Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File:                     SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier:          SnMrJUoUz9IXgOTBbeu03bLkJNVrw8Uv2xZ0DC4so1k=
Subject key identifier:   C1:5A:8F:DE:B5:98:95:EA:AD:0F:7A:54:F3:23:04:DC:82:0D:8C:51
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer:       /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial:       01A1DCF06FC4AEF6376A323629EA149AAE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number:          1AF8
Signing time:             Sun 15 Nov 2026 02:01:47 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:47 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:47 +0000
Files and hashes:         1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: xMKPsFzoSXZTi33n7hmDq6vE4Yh8+Tw/X8MKdjeH7MM=)
                          2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:6f:c4:ae:f6:37:6a:32:36:29:ea:14:9a:ae:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
        Validity
            Not Before: Nov 15 02:01:47 2026 GMT
            Not After : Nov 16 02:01:47 2026 GMT
        Subject: CN=c15a8fdeb59895eaad0f7a54f32304dc820d8c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c3:5c:0e:c2:45:9c:23:20:aa:11:62:bb:9c:
                    b0:d0:5f:9e:c9:e7:37:40:10:f8:98:e2:81:2b:da:
                    ab:b3:35:b7:a6:a8:98:3e:0e:9f:c2:49:63:37:4b:
                    cb:0c:81:4b:cb:7a:86:d3:4e:9a:ac:f7:f5:d8:d7:
                    b3:57:02:7e:4a:e0:28:ef:d3:cc:64:6b:fc:00:88:
                    f2:ae:41:c1:2a:3c:7e:05:bc:65:f9:b9:cf:9d:4e:
                    69:90:51:39:5c:1c:05:0d:00:1b:23:ab:32:b0:38:
                    ff:29:15:30:13:55:0a:fd:5f:ce:ac:2b:7d:bc:d4:
                    59:df:eb:d8:67:e4:19:10:62:43:9e:be:09:9c:e4:
                    be:6e:16:cf:72:2c:83:6b:a3:8e:5b:c4:32:65:85:
                    4c:fc:76:0a:89:e2:5d:4e:ff:a5:2b:3e:82:8b:95:
                    84:69:9a:c5:32:37:c8:fb:11:06:3f:c9:69:98:50:
                    f7:df:bf:fc:a4:56:e7:be:e1:79:2b:e5:14:3a:f8:
                    66:fd:7b:21:79:24:63:7a:58:ab:ac:3c:70:6c:5c:
                    75:2d:96:1a:aa:2b:ec:c1:ca:6b:55:7e:33:45:73:
                    0c:13:4c:a7:e9:63:1b:c9:c8:3d:a7:a0:00:8b:2e:
                    2d:87:bc:8b:b2:4f:bf:84:53:97:ef:e9:9d:88:63:
                    81:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5A:8F:DE:B5:98:95:EA:AD:0F:7A:54:F3:23:04:DC:82:0D:8C:51
            X509v3 Authority Key Identifier:
                keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:54:04:7c:0f:ae:2c:26:03:0b:40:db:22:e1:d3:ff:03:
         1a:41:95:2a:1d:06:55:9e:24:c3:f0:7d:7f:5b:ec:bb:fc:04:
         4b:42:37:33:75:03:ea:b8:79:01:35:c5:1b:86:6a:4e:46:6c:
         d1:de:37:17:16:8a:8a:bb:3b:ef:18:75:ff:89:ad:d8:88:38:
         60:95:33:05:da:80:7d:72:cf:e5:11:10:dd:99:3d:8c:e5:9c:
         c5:cf:2a:11:14:62:d8:40:44:ea:c2:8f:91:82:f0:b8:7e:03:
         b5:bc:bc:ed:65:4f:70:a9:b4:2b:de:6a:20:fb:97:f8:51:6c:
         a9:24:1c:18:7a:2f:0b:72:78:76:3f:c8:3f:e9:54:d6:36:ae:
         79:5e:7d:8f:26:e7:59:e3:7d:e2:8b:ad:ed:97:33:3b:53:3f:
         7b:91:24:3f:a1:2b:20:71:5c:06:f9:31:39:ff:2a:37:68:cc:
         e8:96:8f:78:69:03:44:9c:50:fe:3a:8b:65:2c:f3:7f:dd:90:
         8e:9f:3e:06:c3:f2:5c:cb:94:73:eb:a2:70:24:df:d8:4e:e9:
         2c:32:43:8a:00:1c:a6:76:6f:40:a0:12:b3:7b:64:bc:93:44:
         65:71:9d:88:bf:ae:19:cc:8b:5b:f3:20:29:98:0a:c7:81:d7:
         db:03:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:37:17 2026 by rpki-client