Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          jg2AThkZ4J3YPoJ5PZWGXfx4Vrso6Y5XcAabYfaPkcI=
Subject key identifier:   C7:91:70:61:03:CB:B3:80:52:9C:E0:F2:C0:47:F5:E0:F6:2F:C6:6C
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       01A1AB18A320CFDF3C1137AFBC7F8009E412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          1984
Signing time:             Thu 05 Nov 2026 09:44:40 +0000
Manifest this update:     Thu 05 Nov 2026 09:44:40 +0000
Manifest next update:     Fri 06 Nov 2026 09:44:40 +0000
Files and hashes:         1: 1mbdaBzZtydgseHXPZhGSosWJLs.roa (hash: UjyK1tIsvQ19Bbuvrkb9drQLQvPfdLo/PcfCdTfYs3E=)
                          2: 2S7uFkbSO-czpY7zbwj6z2QbI9I.roa (hash: SH3jErffYx2mXExMTCZzsNaB8q9HLfNDIPRMlxgvCYw=)
                          3: HnPrkE_J3xVv1x-V5QHimE3vVUo.roa (hash: uu9rz+kpoaUl8LIPHQpkWHhV6+Wsaw0i4LhgvIwt9Dc=)
                          4: L3204t5xqv_RGAUaDjepK8F4Hqw.roa (hash: vbMIqhNdM6+SVCu/75ex+GgHrK58xyd+mi2MfbKpNh0=)
                          5: RYJfLZjxmS4kaxHivWdobidqSMQ.roa (hash: H3rQBBML+iH0vLDgF2nR7G9TL4h6XVju25Cn5MsTV0I=)
                          6: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: BGCdVE45m0tiz5388Sm9cMUoFFpBvf1R219yqO4FQHE=)
                          7: S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa (hash: mX6+SayjpKMIocVqlVrM4qpi0n+3CKCDO1ooCblBO5Y=)
                          8: VeExbCBM04z_5eeOS8006EH3K5w.roa (hash: i0/J43ADWGsJraeM1oQhbEis6mYiwMnFDpLvwBsheV4=)
                          9: WpWooVIeIgvnljD18p2ld4kCVFI.roa (hash: nd+RQhekh0G1ui1Cso25O8IC0cC9PZhAsI/z+0shqak=)
                          10: XZ8zOp-psUPMOU7s45SkZdKwERA.roa (hash: lBhO7r8TykXZBGTYXYcObSsR2CC7xF/Gvq4nKqGPDek=)
                          11: XtaIHpvrjSOxxeu0RVe1HL2uAl8.roa (hash: OgXC3DCqKxRWxtuAmp+GN4aNU2gzSqf6+Uzl0vJ843o=)
                          12: c9AaO1sptaV3_GHK762IkFyxT48.roa (hash: C3oGRQ+APrla2DwBZ+3UTKh66s6C81qFlrjlnbvIqyM=)
                          13: gItssa-B0b0X--YWiS_dUYtbwpY.roa (hash: iVUV0DWttepgFWqqg65SaE3OlJIh4Ep6A/pLvMT4l8I=)
                          14: j_vT15gdCBerEJD3w18H2AVY8vQ.roa (hash: UKJURUuU4I1OLrHsAopP6DwwYkaWm738i/kF5cVc+Ag=)
                          15: rOLXrAYPC-HHeY5KvcVsdCNFsoU.roa (hash: fiS5+LWgFhMQYxEuuFFIaTRLiSbNXF0CYLYTUhoBO0s=)
                          16: tZSP8wSIDazu9t1h0P8dIprFl_w.roa (hash: L8kev+KFFS7pI0Q4gu6egCCrLQNLYT9f62ZKXzHFpU4=)
