Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
File:                     VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json)
Hash identifier:          PMPNk6aV3LXMIxppruSCHAPEuN+A26UVDJXkTGLxi0A=
Subject key identifier:   76:53:6F:9B:26:3B:12:40:36:AF:C4:49:51:EB:12:5E:D4:82:EC:50
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Certificate issuer:       /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial:       01A1DE02865C7EFC3092A1C8B74154D3E102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
Manifest number:          09F8
Signing time:             Sun 15 Nov 2026 07:01:09 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:09 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:09 +0000
Files and hashes:         1: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: hDN62o491zkmOtsy0DZqNdO1M5Yn5z0nTJG/WMYEahI=)
                          2: da21FZlB-EiwRoOLCN5ITMfxNFo.roa (hash: 1w1sUJ0dtbKqnb7RxW32/zqJ1lJ/MMxyHIhHBbfSnXc=)
                          3: jCXew-LM4stUKDAZjHPkm0CcjHk.roa (hash: OKyuhMm85OLa4bavn5P/TH9jpfhep7ElblfCCsZsrhU=)
                          4: rSBkW65hC7ab29bJ4AU0NuL624g.roa (hash: PQXW1iGB9abxie2k7zu6yoynTk5cvhSDeO4aK1Kj0iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:86:5c:7e:fc:30:92:a1:c8:b7:41:54:d3:e1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
        Validity
            Not Before: Nov 15 07:01:09 2026 GMT
            Not After : Nov 16 07:01:09 2026 GMT
        Subject: CN=76536f9b263b124036afc44951eb125ed482ec50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:8b:fc:fb:44:ae:41:ee:d8:6e:0e:68:aa:
                    b2:df:f9:69:d8:cd:02:ba:4d:1c:1a:3d:ae:01:ee:
                    8a:1f:46:ad:5a:db:88:be:ef:9e:f2:5a:e6:67:62:
                    67:8f:53:11:97:22:df:8c:23:36:dd:b8:c6:7f:bc:
                    ca:05:27:ae:7f:55:df:f4:04:be:10:1c:00:51:72:
                    e5:b9:31:c6:f3:c3:ca:ef:5f:48:a4:43:de:43:85:
                    a6:d7:57:62:a8:da:f1:ec:48:9a:b1:15:d7:31:4a:
                    65:bf:b9:eb:d2:1a:a1:02:d9:35:85:78:f7:49:e1:
                    09:e2:f1:58:dd:4d:f1:15:8b:a0:fd:a6:44:20:d9:
                    74:f4:e0:22:5d:7d:7a:b6:d3:2d:31:0f:18:77:11:
                    85:0b:72:7d:9e:8c:37:24:90:64:4b:01:96:5c:bc:
                    30:d3:1a:f2:6d:5f:f3:af:c8:4f:27:85:05:3f:91:
                    82:f4:06:53:ca:ba:2c:17:5d:10:88:3c:6d:cc:b8:
                    47:fa:90:75:48:76:73:61:95:51:45:36:52:70:58:
                    59:6f:c9:af:21:fa:25:5f:de:56:78:4f:dd:91:98:
                    d5:c2:c9:93:72:a9:e1:8e:9f:f3:7d:4a:c5:b7:4a:
                    35:b1:c2:c1:14:a9:78:89:64:05:aa:d1:43:c6:1a:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:6F:9B:26:3B:12:40:36:AF:C4:49:51:EB:12:5E:D4:82:EC:50
            X509v3 Authority Key Identifier:
                keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d4:9d:89:b9:e2:71:d4:2e:35:08:e8:2f:23:95:14:d2:9b:
         ae:b3:68:a6:fd:b6:20:06:d4:11:85:3f:7f:22:9a:27:ee:4a:
         3b:c3:de:f7:4e:de:eb:bb:10:c9:e0:c5:04:e6:93:26:ff:12:
         8f:74:23:6d:22:aa:2c:23:14:9f:35:5e:46:06:38:0b:c7:09:
         9c:fd:a1:f2:b8:d1:7d:a3:ef:22:da:d4:96:96:34:a0:09:3a:
         60:a1:fb:25:de:7c:26:d3:c2:05:82:ed:f3:3f:82:be:71:37:
         28:48:76:ea:4c:e7:bd:05:19:37:da:bb:a2:2a:91:d5:8f:6d:
         86:6a:ee:f9:8b:48:67:07:f3:db:92:87:c7:89:b4:91:14:9f:
         b5:d4:34:0e:fe:09:57:81:ee:44:11:32:c0:d1:c2:7b:b8:0f:
         83:2d:a3:fa:d3:24:2d:23:c5:b0:a2:80:de:a3:8f:ba:f9:5d:
         c9:ce:a0:06:0a:9f:f1:6d:05:93:5e:e7:a5:29:07:ad:01:13:
         12:56:5b:15:5e:bd:af:52:01:a6:7a:cc:3b:76:af:ec:ce:68:
         92:93:b7:03:2e:5f:0a:99:f0:98:37:32:c7:52:70:a8:50:43:
         1c:1e:0d:a8:5f:9b:4e:39:2b:33:78:8e:87:57:5f:73:59:a4:
         64:f2:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:25:17 2026 by rpki-client