Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          LsvxlDrmScZz6+qrkAfrdiq8kUI27KCsFGLeou9Kmb8=
Subject key identifier:   1D:97:61:C6:DE:D3:9F:8E:C3:F4:56:E6:B6:44:2F:B4:A5:2B:3D:09
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       01A1D980C97D584BB2553E077370F5FC9534
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          1406
Signing time:             Sat 14 Nov 2026 10:00:58 +0000
Manifest this update:     Sat 14 Nov 2026 10:00:58 +0000
Manifest next update:     Sun 15 Nov 2026 10:00:58 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: NMEziuLXxpB8lQ8l7txi8cenfr2hfykkvUoREELvhJ8=)
                          2: 8iiGHlsOJWwsrr4dYEu2DAJmDu4.roa (hash: 8N8stGdhMpNHOzJEakrzgY5qXFCD32clBj0A+s284Zo=)
                          3: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
                          4: EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa (hash: 9ZtPQ0L/4UvcfpXOzs0mWSnfUX+7UiuSsVqPpiFMuzI=)
                          5: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
                          6: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
                          7: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:80:c9:7d:58:4b:b2:55:3e:07:73:70:f5:fc:95:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Nov 14 10:00:58 2026 GMT
            Not After : Nov 15 10:00:58 2026 GMT
        Subject: CN=1d9761c6ded39f8ec3f456e6b6442fb4a52b3d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:1c:f2:7f:44:1d:45:af:31:dd:e4:9b:37:
                    3b:e8:db:94:0f:f9:09:3a:b7:61:ca:88:1c:f3:48:
                    81:76:5c:de:d1:9e:54:76:02:b6:e7:4b:9a:ad:0f:
                    1d:81:bc:24:4e:72:f3:fd:85:b0:5b:cf:9a:b3:1d:
                    64:92:07:a4:c8:ed:40:72:24:68:10:c9:e9:4d:94:
                    df:50:83:a4:31:83:17:36:74:af:42:1b:a8:d1:50:
                    11:0c:fa:88:cd:f5:fb:0e:c1:dc:b6:96:3f:d8:3f:
                    da:72:70:65:5e:ab:6c:a2:2d:fd:33:3a:50:11:c2:
                    bb:04:1e:15:c7:d7:dc:d8:79:4e:bc:7e:12:82:dd:
                    e5:05:66:77:8c:13:7a:5e:99:ac:9c:14:38:99:d3:
                    7e:77:4f:03:bf:17:8a:9d:0f:50:37:a1:f3:f3:ef:
                    33:70:b6:6b:4f:d9:e3:40:34:43:82:cd:b1:66:f9:
                    69:09:20:31:95:b2:f3:26:52:5b:9d:63:34:c7:bf:
                    ce:30:2d:62:cf:6d:fe:2f:3d:be:fd:18:9f:85:8e:
                    53:1a:e0:c5:d7:4a:d9:c5:22:f7:4e:85:05:7c:aa:
                    d8:f5:6c:97:f2:9d:c8:81:ad:ad:a5:b5:d7:5d:5e:
                    e0:b1:cf:dc:c8:a6:ab:2a:ca:f8:92:09:e0:af:aa:
                    2c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:97:61:C6:DE:D3:9F:8E:C3:F4:56:E6:B6:44:2F:B4:A5:2B:3D:09
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:65:e2:f3:47:b1:8b:cd:77:eb:91:a0:fb:b6:00:e1:d4:
         05:15:e3:b1:89:1f:7c:21:b6:7c:63:11:1a:b6:5a:11:fd:b2:
         4c:ed:20:47:a6:65:5b:ce:23:37:5a:6b:2e:ec:3b:3e:68:9a:
         03:6d:fa:36:71:41:d9:56:a7:f8:80:c5:dd:e2:d9:c5:82:9e:
         34:58:2d:39:2f:c4:d4:1d:a7:48:58:7c:f5:58:d4:ee:27:83:
         d2:d8:ef:78:0a:02:dd:04:4f:cd:64:14:9d:64:24:9b:26:34:
         4c:7a:9f:26:59:15:47:cf:cc:86:0e:9a:b0:c5:eb:36:fd:e4:
         19:4b:88:fd:de:f2:49:1a:1a:c7:1f:93:db:68:af:70:36:d8:
         4e:bb:68:e6:0b:0a:ab:81:b7:da:21:ae:0e:69:9f:f5:67:f5:
         64:0e:6e:5d:eb:98:61:6e:d7:6e:89:bf:2a:88:9c:17:6d:38:
         c8:ce:5b:9c:72:fe:5b:69:2b:e7:b2:29:22:97:4f:fc:c0:9b:
         90:ef:e4:b4:04:81:1c:4c:23:02:28:10:ce:40:8c:01:ed:44:
         2b:44:ae:a8:3b:2a:e3:74:f3:82:36:60:55:80:bd:25:18:65:
         29:1d:4a:8a:0f:f9:f0:31:b7:37:1b:cb:a3:e2:05:30:8c:f2:
         89:b1:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:39 2026 by rpki-client