Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          G2rBvr2Bsh11D9wJKCdHXUKed4dayTM2r00w+mMkdgo=
Subject key identifier:   38:8B:BA:70:C1:52:78:F6:15:07:51:BF:49:E2:BA:EC:3C:A0:23:81
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       01A1DF15A78C071A49E710CB0C1A4303CCCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          053E
Signing time:             Sun 15 Nov 2026 12:01:40 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:40 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:40 +0000
Files and hashes:         1: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: 543q44Z9l82VB4DpplhK5HrqDmYP6Ua7062CVqFd/7Y=)
                          2: tq8f01ARQEUsEl7noRAgINDzWjo.roa (hash: xcw1atTXhZ541jIny6BlvX9vowxrvPRi1s85cLABOpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:a7:8c:07:1a:49:e7:10:cb:0c:1a:43:03:cc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Nov 15 12:01:40 2026 GMT
            Not After : Nov 16 12:01:40 2026 GMT
        Subject: CN=388bba70c15278f6150751bf49e2baec3ca02381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:ef:d3:1b:21:e5:f4:64:97:53:14:76:cf:
                    1e:19:3c:3a:c4:4f:ed:ec:59:80:57:a2:9f:78:ba:
                    00:86:3f:4d:5e:5f:4b:c6:97:20:9e:9e:39:b5:32:
                    73:f4:e4:37:ea:17:f7:75:12:8a:51:e8:84:dd:d5:
                    45:2f:ac:7d:10:38:4e:1c:75:73:55:21:f3:b3:89:
                    72:d2:4d:9c:25:7d:58:ee:ec:9e:97:87:b8:42:c5:
                    53:55:f7:54:5e:b7:d2:e6:a2:19:03:f0:ac:87:ae:
                    eb:48:bd:b2:7b:f8:75:43:06:79:6b:32:d6:45:99:
                    e8:08:74:41:ce:8a:ae:34:53:a6:93:04:9a:43:3a:
                    a9:2c:78:ee:77:02:ee:3f:5d:d9:c3:09:60:73:31:
                    18:85:ec:c6:26:31:3b:6d:ba:b7:01:75:6c:36:50:
                    46:b1:0e:81:c9:a6:d1:1e:37:93:25:42:99:20:7b:
                    98:ab:57:19:52:03:7d:38:dd:0d:12:a7:19:79:78:
                    90:57:19:02:81:77:b5:ab:1c:21:07:1e:8e:87:0a:
                    91:21:fc:59:19:5f:28:cd:83:e4:7c:fb:b5:37:a6:
                    2e:96:0e:f6:aa:55:67:f5:06:85:8d:50:7a:34:c8:
                    f1:54:e4:88:5c:4e:84:e3:b3:d6:71:f8:2b:97:cf:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8B:BA:70:C1:52:78:F6:15:07:51:BF:49:E2:BA:EC:3C:A0:23:81
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:92:2c:19:a3:3b:49:37:7c:87:3c:f5:af:db:04:b3:c0:90:
         bb:aa:d0:1f:ba:fe:9b:45:3b:ac:a7:23:bb:39:f3:68:86:44:
         91:b6:55:0c:76:8b:89:f9:45:40:b7:30:9a:cf:03:44:8a:5a:
         89:1e:a4:f1:9a:7c:1b:fa:9a:0f:72:a2:a1:2e:87:e0:d8:43:
         d2:a5:c3:b7:3a:39:13:d6:1b:65:8d:37:ae:83:d8:31:1a:00:
         f2:b5:c4:4f:1b:3d:c7:32:a0:3d:c5:ad:a2:92:14:1c:7c:03:
         20:fd:5e:50:e2:d6:e1:8c:36:3d:42:b7:f9:8b:66:b9:06:e6:
         61:c2:ba:49:a6:2f:9f:c5:8d:66:35:60:75:59:2d:45:62:2b:
         2e:2d:97:07:a5:8b:03:5c:34:1e:dd:29:40:1a:0b:bf:04:12:
         31:59:4e:b7:7e:2f:3d:62:69:ac:cf:81:43:1a:47:2e:7e:54:
         90:ac:94:8a:22:f1:c3:a8:0f:db:bd:42:91:5f:b6:d6:a1:5d:
         ca:7e:9f:df:5b:d9:58:ba:37:27:6b:1f:31:29:f8:2d:eb:3c:
         c0:d1:2b:57:7b:84:2a:66:f3:8e:61:cc:cb:7b:ed:af:5c:2f:
         88:f4:0c:e9:60:a9:3f:b9:77:5b:08:a3:50:41:d2:59:c0:d0:
         04:57:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:04:11 2026 by rpki-client