Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft
File:                     1BOwVNiCtNee47m306uy98Wycb4.mft (raw, json)
Hash identifier:          Zejrfahm4tUJI/jnodKfferoN//RV0imnnMeanijFs0=
Subject key identifier:   2E:A6:F8:81:53:98:19:2B:4B:41:F2:B9:AA:2B:C2:8F:F4:84:43:4C
Authority key identifier: D4:13:B0:54:D8:82:B4:D7:9E:E3:B9:B7:D3:AB:B2:F7:C5:B2:71:BE
Certificate issuer:       /CN=d413b054d882b4d79ee3b9b7d3abb2f7c5b271be
Certificate serial:       01A1DA25A37B91760A084792456945321B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft
Manifest number:          01A5
Signing time:             Sat 14 Nov 2026 13:01:02 +0000
Manifest this update:     Sat 14 Nov 2026 13:01:02 +0000
Manifest next update:     Sun 15 Nov 2026 13:01:02 +0000
Files and hashes:         1: 1BOwVNiCtNee47m306uy98Wycb4.crl (hash: xvEO9nvucEPFehdPjwSpdcIwvQhdu68Uki0Zw3Z/83w=)
                          2: E-afr4F2Q1-YX2MSxrM7oF618aU.asa (hash: DyeMjeNi1YFyAHlDQKwQ+V3mc3ffjKyYa2gMYLJ2l18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:25:a3:7b:91:76:0a:08:47:92:45:69:45:32:1b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d413b054d882b4d79ee3b9b7d3abb2f7c5b271be
        Validity
            Not Before: Nov 14 13:01:02 2026 GMT
            Not After : Nov 15 13:01:02 2026 GMT
        Subject: CN=2ea6f8815398192b4b41f2b9aa2bc28ff484434c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:73:f0:d6:aa:39:18:07:35:db:2a:d0:76:
                    0b:ca:f2:3f:e3:78:6f:ce:07:73:44:0e:93:ab:73:
                    c0:55:8b:ab:7e:3b:eb:25:d0:d2:34:da:d5:0a:f6:
                    a2:c7:06:e4:d0:78:3e:31:39:3e:d0:e8:5d:ff:c7:
                    59:89:0a:e8:ff:20:6c:f9:e1:4a:ca:b4:0c:72:29:
                    77:52:92:7e:5f:cc:ff:9c:3f:37:ee:7e:43:ad:ee:
                    07:4c:9a:2d:ea:ec:ba:44:7f:51:72:b7:25:1b:c8:
                    12:f2:f8:c3:d3:a0:e9:c2:8c:0c:1d:b5:21:b9:f1:
                    7c:3b:f9:88:96:e2:e8:e4:c5:1e:c7:33:5a:a1:1e:
                    f1:47:13:bf:e8:e1:13:c7:5f:22:1a:dd:b8:63:d8:
                    f4:77:7c:74:d6:3f:a7:73:e5:07:19:ed:79:2c:83:
                    b6:bf:fe:55:36:5a:fc:94:40:dd:f9:88:ae:14:13:
                    78:c3:4b:f7:5a:cc:e0:0e:f2:91:dd:11:ca:ec:a9:
                    3c:7d:af:07:9c:68:38:d7:a6:1c:f3:d4:b0:6b:bb:
                    02:34:d6:3d:4a:ba:cd:44:ea:50:6c:fd:c2:32:c5:
                    52:c6:0c:e2:09:d9:fc:a9:26:3b:32:1b:8a:aa:33:
                    34:9e:c6:d3:8b:71:ce:c3:9a:e6:40:ab:e6:be:86:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A6:F8:81:53:98:19:2B:4B:41:F2:B9:AA:2B:C2:8F:F4:84:43:4C
            X509v3 Authority Key Identifier:
                keyid:D4:13:B0:54:D8:82:B4:D7:9E:E3:B9:B7:D3:AB:B2:F7:C5:B2:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:cc:29:cd:15:bb:68:5a:6a:07:55:11:3e:a1:c5:ff:2d:b6:
         d2:27:3b:9c:ac:ce:27:db:7d:56:8d:ee:a1:30:16:23:64:f1:
         02:3e:ed:f4:26:11:05:25:f2:0e:93:ca:34:8b:df:33:a1:d0:
         f7:20:32:f7:d6:0b:fc:43:1e:dc:bb:15:27:1d:8c:86:0c:35:
         1e:5b:b8:e1:90:e2:3c:1e:55:2a:c9:c9:87:7d:dd:36:f8:35:
         8a:e9:f4:56:58:a0:80:3c:23:bf:f9:11:21:0a:5a:31:e1:d4:
         f7:f3:b3:f0:a1:2c:17:86:54:e5:3a:36:84:4d:6c:46:ae:78:
         59:73:c3:92:56:9e:93:2a:0f:42:bf:2b:96:60:bf:4f:fb:a8:
         48:a2:f8:a1:7b:b2:c2:e3:21:34:fe:7c:21:78:0b:94:94:cd:
         4b:50:46:48:4f:24:80:b4:ab:4e:31:88:7b:21:41:0b:73:70:
         9f:8d:60:a8:c6:dd:06:85:a4:c5:bd:6d:79:2c:db:dc:42:e5:
         f2:ad:c4:c2:38:dc:ac:c7:be:b2:a0:37:95:c2:7e:7e:46:ea:
         7e:85:05:d0:c5:86:9b:f6:b9:2d:24:8b:b6:c6:59:d0:03:12:
         44:6d:00:cf:54:af:0b:da:00:a1:2f:a0:0c:63:fb:3b:08:d8:
         8e:78:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:53 2026 by rpki-client