Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          OB6WTLpnAgOy+T6Ncy6UCXlV/0fas1kgphmbn0ld9jQ=
Subject key identifier:   C1:03:1A:CB:2E:66:FC:E2:48:A2:09:3A:20:BE:D1:51:7B:05:E0:F6
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       01A1DDCBEA3745DF69F0E0B46948AE496BF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          1B56
Signing time:             Sun 15 Nov 2026 06:01:30 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:30 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:30 +0000
Files and hashes:         1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
                          2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
                          3: EDn6jQwDUb3_g3td9FsRuFag4vc.roa (hash: odWjY9IlQTpSIG4MhA9Jlqnd2G5ltLMnoOP98UOiafU=)
                          4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: eqqqCuGYI3H9fBKB8bJMsaxSAAAOv3uUPU6w+6cPivw=)
                          5: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
                          6: gtJ9_qnrLM6uoyEewoWSxKZMD2E.roa (hash: e/UmWjVQNlt0QB85gty4tqxfoWYbZ3kgYFWs7Ud3Mjs=)
                          7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
                          8: xOkTZSLsa771caq28USEEIkXpes.roa (hash: NwIcfsi68DSP9V21cWD03wWREzD0An2kgwljZOmrIf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:ea:37:45:df:69:f0:e0:b4:69:48:ae:49:6b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Nov 15 06:01:30 2026 GMT
            Not After : Nov 16 06:01:30 2026 GMT
        Subject: CN=c1031acb2e66fce248a2093a20bed1517b05e0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:fe:3a:c6:92:b7:cc:de:90:95:64:d5:39:
                    35:60:ca:b3:cd:59:17:af:d6:5d:5f:06:60:55:e3:
                    ae:4d:bd:41:76:e9:3d:8a:c3:f9:4f:bb:cb:d2:60:
                    9d:54:48:22:be:83:0c:68:75:52:8e:33:13:65:44:
                    a6:3d:d3:33:2d:e7:16:d7:6d:05:00:14:97:96:f7:
                    83:9b:2f:1c:3d:e1:e9:65:c6:61:df:7e:df:81:6c:
                    79:28:44:6a:77:1f:05:88:d3:e4:8b:5e:3c:81:64:
                    ec:00:d2:5d:b3:c5:29:74:33:54:84:94:76:34:86:
                    27:a8:1c:e9:55:6e:2c:e8:37:7a:ec:7a:bd:23:d1:
                    34:8d:51:aa:9d:6e:0e:71:a6:a6:13:e6:ab:52:89:
                    97:a1:73:f4:42:29:9e:2e:29:18:97:2c:a6:e4:86:
                    24:1a:99:ac:06:f8:ee:1c:1e:e5:47:22:35:5b:38:
                    de:be:00:ef:15:9b:66:d6:9b:bc:d1:74:b5:d1:24:
                    9c:d7:f3:7f:dc:44:8f:5a:05:92:ad:d3:b5:4f:e4:
                    c6:60:43:17:3c:95:06:0b:50:a3:14:ca:12:9b:04:
                    8c:15:2c:2a:62:9a:73:3e:6f:9a:88:79:04:27:c9:
                    00:75:6a:6e:5c:33:52:bd:b0:3b:20:ce:5b:c9:32:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:03:1A:CB:2E:66:FC:E2:48:A2:09:3A:20:BE:D1:51:7B:05:E0:F6
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:52:9f:e6:be:b6:bd:f8:48:0c:6a:ae:9a:93:73:8b:62:a1:
         82:0b:d9:a7:58:de:15:68:db:43:81:99:d4:96:9a:75:51:c8:
         79:be:00:dc:83:5a:39:f6:a2:14:4a:01:8e:d2:d4:d8:a5:24:
         c0:05:d0:02:47:16:3c:ed:c1:d1:e0:19:c4:72:9f:1e:5f:49:
         e4:68:d2:e7:d4:fc:0a:bb:a4:bc:b4:63:46:63:64:79:e6:e3:
         d6:a1:a2:ba:74:26:93:9c:41:b1:34:a7:ae:4a:18:71:b3:5d:
         24:46:f3:76:03:7f:e8:3d:0d:87:6b:1d:1a:3c:eb:f3:a1:29:
         a0:3c:11:fe:96:ff:2c:aa:d7:12:29:63:6a:40:d2:26:d3:e1:
         61:f3:0c:f1:1b:f3:55:e0:d5:ee:74:4d:37:3c:92:85:bd:01:
         a9:29:bb:86:6c:23:69:24:b0:7b:fd:79:b4:09:c0:e0:55:8c:
         2a:42:47:1c:d8:76:2e:62:e4:ad:49:eb:53:aa:14:4f:f3:ed:
         57:b6:c5:f2:4f:f9:df:0e:7c:57:65:0c:7f:9d:ec:d2:0f:e9:
         20:db:2a:00:a1:a1:1e:a0:e4:f5:2e:1b:77:5e:be:5f:2b:95:
         17:f8:41:16:81:0a:c4:a5:38:6d:53:c5:85:e0:a8:41:03:c1:
         11:72:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:48:42 2026 by rpki-client