Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          cRwobFF6yp/vSB5Nu6x5S8NB/SNwO+Tyrj7pvVggbxg=
Subject key identifier:   42:E5:7D:B4:C6:34:0A:4D:CB:58:CF:38:C0:45:F8:D2:B4:D8:45:CF
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       01A1DEA7BF057EF12D9C61587A4418B8764D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          1AFB
Signing time:             Sun 15 Nov 2026 10:01:37 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:37 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:37 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: UmYIUo7KPEI2lpWWW6Eg7TzibieQO1ZyR1DgWH4h2cM=)
                          2: FNGdELpGS2bwEGg4hvaYUE_r1O4.roa (hash: Ei6sBNoGSjj3ahbV1+2LrTjtk8IEn6iFKEC198BdvPQ=)
                          3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
                          4: zdTKCzMNYrD_vxLGScehqegrrJk.roa (hash: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:bf:05:7e:f1:2d:9c:61:58:7a:44:18:b8:76:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Nov 15 10:01:37 2026 GMT
            Not After : Nov 16 10:01:37 2026 GMT
        Subject: CN=42e57db4c6340a4dcb58cf38c045f8d2b4d845cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:17:5d:d8:77:2b:28:4c:77:f9:eb:73:f9:
                    91:36:df:d4:29:87:e4:fc:6e:e6:e9:00:34:8d:d6:
                    75:8c:46:1c:eb:ec:8a:13:ef:69:46:02:c4:79:c6:
                    c6:8d:89:2f:99:d4:f3:6e:db:4d:9b:03:68:f2:b5:
                    0d:f5:9e:0b:3e:af:43:99:90:29:26:a9:4d:02:c4:
                    c9:18:c1:c8:1c:82:4c:23:e0:76:12:b4:2d:6a:ed:
                    93:5c:2c:a6:14:cc:49:85:c7:c6:71:b5:7d:13:c8:
                    16:9d:23:22:91:64:e0:5e:d7:bc:57:b7:1d:65:f4:
                    2d:2b:f8:4e:5f:d0:07:ba:45:c2:00:1e:7a:63:d1:
                    89:1f:15:c4:c2:32:c4:7d:7c:f1:17:10:4e:8d:29:
                    f3:85:8b:d6:0a:e4:aa:02:1a:2c:a3:d3:4f:2f:18:
                    09:49:79:ac:a1:51:1e:71:73:25:3e:5d:f2:80:6d:
                    a0:98:75:99:47:be:0c:13:de:cb:51:4b:7f:7e:2f:
                    e2:99:b9:ae:15:e1:ab:e5:6f:2f:d3:fb:6b:46:a3:
                    f8:cc:f4:c0:64:fa:e9:3d:93:12:f0:85:19:ec:5a:
                    17:d7:aa:7f:ef:8f:02:48:f9:fb:1f:74:60:17:10:
                    74:27:65:cd:8f:58:8a:87:0a:68:f0:ef:78:dd:ed:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E5:7D:B4:C6:34:0A:4D:CB:58:CF:38:C0:45:F8:D2:B4:D8:45:CF
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:8a:67:1b:66:f1:0e:e4:e6:b7:4f:35:ff:bb:9a:be:ba:
         9c:4d:b8:02:32:5f:b0:5e:3d:0d:72:9c:be:d0:f5:14:61:83:
         b0:af:cf:48:01:ce:0d:6f:38:bb:1e:4f:b6:5e:11:8f:db:57:
         46:90:3d:e0:85:f9:04:de:e5:b0:b1:dd:0d:f3:f5:6a:ae:8c:
         d8:2e:87:78:55:fe:c6:e0:32:f3:4d:bf:9e:8b:bd:60:c9:75:
         73:14:81:12:c6:23:ea:bf:f0:b7:5d:de:fa:b7:33:e9:27:a0:
         67:f3:55:4f:46:aa:cc:cc:03:40:76:34:52:8b:88:26:d9:71:
         6b:4c:5c:92:97:62:f4:07:d6:bd:bc:82:bd:ae:a0:7d:2a:d5:
         eb:a7:89:fe:05:e5:5c:eb:e6:84:60:95:61:ae:99:9b:1d:66:
         2a:65:e7:94:b8:cd:1f:1e:c6:6d:da:7c:89:3b:b8:1d:fc:10:
         58:52:30:85:cd:4f:f0:e3:c0:9c:0b:3f:fd:84:e7:f7:2c:7d:
         f3:ab:7e:fb:ed:86:fe:0e:dd:5a:c9:88:cb:60:e5:b8:52:28:
         60:55:84:10:09:a2:47:6d:8e:64:2b:f0:cb:09:76:4c:4f:ad:
         f5:db:71:cd:40:6e:fb:2d:ca:8b:fc:06:a7:a4:e4:b1:a1:71:
         cf:dc:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:38:29 2026 by rpki-client