Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          /oaGIPx9x+zXNWUGuaJkdNrnraFuE5QFzWJAJllRZuI=
Subject key identifier:   C5:1E:7B:9E:29:FA:4C:15:F1:D8:71:C2:37:DF:2B:15:AA:28:65:4C
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       01A1C02F0A5D87AF6DB4F2118A75AE679043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          07D0
Signing time:             Mon 09 Nov 2026 12:01:10 +0000
Manifest this update:     Mon 09 Nov 2026 12:01:10 +0000
Manifest next update:     Tue 10 Nov 2026 12:01:10 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: Xx+CpV2Qp+d+rM0QGC71BqH5895UcHmsojZWUTwyrBE=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c0:2f:0a:5d:87:af:6d:b4:f2:11:8a:75:ae:67:90:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Nov  9 12:01:10 2026 GMT
            Not After : Nov 10 12:01:10 2026 GMT
        Subject: CN=c51e7b9e29fa4c15f1d871c237df2b15aa28654c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:ad:2a:36:3f:46:0f:7e:7c:03:43:4c:7a:
                    76:0b:55:13:09:2b:96:bc:7b:0e:40:b9:8d:02:85:
                    df:30:15:b9:58:dd:15:68:17:9b:08:bd:7f:b9:b1:
                    0c:80:c0:b1:d9:3d:40:4f:fe:f8:73:59:7a:91:b8:
                    92:5f:73:05:48:d5:96:f0:6f:ef:71:77:0f:68:39:
                    c8:a5:99:df:35:12:d4:6f:4b:df:2c:76:76:ca:22:
                    cf:8f:63:cf:72:1c:c3:6f:73:2a:44:06:5a:3a:61:
                    7e:e0:0e:1d:af:94:d5:0b:d3:a9:be:f3:a0:f4:c1:
                    f7:6e:91:77:c5:2b:24:a2:69:67:2f:e0:60:83:c4:
                    1e:4b:e0:65:36:0f:ba:96:17:29:ac:f3:15:58:80:
                    01:5e:85:80:6e:36:52:3b:30:92:7f:b1:36:b7:cd:
                    de:4f:5c:35:37:c9:f4:21:91:ee:02:fe:7e:a0:e1:
                    a6:8c:83:b1:83:12:e5:13:3e:e0:c7:e5:bd:4f:27:
                    09:7e:cf:46:1c:31:65:91:88:de:9a:65:d9:58:54:
                    ff:0c:b8:34:6d:74:17:19:f7:0b:a2:2c:fd:b8:6f:
                    82:fd:3d:a2:7e:6a:59:61:1d:d8:cf:5f:c0:3f:45:
                    e2:60:89:52:7e:cc:62:50:69:9c:ca:0c:93:6e:db:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1E:7B:9E:29:FA:4C:15:F1:D8:71:C2:37:DF:2B:15:AA:28:65:4C
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:6c:45:5f:59:9d:8b:cc:00:05:86:7f:8d:dd:50:15:0a:
         6e:94:c0:e8:67:6b:d7:39:ee:02:b9:73:93:89:0c:7d:4b:a9:
         17:9b:8a:6f:0d:1a:4d:10:15:bc:02:f3:b6:09:18:66:9f:38:
         1e:f1:af:5b:51:a0:c5:d5:c5:a7:f7:c2:cc:b7:a0:7b:b1:8a:
         d0:8f:86:a1:ac:4d:64:47:0f:cd:3a:a1:cc:90:ea:e4:e3:71:
         1c:ec:4d:50:32:c2:f8:47:56:23:86:e4:c9:db:ff:5e:80:fe:
         10:4c:98:d2:e5:a6:17:2c:f2:85:49:ad:88:78:58:64:e0:e4:
         2c:e0:97:36:5a:ea:57:2f:31:82:f1:f4:7b:32:a4:e2:bc:42:
         f8:74:0f:22:ce:31:f5:4f:b1:64:32:53:d3:2a:31:84:72:e4:
         b0:e3:40:30:8d:76:f8:58:0c:36:f1:e1:c7:d9:55:25:a5:65:
         32:7d:53:00:e7:9f:59:68:e9:31:ba:bc:ae:84:d2:bf:7e:97:
         69:2b:50:20:c1:3d:f6:b8:ba:c7:18:6a:01:87:2c:7e:67:7b:
         ad:ac:d1:67:0f:a8:cf:76:c2:5c:4f:a2:60:b3:2a:76:5b:00:
         c3:d9:f7:1a:dc:c3:a3:c2:b7:c2:e6:21:25:38:f0:dc:ac:e0:
         4a:ef:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 20:11:24 2026 by rpki-client