Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
File:                     yA3IsMZQm8dryF5n9D7giooUyXU.mft (raw, json)
Hash identifier:          CTii6r0SyxxKUaA7wQYywB0FO2qrOKpm3UkLbI96erY=
Subject key identifier:   F1:50:4B:BA:ED:E5:55:E4:9C:B4:CF:94:CC:64:35:30:76:30:70:2F
Authority key identifier: C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
Certificate issuer:       /CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Certificate serial:       01A1E0CCC29FEA3532BCB847C23A9962CC62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
Manifest number:          01F6
Signing time:             Sun 15 Nov 2026 20:01:17 +0000
Manifest this update:     Sun 15 Nov 2026 20:01:17 +0000
Manifest next update:     Mon 16 Nov 2026 20:01:17 +0000
Files and hashes:         1: cpmgiH1BslsxBNjDBIkAI1gHkq4.roa (hash: 7HS2B/w6P1YHari4czqglwcerA3k27fD3l3Bj3QIfa4=)
                          2: yA3IsMZQm8dryF5n9D7giooUyXU.crl (hash: kG6WIFbE31C3HoLwYXjdx4KgNr36EPCBpYaZzt+GnFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:cc:c2:9f:ea:35:32:bc:b8:47:c2:3a:99:62:cc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
        Validity
            Not Before: Nov 15 20:01:17 2026 GMT
            Not After : Nov 16 20:01:17 2026 GMT
        Subject: CN=f1504bbaede555e49cb4cf94cc6435307630702f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:a6:9d:b4:23:39:b3:bb:16:75:83:81:70:
                    ea:45:25:bb:7c:c4:a0:fb:bc:86:a1:5a:31:13:49:
                    9d:0d:9b:9b:7b:e3:79:bb:85:75:1e:07:9a:29:d0:
                    88:fd:e2:79:7b:05:f9:23:20:ee:2c:25:71:0f:b9:
                    ee:86:97:f5:73:83:d5:9a:11:7f:7e:4f:42:51:8c:
                    8a:ea:3e:a5:9b:2e:6d:4e:be:8b:4e:46:37:77:2e:
                    88:b8:d8:82:e3:37:07:18:36:42:9d:46:58:cc:c5:
                    fc:89:69:6d:37:96:b1:a9:71:3a:ab:e7:6b:d1:88:
                    9b:4e:c7:70:1b:3b:9b:69:29:9a:a8:8b:59:8d:12:
                    12:c6:d3:e7:55:70:73:6f:ad:fb:34:0e:5f:61:7d:
                    c3:98:5d:2e:69:52:0c:15:ee:b1:ff:66:7b:ff:fc:
                    c4:6d:da:7b:4e:9e:36:80:e4:e5:4f:94:aa:e9:fc:
                    5f:ea:51:84:4c:ea:98:29:7b:c1:0a:a0:12:1c:cf:
                    3b:fc:29:51:e2:20:d0:e5:34:36:5a:9b:1d:a0:f0:
                    c7:79:d9:cb:a1:a8:3d:ec:12:ce:dd:ea:50:af:36:
                    e6:e9:a8:90:d6:b6:47:68:24:72:38:2a:c0:61:cb:
                    54:c1:73:7c:63:ae:8e:52:3f:7f:82:49:c5:e1:2d:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:4B:BA:ED:E5:55:E4:9C:B4:CF:94:CC:64:35:30:76:30:70:2F
            X509v3 Authority Key Identifier:
                keyid:C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:e3:53:ae:1f:38:5e:be:1a:ef:9a:dc:63:bd:3f:25:7d:
         5f:12:d4:64:5c:51:a5:54:55:3c:0f:5f:13:9d:d7:97:40:18:
         3f:44:d6:f5:b6:eb:45:39:6e:84:b7:f7:1e:d3:5a:79:b0:4e:
         cd:2d:b0:e0:23:12:cf:7d:b5:67:b7:2b:d6:6a:fa:4f:86:02:
         db:12:67:f2:a4:ab:5d:aa:6b:eb:5d:69:cf:cb:1c:df:e1:ba:
         6f:ac:f7:cf:fe:fe:f3:24:c4:21:49:ee:19:41:29:db:0d:20:
         a6:f9:1a:d9:bd:4a:e1:53:a0:89:1b:66:14:19:f1:35:a2:e4:
         51:dc:ff:6f:65:c9:b8:a7:aa:49:08:75:73:38:dd:66:d8:36:
         4a:36:d0:77:ae:cd:af:ce:ab:a5:3d:ba:91:8a:a2:4b:02:35:
         90:ed:79:01:a8:9c:93:20:2f:18:25:30:53:e1:88:55:8a:1d:
         45:51:25:d5:b7:f0:43:ec:9e:38:a6:7f:43:ca:5c:7a:09:4c:
         fe:16:86:2b:df:31:e8:85:7b:50:f4:a0:40:2e:f3:a9:03:aa:
         08:4f:8e:b0:22:fc:20:fc:bc:d0:b8:c8:b5:1d:94:e1:ea:c1:
         1b:89:10:73:15:b8:4a:b9:b1:6b:02:fd:4e:da:9a:58:bf:a8:
         d5:25:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:52:46 2026 by rpki-client