Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          IMO2PcvlEK7AGt7EZMSoJtfw89/QcDGMY+PEPuG08/k=
Subject key identifier:   ED:67:BE:C4:0B:07:91:D8:82:E2:CA:45:19:0E:E3:EB:5B:B1:D9:5F
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       01A1DF157C076FD1EB5B6C438A8381E749A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          1AF9
Signing time:             Sun 15 Nov 2026 12:01:29 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:29 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:29 +0000
Files and hashes:         1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
                          2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
                          3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: RWEieF4DvLjDvyOYbNzPGfUaOQZWdxkXoTc9uF4szJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:7c:07:6f:d1:eb:5b:6c:43:8a:83:81:e7:49:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Nov 15 12:01:29 2026 GMT
            Not After : Nov 16 12:01:29 2026 GMT
        Subject: CN=ed67bec40b0791d882e2ca45190ee3eb5bb1d95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:06:f0:be:5b:38:eb:ae:61:6e:fa:40:ef:
                    6f:7b:f7:7c:3c:7c:8e:34:b8:ef:2f:ac:4a:a5:ea:
                    28:68:46:0c:1a:4d:38:71:80:db:00:5c:82:84:02:
                    28:c7:8e:0f:f3:a7:d2:b7:ca:42:ea:05:df:5f:be:
                    d3:9b:a6:e9:84:4d:6b:1b:72:c8:3a:0d:67:5a:cd:
                    65:ff:95:64:90:f2:9a:03:1a:e7:de:1b:23:30:7b:
                    cc:79:65:39:36:45:04:b2:68:48:08:d6:55:09:35:
                    8c:a9:c7:91:f8:56:4a:71:6b:90:1b:cc:de:1e:63:
                    9d:52:ec:d5:83:22:79:6d:e5:8e:68:b7:7a:14:db:
                    d6:09:51:fc:76:9f:4b:2e:67:17:16:b4:fd:c3:bd:
                    77:75:52:a4:40:12:16:46:6b:a4:1d:24:21:94:ed:
                    3b:75:f7:54:7e:ee:eb:a6:95:4b:42:5b:32:ee:cf:
                    66:1c:f6:9d:2d:fe:0e:59:95:9e:25:d5:ae:34:97:
                    d0:38:88:d0:d8:f3:78:78:45:02:99:8a:50:e9:83:
                    22:6a:0e:bc:b3:de:0a:f0:a4:27:72:44:7c:73:85:
                    fe:79:04:e6:a1:8c:42:6a:2d:70:af:56:a7:41:56:
                    66:c4:4c:d0:8f:f1:57:4d:b1:27:94:47:92:44:c6:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:67:BE:C4:0B:07:91:D8:82:E2:CA:45:19:0E:E3:EB:5B:B1:D9:5F
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:d7:fb:cd:d1:0e:b6:ec:f9:14:a8:43:17:11:2f:c9:c3:
         2a:74:3a:b5:96:44:73:b7:1d:a2:69:d4:35:cd:67:82:e4:1c:
         27:b3:88:d8:7a:6b:bd:0a:9e:99:ca:be:3d:f3:2b:65:44:80:
         74:ce:57:b3:b3:34:64:79:36:fa:46:f3:de:94:17:47:eb:d2:
         fc:e7:5c:85:50:d3:58:94:55:70:ee:3f:7a:da:2d:13:05:e3:
         10:96:6b:52:f5:d3:a6:db:02:8e:39:02:44:b5:fd:f6:6f:78:
         ee:04:c3:df:aa:85:2e:65:23:ae:65:48:7f:c1:8d:50:6c:fd:
         d2:17:68:0d:d3:db:db:35:6a:b8:b8:bf:76:6f:b0:e0:b5:86:
         71:32:f6:95:df:1b:67:a5:fe:7f:92:2b:3f:94:7b:54:51:25:
         02:03:f7:3f:21:8e:6f:45:cb:1a:80:d9:e0:81:b8:e6:7c:6a:
         35:b5:84:d3:a1:e3:13:33:ae:5d:3b:c2:4c:38:6b:64:86:cf:
         99:8e:e6:9e:6a:d5:69:86:9f:9b:9b:10:49:ec:86:ac:46:2c:
         51:97:a8:c9:4e:96:2a:af:95:4b:d3:3c:7e:c7:29:5c:d1:21:
         c8:f1:0d:cd:f1:a0:c2:e0:98:e6:83:3e:37:9b:be:a6:d5:f9:
         92:c4:ad:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:16 2026 by rpki-client