Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
File:                     MAGbyB3kqk6yn5tHmBwX8aCyunI.mft (raw, json)
Hash identifier:          Iu2Ig6D1QlTDJEo8mSw/oqQ66HVtW7u+oAIDlZ8znpk=
Subject key identifier:   DD:29:80:5A:5E:C7:98:ED:7F:7C:C6:10:D2:17:3C:5C:E4:D7:82:3E
Authority key identifier: 30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
Certificate issuer:       /CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Certificate serial:       01A1DC149824775F20BEC031503730AD8654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
Manifest number:          0109
Signing time:             Sat 14 Nov 2026 22:01:39 +0000
Manifest this update:     Sat 14 Nov 2026 22:01:39 +0000
Manifest next update:     Sun 15 Nov 2026 22:01:39 +0000
Files and hashes:         1: MAGbyB3kqk6yn5tHmBwX8aCyunI.crl (hash: X2pmXEpRnCGP8/Ibpc/p3kTG52eR/4k8uHYU7R9/P8E=)
                          2: pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa (hash: dBVLbfqlR4GtBzx1f02M/qqFPs/aMyQuLiXl/XvXTiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:14:98:24:77:5f:20:be:c0:31:50:37:30:ad:86:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
        Validity
            Not Before: Nov 14 22:01:39 2026 GMT
            Not After : Nov 15 22:01:39 2026 GMT
        Subject: CN=dd29805a5ec798ed7f7cc610d2173c5ce4d7823e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:8e:45:fd:87:e0:26:42:ae:25:a8:48:05:
                    a6:73:84:48:c9:46:19:4c:4f:60:8e:27:d4:a7:e2:
                    2f:5d:28:d8:ec:37:e9:64:c6:d6:b5:88:28:30:10:
                    27:43:6b:09:71:89:67:25:c4:27:4d:1e:01:0e:74:
                    81:a7:a6:37:49:35:98:d5:02:6c:22:4d:d0:ed:77:
                    83:14:5f:7d:bd:f9:73:9c:05:88:47:15:09:93:66:
                    aa:4a:54:ea:40:fe:0d:1a:e9:47:b8:5f:1d:57:e0:
                    45:3c:e9:dc:62:88:5c:00:43:21:06:2f:70:e8:d8:
                    b4:00:24:a2:6d:7e:12:26:3c:a4:58:a9:d8:e2:d2:
                    9d:96:59:27:30:7f:08:aa:4b:13:47:a3:2c:e2:f6:
                    50:d6:72:9c:fa:ff:3d:cb:52:0e:fa:f3:0e:11:bb:
                    d7:33:8b:f7:15:21:4b:e1:dc:25:5e:15:04:1a:a2:
                    e3:7e:49:30:1d:89:c2:f5:32:a3:a3:60:f4:d0:e9:
                    41:1a:d7:73:7f:e3:a1:5b:7e:d7:08:26:90:1f:ff:
                    31:92:e4:b1:67:37:d1:d3:ab:b9:59:d5:ae:6f:a7:
                    12:cd:7e:ac:45:72:01:64:14:02:3c:9f:cf:78:12:
                    2f:2f:7e:b3:58:40:ba:b7:ed:90:34:02:44:c9:85:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:29:80:5A:5E:C7:98:ED:7F:7C:C6:10:D2:17:3C:5C:E4:D7:82:3E
            X509v3 Authority Key Identifier:
                keyid:30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2b:a5:8b:55:b5:39:2c:15:c2:4f:89:36:fb:55:7a:68:fa:
         a9:2b:23:14:26:d6:26:d8:2e:e3:71:62:0d:5c:c2:11:cd:67:
         dd:d2:1c:8e:6b:b9:33:2e:20:bd:9f:d3:3d:48:c5:02:1b:12:
         b5:51:29:31:66:3b:1d:2f:58:44:47:be:a9:f1:37:6e:bd:b3:
         49:6d:c4:84:04:1c:a9:f4:d5:4f:37:0b:2f:c9:5f:0d:8f:84:
         83:e3:39:e0:15:e5:99:c0:6e:82:4d:0b:cf:12:f0:67:8f:2e:
         34:58:fe:d4:c5:ac:cb:2e:a3:f9:f7:3d:36:a5:2e:df:c0:c8:
         0d:3b:02:89:a9:07:ff:0a:72:9f:88:1a:ed:c2:62:9a:47:61:
         e6:3f:32:60:0a:0c:be:bc:08:e8:5d:a4:16:09:af:70:64:1a:
         3a:7b:8b:42:a9:66:9b:77:69:40:be:e1:1f:95:f1:3c:87:cd:
         f8:a8:4e:07:6c:50:d5:b3:84:12:fd:1c:58:59:a9:69:c2:7f:
         25:92:40:bf:a6:80:c3:12:d5:e2:e0:77:e4:8b:9d:14:7d:c5:
         81:2b:60:ae:07:99:2c:ac:c4:a2:c2:cd:2a:c3:d4:2d:42:08:
         96:0e:36:86:9b:81:18:21:43:47:0d:55:42:3f:7c:f6:31:26:
         39:4d:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:12:27 2026 by rpki-client