Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File:                     FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier:          tKb6XLLgevb23g+iVbPFCHvAI3NX8KjNuduc+xnSs5k=
Subject key identifier:   18:C0:44:69:4B:A1:76:20:8E:D8:1B:8F:69:81:E7:D9:11:BD:96:49
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer:       /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial:       01A1DA94458A46C41DC7B127A8DBE6F41510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number:          1B0E
Signing time:             Sat 14 Nov 2026 15:01:52 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:52 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:52 +0000
Files and hashes:         1: 3iYvKmjSjsVE6fZyKjpy0lQpo6w.asa (hash: QIfk+9gv0T73m/MPZnABQni3pTAGdP9z7PVI1QeSe60=)
                          2: ALO3Qlxx-v5_rVC3KZ4QsZ2p3Q4.roa (hash: YjDYNJEAbu31/bNPzefu/2Oydl8evmmZTBFRwvp1e8Q=)
                          3: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: LYcRsvKzgmWgi01xemh27fsLfaxT+Atbn6v1H6XNlpM=)
                          4: NN4I3X81eMdfxSPDwC84MF9p8WU.roa (hash: ykKvXMmleoaLHhJSPR4Oi+U1d0KeOCaBVP6OGm1bNDI=)
                          5: uiJFdaJRW_IvGZlH4S2t7KeWTGE.roa (hash: 6SMIjJZcRRN9XbseNElKZerubHd6RO+4/fe+SB9ZZb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:94:45:8a:46:c4:1d:c7:b1:27:a8:db:e6:f4:15:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
        Validity
            Not Before: Nov 14 15:01:52 2026 GMT
            Not After : Nov 15 15:01:52 2026 GMT
        Subject: CN=18c044694ba176208ed81b8f6981e7d911bd9649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:f0:74:a8:65:bf:0a:60:48:a7:5d:83:0d:
                    d5:cb:82:c6:b3:29:60:fd:9b:5d:44:38:34:21:f6:
                    bc:94:6c:f3:69:02:f6:6f:fb:91:c5:e7:eb:57:79:
                    01:d5:f9:c0:27:20:f8:5a:d1:65:12:15:86:e9:4b:
                    7c:13:f4:0d:9a:71:c5:42:07:fd:3e:e6:30:28:94:
                    29:52:41:c2:25:3a:3e:1d:e6:db:6b:c3:c0:ba:4e:
                    15:7e:30:2f:55:80:a2:76:dd:24:6e:13:8b:48:63:
                    99:46:38:1a:72:41:f5:b9:83:0c:8f:f4:13:ee:b6:
                    2d:5a:1f:f0:7d:2a:1e:44:f4:e4:98:4b:80:80:72:
                    ba:05:94:17:a8:25:71:b3:4b:c8:ea:4e:2e:6a:f8:
                    14:9d:c4:d0:50:02:06:48:17:2c:7c:d7:47:3b:03:
                    d2:45:b9:81:51:4d:d2:b0:b5:bb:85:8b:9b:be:5e:
                    c7:13:33:90:07:4c:2c:f9:83:ad:f3:9b:b4:4c:48:
                    d8:3f:27:ff:b5:fe:24:1e:ff:b4:76:6f:16:04:9b:
                    05:59:9c:03:aa:c3:c0:fd:c4:75:4b:22:34:28:72:
                    8e:78:60:4b:6b:5a:31:2f:82:11:0c:5f:4d:e7:5a:
                    9c:bd:3b:c9:a1:b9:06:48:66:e2:b3:af:31:cc:8d:
                    bc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C0:44:69:4B:A1:76:20:8E:D8:1B:8F:69:81:E7:D9:11:BD:96:49
            X509v3 Authority Key Identifier:
                keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:ab:48:ae:3b:d6:96:54:02:72:32:98:01:dc:a6:5c:19:6e:
         f2:48:c4:15:d6:50:90:3e:51:b6:07:45:ac:22:16:40:1f:bd:
         7a:3a:46:9a:ed:c8:04:6b:80:84:b3:53:f1:f8:14:64:4b:16:
         90:c5:cd:d6:e4:07:02:10:c2:81:15:91:94:bb:99:b2:5e:2d:
         0a:1a:e1:6d:7f:81:48:f0:63:73:ed:1a:dd:93:62:e9:fb:8c:
         fa:1e:25:ff:2d:ad:16:1c:9f:94:be:14:75:e4:98:ae:97:76:
         1e:9e:f7:8a:91:0b:2a:5f:df:1c:8c:60:b8:7c:0c:e1:ee:8f:
         5c:d4:6c:16:62:af:f1:55:50:36:50:56:c7:12:59:40:59:c1:
         e0:37:61:0e:f3:e0:88:49:bb:8f:af:13:41:ee:32:bb:a2:94:
         5b:21:8a:8d:12:c3:47:49:79:2a:9e:93:ce:61:90:79:13:48:
         b6:75:ca:3e:ca:79:a6:ea:f2:57:3c:a2:67:97:9c:f5:60:f3:
         a2:91:62:d8:15:9c:a0:9d:07:49:2a:07:8b:47:46:9e:27:10:
         95:7d:7f:26:25:79:76:5b:11:2a:7c:70:10:a3:55:fe:e7:da:
         d6:e6:b2:b3:08:65:9d:67:00:e3:b5:ef:4e:bb:f8:ac:0d:1f:
         89:fe:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:31 2026 by rpki-client