Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
File:                     RVifOqD2whVEQAdrRlHglAsk07M.mft (raw, json)
Hash identifier:          1FSwodb9nOuGuU0pyckSvO5KtNO8+hn2/flwQSb96Lw=
Subject key identifier:   15:C7:6E:44:AB:56:AA:7C:C7:B8:D6:12:D5:4A:CC:4E:30:D0:90:9F
Authority key identifier: 45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
Certificate issuer:       /CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Certificate serial:       01A1DA9414A3875B9A555D9B0A2362EB1673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
Manifest number:          01C0
Signing time:             Sat 14 Nov 2026 15:01:39 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:39 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:39 +0000
Files and hashes:         1: 0XJW3RE3Oa8-Wlb8ywLH_ZnR1Mk.roa (hash: 6YXJfIWnaLnUsSWqplSKpLD1TbvfW1YxIw/54EfmOfc=)
                          2: 6HmT4nE3SdU3Rwazir0_bk_LLgg.roa (hash: KhdGQo6Q6QhWTWHK8cO7WlwB19r+U07MYqV+ouIdvrs=)
                          3: RVifOqD2whVEQAdrRlHglAsk07M.crl (hash: 9FzZVs4E5IUBKw8MD7tnQ6SiUQW3Ud13tKBsrvpdC5Q=)
                          4: VQ_7-Qao_TMr03DMsmz8hSGqsgc.roa (hash: 4IO20XFCNpA3GO6xHn+ElDklvpXittT6J7WkO7c/N+A=)
                          5: uLHDG20LgDtIDok5cdpddB117_0.asa (hash: CoRJYMLSdyljOtAPY/JC2kVIDZio2IfAAr+AkcCMxTg=)
                          6: wkLJSDmDMDKpteAy-W3O93S8Mtc.roa (hash: StgbaApByBdbIDSMfFn3q8jDBXsu36tf1MF2LBNIMPc=)
                          7: xpGtv_mG4cms2mw3QC-BVsSP4fA.roa (hash: O9hyeZFmfTE2yjuecg1PiQ0pgntJV6NChJjiCd1hgUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 15:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:94:14:a3:87:5b:9a:55:5d:9b:0a:23:62:eb:16:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
        Validity
            Not Before: Nov 14 15:01:39 2026 GMT
            Not After : Nov 15 15:01:39 2026 GMT
        Subject: CN=15c76e44ab56aa7cc7b8d612d54acc4e30d0909f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:cd:88:d9:f2:c8:bf:fc:4a:77:07:ce:10:
                    c8:92:b7:09:14:64:14:d7:88:99:9d:63:7e:e1:d4:
                    a9:7d:82:e7:51:96:91:e9:7f:fc:ec:ec:83:58:85:
                    6c:cf:03:30:99:c2:d1:ca:1d:0f:f7:20:66:29:e8:
                    fb:46:2d:f7:84:dc:e6:c6:89:34:c6:93:f0:ce:e7:
                    91:f4:65:81:86:2f:d2:61:4c:77:97:e7:78:ec:db:
                    4e:23:cd:8f:70:9f:a7:5a:ae:13:0a:50:fb:da:9f:
                    de:6c:bd:2c:1f:69:d5:d3:85:0d:30:ac:82:6c:a8:
                    84:46:7a:f1:1e:ac:73:f9:73:5d:24:cf:64:c2:fb:
                    18:d4:47:57:ea:08:c9:0f:9d:ad:7e:16:05:84:97:
                    69:50:fd:08:0c:da:c0:f4:25:71:3c:26:50:25:d2:
                    fe:22:b6:5c:4b:39:f7:7a:ec:d3:d9:8a:80:58:c0:
                    07:ef:ac:71:9f:28:14:1d:c2:3b:0d:e6:f7:2d:f9:
                    1b:29:30:28:5d:d4:ec:f1:3e:a5:51:ae:72:c3:5c:
                    61:df:30:3f:8a:9e:13:64:8b:ca:be:13:01:c7:30:
                    86:87:d5:4c:e5:26:4c:06:0e:50:c6:3e:6b:ae:9f:
                    7a:b9:c3:41:22:76:e7:95:01:2e:9a:f9:ec:80:32:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C7:6E:44:AB:56:AA:7C:C7:B8:D6:12:D5:4A:CC:4E:30:D0:90:9F
            X509v3 Authority Key Identifier:
                keyid:45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6d:2f:f6:ea:32:71:fb:28:c7:6e:85:b0:3f:16:d8:55:c2:
         77:72:ed:e1:b9:20:4c:fc:fd:a5:7e:d2:bb:8c:5c:9c:ab:80:
         1a:36:bd:27:cb:70:53:a8:c0:1b:e8:19:ed:0a:a5:19:c5:92:
         05:b0:48:aa:08:fe:55:ce:58:f0:f8:33:ee:e5:fc:ed:aa:1e:
         92:1b:0f:d6:f9:74:ef:4c:af:c0:c5:c2:4a:dd:fb:49:89:1a:
         c9:e2:64:79:cc:c9:0f:23:ee:6f:2e:7a:c3:1e:81:8c:04:59:
         f2:92:3a:b7:b3:20:19:34:8b:96:d7:61:13:91:7a:4f:be:92:
         df:d8:c9:1e:ad:90:2e:e5:f3:c7:60:30:ee:a9:62:8e:44:bf:
         67:10:b7:eb:dc:14:0f:7b:df:16:09:36:4b:73:a2:1a:bd:39:
         e7:a8:26:f6:85:af:78:87:f0:3e:80:69:77:59:2f:37:47:71:
         71:6c:59:31:79:5a:02:aa:e4:33:0b:69:04:70:10:bf:c6:d2:
         7e:a9:d6:ce:a2:77:11:89:1b:5a:50:bb:5c:46:f7:44:54:60:
         15:db:ed:5e:b3:a5:bf:21:14:d9:68:ce:8c:0c:95:70:0e:aa:
         b9:3d:05:7e:9d:2f:c0:09:22:0d:ea:8f:72:d9:bd:35:af:ef:
         a0:2a:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:31:59 2026 by rpki-client