Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File:                     I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier:          aiqkxuComJn0teZ5EKjOEiawsYkwWA6Ykbefv+nGFeQ=
Subject key identifier:   92:CB:6D:7F:44:38:CA:36:AE:48:2A:32:74:48:31:30:7E:92:80:F5
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer:       /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial:       01A1DE3994C5CA1F7BE97DE283CAD4DDCFA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number:          0E41
Signing time:             Sun 15 Nov 2026 08:01:17 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:17 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:17 +0000
Files and hashes:         1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: kTk+VC0N3csrhT5Y2sJjFLMq0KQST6Jw7iLKpM9c0+o=)
                          2: vvIw8F-IOEioMYu93B5YO0Hq9vk.roa (hash: WtTZswHjYBJIgKk4bHAyXKnVfNJT2/jg2Qz9ZX4kuRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:94:c5:ca:1f:7b:e9:7d:e2:83:ca:d4:dd:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
        Validity
            Not Before: Nov 15 08:01:17 2026 GMT
            Not After : Nov 16 08:01:17 2026 GMT
        Subject: CN=92cb6d7f4438ca36ae482a32744831307e9280f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:1c:e6:28:77:2c:2d:51:1f:b5:50:b9:26:
                    95:8f:a6:59:2a:cd:52:24:ea:7e:aa:a2:36:c6:b3:
                    81:69:5a:08:d7:0a:c9:23:c8:93:08:2d:3c:0b:6b:
                    63:a8:7d:15:a6:2b:fc:8e:6b:20:c7:f3:41:bd:c7:
                    5a:27:42:1e:99:53:0b:74:1b:e9:87:72:59:c8:c5:
                    2f:9d:ae:b8:06:4e:f1:e3:cd:ed:4e:a3:19:95:02:
                    6b:48:1f:62:e5:f7:b5:e7:88:2f:d2:5b:52:71:38:
                    b0:3e:d3:3b:10:d5:a9:fa:8f:57:03:ea:d9:66:98:
                    9b:5e:49:00:5c:f5:a1:e1:6a:99:4a:3d:ef:8b:31:
                    d7:65:9d:f7:cc:f1:92:3a:4a:35:cb:cc:b9:36:5b:
                    8c:32:e0:99:b3:96:aa:85:2f:15:6c:03:88:cb:e0:
                    20:07:db:82:c4:e8:73:0c:95:86:72:e7:0a:7c:86:
                    62:88:a5:01:02:43:05:1a:19:5b:3d:80:34:75:c6:
                    ef:4f:e8:34:89:9a:20:04:f7:14:3e:26:11:29:b2:
                    a2:31:8d:35:ae:86:16:d6:45:74:ec:53:5a:1f:53:
                    63:5d:3b:ab:0c:f5:a7:e4:f9:15:3c:e7:93:dd:cf:
                    da:ed:43:15:d1:ee:84:78:4a:10:bc:97:fa:8f:ad:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CB:6D:7F:44:38:CA:36:AE:48:2A:32:74:48:31:30:7E:92:80:F5
            X509v3 Authority Key Identifier:
                keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f5:62:0b:11:3c:ba:a8:fd:98:33:11:5e:6a:55:82:4b:73:
         97:3c:85:36:53:32:b8:54:2f:04:60:e8:47:84:b5:79:a3:65:
         bd:00:2e:e7:ed:f2:46:1d:c7:ad:9b:73:79:bd:8a:9d:04:5f:
         08:25:58:f9:a4:29:d7:1e:93:6f:d2:98:9f:35:ff:bd:b7:c0:
         23:93:52:c5:cf:8f:3c:a9:19:e8:b9:ac:a9:93:2c:71:0e:d8:
         22:0d:29:3c:d7:5d:c2:79:1e:f4:af:bd:e5:1a:00:3b:13:7b:
         05:76:2c:11:e3:6e:8e:b5:6e:fd:7e:02:83:d5:8e:58:27:b9:
         3c:7a:ee:11:69:82:e1:2e:0b:b2:0c:bd:3b:42:c5:eb:43:00:
         66:74:33:b2:12:7a:96:51:b6:c5:d7:d8:a0:0f:36:09:93:02:
         fd:9f:50:75:b2:f1:7e:8a:dc:7d:ab:fb:75:c3:78:4f:04:f5:
         69:99:87:71:61:cc:b6:43:49:4a:b1:34:ca:b3:e8:22:8a:fc:
         43:d0:83:64:69:50:c3:8e:65:ae:44:3a:08:6e:2d:e2:8f:9b:
         7d:b0:12:98:d3:3d:98:a6:a3:33:6e:77:3d:2f:d6:49:94:05:
         bd:0d:25:d4:59:e1:09:80:8c:9a:d0:32:9b:82:50:c9:c4:77:
         d1:be:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:53 2026 by rpki-client