Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File:                     MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier:          U/HRoyQvSNHEI8o/AbuWPvk95v42pVnMitSQgTd4S4U=
Subject key identifier:   DC:03:73:E7:1E:C2:23:FA:D6:EC:35:58:2B:42:8C:DD:BF:B3:28:8E
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer:       /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial:       01A1DDCBC38E43E3DA4B403E27746155518D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number:          1610
Signing time:             Sun 15 Nov 2026 06:01:20 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:20 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:20 +0000
Files and hashes:         1: 3IB8mthpDOk_BFBQubUuplUkjXo.roa (hash: e+u6WkaJwntAo2oCWNchAEYFIeKwoZYuEMGJQKwp5uE=)
                          2: KaqeHG0uZeg5OeAlCabPEVitkog.roa (hash: kUNIU0ayuenQ62hZ/a8gWBFN8YsJ5arVTqiahqwzqow=)
                          3: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: 6UOX4r1A/YS8rIGPfbcCJTxNYMqDSsL6mWbXTUSFcJE=)
                          4: g8rfoziuF-oQqakJ7VRRFDiP_8Q.roa (hash: tMNJvnilP3OgFRAUiXL5Z4gr4F5ohZRaQsEApjgqeNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:c3:8e:43:e3:da:4b:40:3e:27:74:61:55:51:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
        Validity
            Not Before: Nov 15 06:01:20 2026 GMT
            Not After : Nov 16 06:01:20 2026 GMT
        Subject: CN=dc0373e71ec223fad6ec35582b428cddbfb3288e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:86:a7:04:11:05:5f:3b:a0:a6:3d:f6:bf:
                    04:21:ac:69:bd:ea:92:bd:03:57:f3:b7:b0:4f:c9:
                    1a:79:58:ab:7f:df:37:b8:66:a7:28:e2:2b:d6:00:
                    a7:f3:9a:7f:1a:9e:f8:e9:aa:e7:6f:ad:82:d7:c2:
                    c6:e6:9e:e8:0e:6c:e2:6f:dd:a5:7e:2a:fb:9d:8e:
                    94:7f:66:4a:ce:92:8d:56:14:7d:29:0c:66:f9:d7:
                    df:13:d1:9f:da:6a:3b:ad:f2:af:41:0e:a9:a4:bf:
                    51:54:cb:f1:e8:74:5b:dc:75:53:93:e9:ec:2f:f8:
                    06:f7:92:fa:2e:15:54:0f:e0:a1:3a:0f:1e:c5:29:
                    f5:bc:ab:6b:da:61:97:d4:a3:14:3b:f0:f6:70:52:
                    b5:70:04:f9:fc:6e:54:05:5f:7c:9b:f1:ec:9e:6f:
                    90:21:96:26:5f:3e:b0:22:0c:1a:7d:ac:76:5f:ba:
                    99:b5:c3:c6:d2:f8:43:99:d4:34:f1:16:c0:a9:a0:
                    f8:14:03:b5:5b:5d:6c:48:f0:9f:48:bd:05:f0:b6:
                    f8:62:7e:6a:f0:fe:5a:87:a3:74:f2:28:e1:2e:e9:
                    cb:18:7c:1b:14:ba:77:d4:b4:68:29:73:8b:98:a6:
                    f0:56:14:3c:d7:62:06:fb:d8:fe:19:43:5d:9e:69:
                    bb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:03:73:E7:1E:C2:23:FA:D6:EC:35:58:2B:42:8C:DD:BF:B3:28:8E
            X509v3 Authority Key Identifier:
                keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:f9:82:68:45:7d:4d:ed:58:37:9c:66:20:0e:6c:3f:fd:
         e4:de:c9:cd:17:4c:ad:94:82:9d:b2:f7:b4:0a:2c:4a:31:a5:
         e7:eb:9e:37:09:14:e0:d8:0a:7f:69:95:9d:b4:17:dd:7e:a5:
         af:7b:4e:97:89:40:1f:6a:dc:9d:ca:b4:4a:e0:f7:fd:f4:a3:
         0c:58:83:4d:2c:44:49:8c:87:7b:6e:8c:6a:9a:f2:71:96:ad:
         84:63:07:a7:ae:a6:59:bc:1a:c2:e6:70:d6:a1:fd:7f:b8:59:
         71:58:f4:26:32:4a:37:83:e2:08:3d:53:9d:86:c5:9a:34:f8:
         3b:a7:f3:4f:1e:37:7e:cc:ea:5a:eb:cb:0f:e4:c8:b0:61:35:
         69:21:f6:16:e8:cd:a3:6c:e1:19:d3:58:dc:ac:82:b0:b7:cf:
         69:a2:76:72:de:88:77:65:af:b0:91:61:43:0d:24:0c:a3:c6:
         57:e0:57:14:19:ab:fc:cb:35:c6:fa:0e:39:d4:d2:85:34:e4:
         e6:c4:2c:00:60:5e:e7:8f:d4:1f:4b:94:7d:73:59:42:7b:5b:
         1d:ac:b8:64:4d:68:e5:65:b4:6b:e3:fa:09:e8:98:d5:ed:83:
         9d:10:c2:b7:17:63:5f:32:b7:27:a9:20:75:56:fa:0b:f1:0e:
         b9:16:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:28:57 2026 by rpki-client