Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File:                     5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier:          khqdTZy6O441x3UH2TNLs5kbqsB6FXpKcD6DJI/OKIU=
Subject key identifier:   31:2F:46:D3:93:EA:92:58:10:D0:7E:DA:C2:33:E6:12:DE:80:FE:79
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer:       /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial:       01A1DF833181F71FA58E600FD39BDD97D96C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number:          12CB
Signing time:             Sun 15 Nov 2026 14:01:19 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:19 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:19 +0000
Files and hashes:         1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: PSwFruSiJovqm4XOf1Qu3H77cIpbdh9+wiPK9aq1YMw=)
                          2: J_wTFK-Imelz3lo0EhalX7WkndE.roa (hash: LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=)
                          3: QE-p0DolLSe1YcERFi4pB7qqbME.roa (hash: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY=)
                          4: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (hash: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:31:81:f7:1f:a5:8e:60:0f:d3:9b:dd:97:d9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
        Validity
            Not Before: Nov 15 14:01:19 2026 GMT
            Not After : Nov 16 14:01:19 2026 GMT
        Subject: CN=312f46d393ea925810d07edac233e612de80fe79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:fc:61:df:17:c5:35:89:79:9d:f7:ac:70:
                    bb:46:e5:02:53:14:13:e9:f7:4b:3a:4f:30:ba:d2:
                    21:b2:d6:91:c3:57:5b:14:cf:cd:17:c6:53:eb:d6:
                    20:87:7d:9f:04:99:35:be:33:7a:e7:36:ea:0c:f4:
                    52:46:c3:52:f2:4d:0e:6f:f9:a1:be:f6:eb:6d:2f:
                    b3:05:12:4e:48:27:81:37:76:c3:6e:4f:f2:ad:19:
                    90:83:78:d7:7f:ee:87:be:81:80:d1:7f:8e:41:ce:
                    66:f9:4e:5f:3b:0b:84:ad:83:ac:56:24:39:d4:2a:
                    49:05:31:93:60:45:17:87:8a:f7:e9:29:88:0a:37:
                    fa:3e:fd:a0:6b:33:68:12:94:49:65:70:63:61:39:
                    00:db:bb:38:eb:b9:34:9b:07:ca:07:4d:f3:93:23:
                    fa:12:c3:0f:8e:b6:72:ce:d4:5c:49:9d:ed:21:72:
                    49:8e:86:22:c9:f6:c7:25:b6:97:f8:34:7a:9a:24:
                    07:74:fb:ce:dd:8a:f4:c2:07:9e:e4:0a:78:65:4e:
                    8e:34:0c:af:67:70:c3:d4:25:da:c4:ea:c5:22:06:
                    ec:e2:dc:b0:71:e8:ea:49:c2:f5:77:6a:23:99:37:
                    d0:b2:93:a2:e8:01:05:a5:64:e2:14:83:b9:15:41:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2F:46:D3:93:EA:92:58:10:D0:7E:DA:C2:33:E6:12:DE:80:FE:79
            X509v3 Authority Key Identifier:
                keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:df:5f:c5:26:00:dc:b9:93:25:08:bf:6a:20:55:99:62:2a:
         08:d0:63:4a:6d:8e:9a:32:c2:07:d5:0d:b4:0e:07:00:89:5d:
         aa:df:4f:36:57:6c:29:21:f1:0b:a3:1c:f6:2e:40:7e:0c:71:
         1d:67:54:e5:56:f5:66:29:ac:8a:07:58:77:43:b3:06:7a:84:
         97:36:6b:ca:67:7a:14:04:f0:ed:56:f3:fd:72:71:f0:4b:ea:
         9a:cc:22:4a:99:29:e4:eb:6a:5b:a6:a9:cf:8b:5d:3f:94:9e:
         09:a4:c8:7b:0c:05:a4:e9:7a:cb:da:c2:5f:4e:00:cc:0c:6c:
         65:00:27:92:1b:e9:26:0e:20:25:ee:a1:08:ed:7e:8f:6e:9b:
         73:83:c2:21:22:e9:18:15:ca:03:88:2d:51:27:38:48:25:1b:
         cd:b0:97:b4:03:43:ea:db:1a:90:cc:54:e8:38:25:aa:ea:7a:
         fb:75:9a:af:42:dc:5b:7a:08:bf:ae:f2:a7:0c:0f:ee:ae:31:
         33:0b:f7:b7:89:5a:99:a8:61:e6:76:de:d1:70:38:71:2d:b2:
         b2:e6:43:d1:67:e4:7b:33:6f:be:f0:de:b1:47:1c:98:c7:f6:
         2b:56:74:fd:a5:52:e8:37:12:3b:80:78:5a:18:0b:b9:d0:ef:
         65:1d:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:36:04 2026 by rpki-client