Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File:                     rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier:          B0KimDVj8/L93pZUROtEc21RwQhy8K38ysFqao6s+vU=
Subject key identifier:   9D:F9:40:D7:79:23:D6:1F:48:D3:D0:39:9A:B7:D6:2F:F4:E2:4E:D9
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer:       /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial:       01A1DFF0E22E1227270E12FEB3BCA2C96E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number:          15C8
Signing time:             Sun 15 Nov 2026 16:01:07 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:07 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:07 +0000
Files and hashes:         1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
                          2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
                          3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
                          4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: 8YdgywZ8yzuBvpwzue9SDaeN4506yEmuqihR+CFOjGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f0:e2:2e:12:27:27:0e:12:fe:b3:bc:a2:c9:6e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
        Validity
            Not Before: Nov 15 16:01:07 2026 GMT
            Not After : Nov 16 16:01:07 2026 GMT
        Subject: CN=9df940d77923d61f48d3d0399ab7d62ff4e24ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f5:d2:b8:85:b9:e8:a2:3c:1b:49:56:e2:35:
                    57:50:81:dd:2e:68:1f:42:0f:ac:6a:36:2f:6e:34:
                    4d:ee:d2:f9:0c:31:df:67:6c:90:9e:7c:6e:77:46:
                    e0:4e:ea:5f:a8:61:6a:74:63:73:8e:23:1d:3a:2d:
                    27:4e:3d:a4:ef:97:8e:d2:27:25:24:f6:b7:9d:4e:
                    e4:a8:0e:4c:7e:80:bc:1e:45:93:9e:82:6b:52:52:
                    5d:44:22:2c:1b:b5:4b:2b:f0:5e:bd:4a:ee:e5:23:
                    c6:78:4b:67:b6:0b:d4:be:76:e3:4e:48:7f:16:23:
                    f1:48:6e:d0:3e:ac:3d:e8:da:36:f3:78:63:fe:5f:
                    d4:ea:a2:eb:c9:26:d2:e6:e5:36:50:2b:f7:92:50:
                    68:c9:db:cb:c4:dc:b4:ca:cf:76:9f:92:2f:00:10:
                    7a:22:b4:97:16:c7:cd:0d:fb:1d:6e:c7:68:75:92:
                    b5:c2:23:e7:d1:a0:6e:ae:c3:4f:06:91:a0:b3:55:
                    67:00:88:1d:d7:b9:58:19:65:08:b7:7c:d7:96:2f:
                    b3:06:83:8c:1a:c6:4e:25:f6:85:77:69:c7:60:20:
                    91:e7:bf:f2:5f:c5:8c:3e:a3:62:88:61:cb:52:51:
                    ef:aa:a9:09:2a:93:7c:98:e4:19:a0:bd:6a:b1:1d:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F9:40:D7:79:23:D6:1F:48:D3:D0:39:9A:B7:D6:2F:F4:E2:4E:D9
            X509v3 Authority Key Identifier:
                keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cc:af:82:8f:65:18:7a:7f:35:f7:08:7c:05:65:92:2d:dd:
         6f:5c:00:fe:8a:60:b7:3a:d4:cd:b1:44:ec:3d:a6:07:ad:fb:
         e4:93:13:fb:55:fd:1c:d8:03:99:22:56:0c:47:9b:0e:2e:b0:
         6a:96:38:4a:b4:65:63:1d:99:80:29:04:8e:49:12:27:61:5d:
         ab:45:9a:96:34:3c:9f:b2:39:46:0f:95:75:c7:95:7e:fd:c8:
         fb:18:78:e8:6f:10:06:f5:27:21:2c:a3:06:8f:3f:bc:15:d2:
         29:dd:fd:04:52:9d:57:2d:b6:0b:d1:3c:32:08:a4:9d:89:c8:
         c8:79:d1:20:d4:84:88:dc:53:68:13:30:2d:25:a4:eb:44:e0:
         8e:1f:31:a0:38:88:83:f9:b4:b7:e0:f6:c4:00:93:3a:00:3c:
         13:ca:12:3d:52:72:bd:c9:af:e2:47:8d:a8:04:a6:6c:46:91:
         9b:69:38:76:60:2f:fc:98:b5:3a:74:d4:0e:16:d4:b6:2a:69:
         c9:19:29:87:3e:25:70:9e:68:f9:4f:4f:74:11:61:0f:1b:84:
         9c:4f:6b:47:b8:54:cf:3d:0d:a4:53:76:39:2d:2b:c8:16:14:
         d7:ba:a2:66:49:a2:31:e9:eb:ba:eb:21:bb:c4:e4:20:43:ca:
         3d:1c:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:48 2026 by rpki-client