Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File:                     Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier:          mdp9Kn2eJT78EJ4meJRJ/zCWt8O9RGAFEoGBxNzFLWc=
Subject key identifier:   49:83:8E:C0:29:74:D3:67:EB:7A:4F:B9:81:66:30:A6:F0:6C:29:3B
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer:       /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial:       01A1DE028F442218A7512E9D9B630ED05EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number:          076B
Signing time:             Sun 15 Nov 2026 07:01:11 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:11 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:11 +0000
Files and hashes:         1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: ylN6ia4a5q/SEySlLMea240kWW5/QFc4QKHQYc/+6PI=)
                          2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
                          3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
                          4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
                          5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:8f:44:22:18:a7:51:2e:9d:9b:63:0e:d0:5e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
        Validity
            Not Before: Nov 15 07:01:11 2026 GMT
            Not After : Nov 16 07:01:11 2026 GMT
        Subject: CN=49838ec02974d367eb7a4fb9816630a6f06c293b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:f8:80:69:1f:57:95:2b:b1:93:95:0d:99:
                    c4:50:f5:7f:4a:79:3f:2e:97:7e:35:24:f8:92:3d:
                    32:40:31:0e:db:d4:87:c2:ea:0a:10:86:75:22:a6:
                    87:24:1b:bf:5f:1d:3e:e3:44:4d:c2:6c:67:68:e9:
                    56:2e:12:13:ef:11:23:65:73:74:e3:c4:1d:0f:57:
                    71:1b:ec:a8:ab:52:56:bb:95:61:74:f5:7c:36:d6:
                    20:11:db:46:dc:30:c1:ae:a4:26:e6:1b:4f:0b:cd:
                    0d:b7:02:6c:61:1f:d9:f7:39:ce:4c:34:48:65:e3:
                    3d:6c:11:1c:9d:05:9b:7e:b4:94:21:8a:93:19:82:
                    2a:e6:f0:86:d6:ad:e9:8f:b2:a7:d7:fc:b6:c6:e3:
                    bc:07:93:b8:17:14:9e:a5:c3:8a:0e:ac:20:7b:6e:
                    2c:6a:48:1a:3d:a8:1f:f3:d7:ad:89:eb:45:b7:19:
                    c9:c7:fa:7d:06:b6:94:fc:19:f2:2b:a6:b8:9b:47:
                    af:8d:b4:7e:cc:55:7c:80:e8:e8:c1:18:90:12:d0:
                    da:7a:17:e7:22:8a:60:b7:83:fa:77:82:27:51:20:
                    f5:a2:aa:cd:e8:9f:68:82:81:26:0a:37:6c:3c:84:
                    3a:0a:54:ec:74:b4:dd:09:63:87:01:0a:08:6c:0b:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:83:8E:C0:29:74:D3:67:EB:7A:4F:B9:81:66:30:A6:F0:6C:29:3B
            X509v3 Authority Key Identifier:
                keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:94:59:f8:2c:80:aa:c2:00:be:5a:ac:5f:67:13:f7:2f:af:
         10:b5:c9:40:dc:c5:f1:b4:d8:9a:6a:64:19:f3:5d:fa:1e:4b:
         43:f1:12:6b:dc:6a:05:e6:82:77:c3:9b:90:cd:7d:fc:db:99:
         6e:30:dc:54:27:b7:68:bd:0e:e2:cb:fd:3b:98:7e:b4:01:a5:
         51:d5:3b:b4:41:4e:4d:86:87:15:51:59:40:61:fb:1b:84:d5:
         84:a3:12:0f:a4:79:81:99:df:39:e9:c9:39:64:4f:1e:72:93:
         29:17:a6:89:04:fa:89:d7:97:d7:fa:99:85:95:f9:4f:44:21:
         3f:cf:11:32:74:82:eb:58:92:12:35:0b:f5:b7:9c:31:c1:61:
         99:77:8e:e1:e0:48:9c:c4:88:23:1d:39:75:db:c5:22:55:c9:
         15:8f:f8:16:41:07:b0:0f:65:ac:89:c8:28:0e:13:07:af:ac:
         ff:3f:ce:f5:8e:d5:6f:0a:ab:1e:a9:29:37:a2:e8:23:41:ce:
         3d:33:c4:ea:c8:4f:ee:81:19:b2:2c:8e:e3:2b:8b:a8:c2:80:
         98:07:df:d8:12:8e:55:66:b3:2f:93:f2:6f:46:1f:85:00:a1:
         f8:38:c5:91:82:f2:3f:7d:b0:ae:3a:d9:17:dd:61:a4:4f:95:
         c8:94:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:47 2026 by rpki-client