Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File:                     82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier:          h5yCmBpzC/fJYKKubWvD7XjLoB1BTmHknnvqCYaVIgY=
Subject key identifier:   CB:C4:6D:91:A1:DD:A5:0D:27:33:5A:7E:B2:D8:14:1B:16:1E:89:82
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer:       /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial:       01A1C3D45436F59C46D20C34DCE1141544A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number:          0A5A
Signing time:             Tue 10 Nov 2026 05:00:34 +0000
Manifest this update:     Tue 10 Nov 2026 05:00:34 +0000
Manifest next update:     Wed 11 Nov 2026 05:00:34 +0000
Files and hashes:         1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: zfiDFxjFBNNg+sw8XdM+AAGjqdW+B4Tt7yC4ceehCjA=)
                          2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c3:d4:54:36:f5:9c:46:d2:0c:34:dc:e1:14:15:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
        Validity
            Not Before: Nov 10 05:00:34 2026 GMT
            Not After : Nov 11 05:00:34 2026 GMT
        Subject: CN=cbc46d91a1dda50d27335a7eb2d8141b161e8982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:66:c9:b8:67:2a:e3:ec:96:a3:d4:e8:35:0c:
                    83:71:79:75:3f:4e:d8:f8:c3:d5:25:d3:e2:17:0f:
                    58:ba:a3:f4:f6:d9:52:2c:f1:66:89:ae:65:ef:de:
                    88:0e:e6:8a:8b:d6:64:3e:ed:f5:e6:b2:ba:4b:cb:
                    84:ad:64:5b:71:3b:02:92:2c:07:9b:a5:71:b2:3f:
                    fd:1b:b4:a4:d0:43:c1:0c:7e:64:17:bd:2d:66:bb:
                    39:03:b8:5f:27:c2:39:d3:45:09:90:11:a5:4e:bf:
                    67:1e:5d:ca:55:dd:fa:82:69:3e:b7:d3:64:79:61:
                    99:5e:67:5e:07:cf:4b:ca:2a:3e:f6:77:04:d9:7e:
                    4b:10:ab:30:ff:31:de:c8:26:e1:55:3d:7a:b3:c9:
                    89:76:b4:18:8f:9e:81:cb:63:a1:c9:4e:49:ed:1d:
                    88:58:e2:ec:b2:ea:ac:d5:60:49:1d:80:3f:db:4d:
                    3a:2a:81:97:76:e7:95:5a:a1:d0:dd:16:a6:db:6d:
                    ed:3c:d4:1d:a5:cc:5b:a4:2a:4d:00:f7:bb:ff:14:
                    1a:bf:6f:18:54:90:d7:ff:3c:90:65:2b:4e:4d:60:
                    91:91:f4:64:f9:96:00:6f:e9:e5:3d:de:74:cc:57:
                    ea:ee:70:92:60:42:79:b5:48:82:e8:6c:2a:79:f8:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C4:6D:91:A1:DD:A5:0D:27:33:5A:7E:B2:D8:14:1B:16:1E:89:82
            X509v3 Authority Key Identifier:
                keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b9:9d:4e:2f:98:54:c5:41:f2:1c:8c:c7:69:e8:06:c9:e0:
         90:b9:1d:7b:b1:d9:32:db:e5:db:cc:89:6e:e2:c4:bf:9c:f4:
         05:87:82:95:b8:3c:50:54:f1:b9:1a:be:f4:26:85:44:6d:bb:
         36:7b:7d:13:28:c3:ec:0f:49:4c:ca:17:f1:e2:74:45:d3:60:
         79:78:ae:f0:af:3d:27:88:19:ee:a0:20:94:a2:8a:f5:22:41:
         56:86:5c:3e:32:c0:79:ed:4d:85:a9:70:b1:51:37:c8:98:ca:
         2d:4c:4d:f0:91:cb:d3:91:b5:e6:36:bc:83:7f:a5:02:39:5e:
         6f:27:0c:99:33:a2:06:c8:7d:c9:40:ff:0b:01:1c:30:c1:34:
         19:29:a8:a4:d4:67:7d:aa:e0:36:b9:0f:09:e8:16:54:50:84:
         31:b8:82:d4:a7:61:17:4a:71:7f:6f:cb:7e:66:16:4c:56:63:
         75:c1:2a:60:d3:e2:e9:ec:2f:1a:56:76:9b:b3:87:06:ee:f3:
         0d:7f:d0:13:4b:93:16:cf:96:b3:1c:4d:02:0e:ff:90:40:37:
         fe:cf:92:66:cf:99:c1:36:8b:98:ab:45:87:34:6e:0a:48:d7:
         22:7c:82:8c:4a:16:ba:b0:db:61:46:19:5e:d2:24:83:39:26:
         73:17:73:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 10:50:29 2026 by rpki-client