity
            Not Before: Nov 15 15:01:06 2026 GMT
            Not After : Nov 16 15:01:06 2026 GMT
        Subject: CN=2ac0d685daac753a5bf4ddf5c10c32beac470c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:57:6b:9c:dd:59:56:c1:24:aa:29:a3:a1:
                    ca:23:68:0f:21:f3:ae:6d:37:68:72:3a:be:6f:c0:
                    68:b8:1f:82:6e:f7:2a:56:ae:6f:89:30:91:8f:6e:
                    3b:1e:a6:33:66:aa:e5:c9:bd:ed:1d:0e:2c:61:76:
                    79:05:37:d9:fe:db:7a:ed:02:4e:f0:e4:b7:10:f0:
                    d1:6f:11:f3:88:0a:54:55:48:3c:d0:22:4d:5e:9e:
                    bb:68:59:78:e3:5f:e5:b5:65:e2:36:e9:b3:aa:6f:
                    97:fd:8d:af:17:a3:56:35:d7:de:41:8e:f2:55:7c:
                    7c:f0:e6:3d:a2:e8:18:a7:7c:c0:3a:f0:52:55:8b:
                    f0:6f:49:d3:7f:b1:1c:54:08:1e:1b:d0:ee:84:2e:
                    f5:6c:2b:f2:62:56:3e:f5:46:13:8e:37:12:c9:c0:
                    b6:6b:53:ec:98:6b:05:09:6b:a3:06:fc:03:86:50:
                    be:fe:91:bd:22:56:a3:3e:4b:bc:30:70:d0:93:46:
                    bc:83:bc:71:0f:1c:c4:7c:0f:79:1d:09:a0:aa:4a:
                    f6:54:d4:e6:a7:06:ca:cd:1a:c9:63:fa:b9:26:b3:
                    d2:23:33:66:75:ab:4f:0e:24:02:d0:cc:be:36:07:
                    e5:8f:fe:80:4d:6f:2d:09:70:a6:ab:2a:05:e7:66:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C0:D6:85:DA:AC:75:3A:5B:F4:DD:F5:C1:0C:32:BE:AC:47:0C:7F
            X509v3 Authority Key Identifier:
                keyid:98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:0c:12:fd:87:f9:05:03:46:61:4e:a8:68:5b:8f:51:4e:
         29:78:4a:f9:a7:9a:d8:ce:4f:25:2b:bf:aa:92:06:0d:49:f5:
         d1:58:86:2b:80:23:53:41:a4:60:b2:2f:c1:7e:1a:cb:93:6b:
         15:b7:98:67:c5:1e:e8:87:5d:8b:fe:88:32:40:02:1f:ad:b1:
         36:66:53:6a:65:f9:9e:9e:55:29:ac:76:8b:a6:c5:7a:39:4d:
         c2:4f:54:76:e2:0e:3e:26:58:b8:18:e8:a5:f1:00:60:bf:0b:
         fd:9e:8a:97:32:2f:a0:6b:db:bf:a4:05:3c:d6:05:56:2e:61:
         30:83:16:fd:59:6e:4c:82:73:27:0b:dd:7f:68:b0:de:6b:2e:
         5e:dc:e3:36:b1:86:af:0f:64:c7:80:31:37:a0:32:77:2a:63:
         13:97:14:7d:5c:3b:12:89:8d:a1:72:c2:7d:d2:e2:ac:fb:27:
         9a:c9:c6:bb:7e:f6:c9:87:1c:df:6e:21:1d:3b:d7:e6:52:3a:
         d0:90:11:b5:f8:93:f6:08:5f:a7:dc:3e:60:76:d9:2e:a7:16:
         b6:f0:57:4c:a0:4c:86:ba:44:b5:cb:d3:02:20:20:df:2f:20:
         59:fc:01:b6:3a:a5:be:f0:9f:82:e4:9d:86:40:1f:8f:48:cc:
         bb:fe:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:38:34 2026 by rpki-client