                          17: tafZcdWC3585BTEM_I5K-jIZNQs.roa (hash: 8Etsh0jYp6/8lDoQqaMvXuF2CzVEWpVhE1xE8Ldd3us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:18:a3:20:cf:df:3c:11:37:af:bc:7f:80:09:e4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Nov  5 09:44:40 2026 GMT
            Not After : Nov  6 09:44:40 2026 GMT
        Subject: CN=c791706103cbb380529ce0f2c047f5e0f62fc66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:ae:12:44:82:f3:b0:e0:48:3b:98:62:32:
                    eb:8e:f1:1e:e8:63:af:ad:3c:39:f6:f4:9c:ee:e0:
                    2e:2b:aa:96:02:47:78:05:1b:8e:92:d7:ad:2c:f5:
                    f6:95:19:e0:f9:d3:4e:3f:bc:c1:64:b3:a7:06:e1:
                    7e:33:07:0a:91:90:7e:39:3a:b8:2c:7d:7f:4e:9a:
                    bf:f8:83:a7:41:7f:f2:de:f5:7f:58:89:60:b5:f4:
                    af:69:ae:da:55:d0:59:4d:96:41:15:76:0c:75:07:
                    3a:42:23:30:49:7f:bf:64:8f:b9:da:c4:b6:d9:a0:
                    4f:83:d2:26:40:cb:ec:38:95:5b:74:2e:c1:29:95:
                    e8:44:e1:35:13:46:dc:d8:f5:4f:9f:21:7e:39:4d:
                    93:af:1d:e2:2f:ab:75:a2:9f:5e:80:14:cd:a9:a7:
                    89:3a:cb:36:8d:e5:5a:7c:26:6f:c2:3e:dd:c6:e2:
                    d6:12:70:b6:22:b9:47:56:01:9e:4a:7c:12:90:45:
                    23:1b:fd:31:38:fb:dd:ed:4c:c6:cb:da:bc:06:10:
                    3c:63:8c:a9:c1:0a:e5:bf:84:c7:68:5f:ce:cf:5b:
                    5e:e3:fd:7c:4c:39:76:b6:3d:8c:b6:55:9f:20:cd:
                    d5:81:0c:1f:31:ae:b9:f9:11:93:fe:ec:2d:6b:7e:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:91:70:61:03:CB:B3:80:52:9C:E0:F2:C0:47:F5:E0:F6:2F:C6:6C
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:63:1f:1e:93:64:7d:93:af:b6:66:43:51:bf:97:a5:5b:
         99:a2:b0:61:32:23:4a:a3:01:66:bb:82:fc:6e:43:00:d0:38:
         72:ac:7a:4c:20:50:b3:45:4e:a2:89:7b:44:89:34:ea:86:1e:
         c8:9a:9a:75:73:00:0c:71:09:3d:10:7c:c8:fd:73:d4:af:aa:
         ac:8a:db:d3:71:10:63:e0:66:df:70:69:eb:75:05:3d:8e:8b:
         6f:93:90:46:fb:32:24:ec:50:42:fe:c1:ff:2e:11:75:ba:a0:
         cf:38:4f:db:2b:a8:37:6e:0e:dc:60:01:51:eb:6f:de:21:86:
         c1:18:be:0f:20:c0:11:3b:dd:4e:4d:c1:31:2d:90:73:29:f9:
         84:d0:12:b7:a5:f7:23:05:3a:c5:cd:90:7e:48:db:0a:b5:97:
         51:8b:34:25:5d:9e:be:1a:06:86:63:07:f3:95:b0:44:eb:b6:
         eb:45:8b:b3:9c:eb:7c:c1:9e:30:d2:b2:3e:98:af:15:cc:23:
         7f:3b:cb:11:c2:55:97:9c:01:16:d2:ed:85:f0:2f:08:5e:68:
         f9:00:03:61:a7:9e:1e:50:aa:e5:3f:24:95:76:8d:55:e3:3f:
         8f:9f:c9:0e:f7:27:d3:64:da:b9:fc:45:d2:6d:80:57:51:53:
         0b:f1:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:54:30 2026 by rpki-client