Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          Z/LdKZWmk0Ja9TGv8UAn3s/WT/gB4dt3QiywPgi2RLw=
Subject key identifier:   3C:73:E8:32:FF:42:AF:85:88:0A:69:29:53:B5:16:6E:5B:DB:26:E7
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       01A1DF151AD23EBBF849384375B4EA7156F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          1B19
Signing time:             Sun 15 Nov 2026 12:01:04 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:04 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:04 +0000
Files and hashes:         1: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (hash: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc=)
                          2: TFK2z9rJLLs0g2zUThlUPXPbcZI.roa (hash: 4U8zBLVFmSIojJwH6Y+ngj/B/PvZAr0d+/opEDYSw/Y=)
                          3: j2nCgCNKu-8HhbapFFrobHwW1PE.roa (hash: GSO3KSJwSfb4pYZK1pE/e2C6mgmmsHzX3/UBNgiH+xA=)
                          4: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: nrLvllLY1BhnkNsHPGAlAa2lxB+AGzubiGPlPomeU+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:1a:d2:3e:bb:f8:49:38:43:75:b4:ea:71:56:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Nov 15 12:01:04 2026 GMT
            Not After : Nov 16 12:01:04 2026 GMT
        Subject: CN=3c73e832ff42af85880a692953b5166e5bdb26e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d5:75:6d:e8:10:24:87:f7:47:09:de:df:8c:
                    8c:53:a2:70:7e:00:fa:1c:93:a9:67:ac:94:2d:10:
                    e2:73:9b:65:38:76:42:61:86:48:c0:9e:6c:83:6f:
                    65:13:ec:3e:7e:b8:83:b5:f9:27:f8:3b:07:d2:05:
                    4e:87:2c:25:40:a9:cf:83:1f:95:5a:69:36:17:4d:
                    db:a7:aa:d7:33:bd:de:77:37:bb:e2:83:aa:71:d5:
                    54:57:c0:04:da:29:45:e0:93:25:86:0a:f0:cf:66:
                    94:ef:1d:88:2f:24:07:7b:f7:b4:8f:7a:a6:93:87:
                    38:3c:bc:c6:fa:f1:2b:0b:57:bd:50:e5:53:fd:b1:
                    45:75:9a:bd:6a:dd:9b:6a:f9:8f:d6:34:5e:be:d5:
                    70:5e:fb:62:da:16:53:cd:3a:bc:73:57:85:eb:29:
                    97:2a:b4:44:76:67:b8:ab:de:15:94:34:50:bb:2c:
                    cb:88:0f:c6:33:c2:b0:37:7a:c2:00:df:55:8e:ff:
                    08:22:70:c4:78:aa:c2:d0:56:06:7c:77:59:36:d7:
                    3b:d9:48:73:f9:f8:81:96:9d:bb:5b:2d:ca:e5:d7:
                    d7:ef:d1:e6:58:02:d6:30:d8:9f:98:d2:39:27:7b:
                    b4:82:c1:b0:7d:ba:e6:c3:82:b2:0e:a4:6e:08:3b:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:73:E8:32:FF:42:AF:85:88:0A:69:29:53:B5:16:6E:5B:DB:26:E7
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:85:3f:d2:9a:93:6f:f3:57:dc:58:db:29:54:d7:b9:d8:
         30:c0:1b:1f:96:f7:34:44:d2:ed:a4:db:1a:69:98:c0:b9:7f:
         ba:49:98:90:d6:db:94:6a:32:60:a3:65:58:ee:a1:83:86:83:
         e1:99:0b:e2:66:09:f4:3b:db:8f:d7:ea:6e:80:61:f4:91:df:
         16:61:eb:77:ea:85:61:f1:37:95:b1:61:5d:34:26:2c:1b:4c:
         5a:2e:c1:b3:01:3a:0f:ac:98:2e:cd:76:02:7c:89:a3:f1:b3:
         89:2b:91:f9:c8:90:44:8e:bb:35:3c:a4:e8:dd:10:4c:ed:74:
         8d:96:7e:00:c7:c5:7a:34:e3:93:ff:a3:25:44:dd:93:55:1b:
         d7:c4:f0:39:be:f5:d3:ba:ab:a3:40:1e:8a:20:02:d6:a8:f2:
         3f:d5:eb:5b:55:07:0c:a8:63:e7:47:93:ae:d5:29:97:03:0b:
         fc:82:85:96:37:03:29:ba:47:91:40:4c:0e:12:fa:48:3d:4c:
         1b:8b:3c:5c:fa:a6:9a:24:4b:3f:9d:94:54:12:12:fc:4f:88:
         ea:49:8c:09:3f:76:96:46:d5:53:d5:f4:62:b2:44:69:49:c4:
         21:b3:98:b5:d4:8c:ce:68:84:50:43:08:9e:70:44:3b:0d:a9:
         22:59:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:40:33 2026 by rpki-client