Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          +Q7j4vxyXCeM4/Us0R0KNDjK4PrOTFkR+xG8ckn2DZg=
Subject key identifier:   F0:C3:1E:47:FD:F7:F7:B1:7A:CB:99:97:E3:79:60:DE:E3:78:96:EE
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       01A1DA5C7E0696D2CD59F7A6D4617EC346AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          12F3
Signing time:             Sat 14 Nov 2026 14:00:56 +0000
Manifest this update:     Sat 14 Nov 2026 14:00:56 +0000
Manifest next update:     Sun 15 Nov 2026 14:00:56 +0000
Files and hashes:         1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=)
                          2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=)
                          3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=)
                          4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=)
                          5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: ig+YahDlfP8weJI87WNytLCWNf1VfDc5zg97FPTc848=)
                          6: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=)
                          7: eSTze8MlBFRraV4dsl31h2iw1VI.roa (hash: lDAECqzqHU746njNX6dpVZo+oFs2oTdwqB1k/OKzU9E=)
                          8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=)
                          9: hLiW33dYFtk93njm1Q1HKa7zbas.roa (hash: tK/30Ejl4gGabl5/3tryRax+Y14BBBbKwIaeKOFx3Oo=)
                          10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:5c:7e:06:96:d2:cd:59:f7:a6:d4:61:7e:c3:46:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Nov 14 14:00:56 2026 GMT
            Not After : Nov 15 14:00:56 2026 GMT
        Subject: CN=f0c31e47fdf7f7b17acb9997e37960dee37896ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:94:b2:d0:7d:b7:c5:d9:71:ba:98:38:6c:
                    0f:4b:e3:0d:ba:2c:c3:a5:96:6e:7f:d9:62:c5:09:
                    97:56:58:26:3c:51:85:6d:2d:cf:20:29:bd:15:b7:
                    f7:49:36:07:57:d8:c0:3d:ff:51:fd:13:95:ac:81:
                    2d:8e:6a:d4:4a:5f:19:32:a9:42:a7:6d:40:a7:53:
                    6a:b4:b9:95:84:89:cf:86:96:b0:12:41:a6:6a:12:
                    45:91:a8:be:0c:55:64:3d:90:d5:c9:28:ae:3e:3c:
                    38:26:58:fb:11:1a:80:8c:77:be:4f:ac:85:7d:cd:
                    48:b8:67:1c:5f:e7:3f:76:ec:d0:9b:6f:d0:f0:f8:
                    4c:b9:81:91:bc:f1:af:56:42:0d:3b:36:51:2f:44:
                    a7:54:a2:6f:28:e7:c2:3e:eb:0c:f9:7c:4d:06:e8:
                    44:60:c6:b1:f8:88:36:65:36:a7:73:be:ce:5d:b8:
                    24:ea:97:d8:16:ba:ae:da:27:6a:d6:2f:29:dc:8c:
                    1e:24:d6:a6:89:8d:74:ac:d0:f8:ff:4c:a8:b7:fd:
                    ba:dd:da:54:00:56:04:75:95:52:0d:1a:5c:02:68:
                    e2:e1:78:29:24:e5:dd:e6:4f:19:d9:be:d8:12:75:
                    72:0f:11:23:da:3d:ee:76:6d:71:66:7c:68:52:67:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:1E:47:FD:F7:F7:B1:7A:CB:99:97:E3:79:60:DE:E3:78:96:EE
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:e1:03:8b:76:15:59:85:27:dc:00:d3:6c:ab:a8:34:2e:
         7d:89:3e:79:56:b6:66:71:1a:f7:c9:b1:28:b6:6e:ff:0a:d6:
         4c:ba:e9:20:df:b4:13:a9:49:83:61:cc:8b:22:d5:73:0d:d5:
         ed:55:ec:6f:a1:cf:77:de:51:f4:ed:80:92:60:d1:f9:d2:bc:
         85:49:63:c1:ba:1e:03:a1:90:05:b8:33:1d:60:cb:98:04:8c:
         b4:0b:34:be:6b:26:71:5e:1d:cf:91:84:3d:18:36:70:ad:35:
         58:75:fa:b7:ff:55:41:f2:fc:24:de:99:d0:cd:eb:ef:26:15:
         f5:68:3f:18:1f:28:35:f9:0f:5d:41:13:74:16:08:93:1e:7f:
         01:b5:7b:21:1f:60:86:59:cf:03:70:d2:49:0a:72:ef:e7:fd:
         43:b9:35:90:9f:ef:eb:f1:10:3a:2e:72:48:04:5e:43:ae:3f:
         99:d1:d8:b4:1a:3d:64:42:f7:b8:9b:85:52:5b:d2:74:cc:17:
         e5:60:73:23:81:83:3e:e6:b8:9c:31:9a:81:34:4e:c1:1a:0c:
         ee:9a:77:db:a1:6f:b7:33:d5:27:f6:81:df:fd:8e:a2:46:ff:
         47:07:8b:a1:ee:f9:9c:b7:74:f0:44:c5:17:ae:72:84:b1:0c:
         21:24:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:21:38 2026 by rpki-client