Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File:                     DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier:          jSup+lwIoMO5HJbiu5E7FZkPEWKyWKa3kQ1IJbCcsx0=
Subject key identifier:   94:61:10:02:41:59:42:85:1F:C8:45:1D:EB:1C:88:50:9E:47:3E:00
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer:       /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial:       01A1D9EE9D8C1286EF8287A28D535F75F5BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number:          06DD
Signing time:             Sat 14 Nov 2026 12:00:56 +0000
Manifest this update:     Sat 14 Nov 2026 12:00:56 +0000
Manifest next update:     Sun 15 Nov 2026 12:00:56 +0000
Files and hashes:         1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: C/dubSXNtfARuOK9JQ3U0e74MT8YgCfrmuSj5p9GzbE=)
                          2: YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa (hash: aIUQvaxY70pNpKSk5tmYluexw6bkZHt2gtc/Ueg8vRM=)
                          3: e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa (hash: oPguTsrx3a7ULwz315fIeupuRdabV/wQF9vZA3Lwhi8=)
                          4: v_sjZEWKqFNaPolplPEIVetQcjo.roa (hash: 97bQo1K+GuO88OfR1uv4isecfgOKEhMoas5WXx3EMiE=)
                          5: wF4dYnSli8MvKSkaalmJxK3BUuE.roa (hash: bRgCLzwSPr+zj8E46tEdf2riioRemK4V+6Zr2lWh/tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:ee:9d:8c:12:86:ef:82:87:a2:8d:53:5f:75:f5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
        Validity
            Not Before: Nov 14 12:00:56 2026 GMT
            Not After : Nov 15 12:00:56 2026 GMT
        Subject: CN=94611002415942851fc8451deb1c88509e473e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:ac:9c:de:2a:01:4f:07:28:3d:20:78:b7:
                    61:7c:f1:ba:e1:b7:68:b4:5e:00:e0:45:3c:b3:46:
                    a4:88:50:ac:6f:89:f4:46:63:6b:fd:9a:d4:60:73:
                    96:af:81:2e:c3:08:b7:b2:63:bf:55:7e:e4:a8:ea:
                    28:29:ec:48:50:15:b2:e0:81:64:cc:3e:32:70:6d:
                    3e:3b:63:59:10:3e:fb:1e:52:be:37:cb:10:de:b0:
                    3c:ee:5b:96:24:2f:db:f5:61:05:6f:e0:fa:81:fb:
                    81:2e:4c:fa:8d:02:f4:20:de:03:59:f9:75:9f:4f:
                    e9:f5:20:3a:29:e4:b0:54:ef:02:a9:45:9d:fa:85:
                    d6:e0:a7:5e:05:86:30:92:f0:d8:01:48:2f:1c:e3:
                    de:ed:84:c3:b5:18:13:68:50:ef:9e:bd:b0:d3:d2:
                    00:7d:90:39:03:9a:a8:9d:53:28:ca:e7:c6:cc:c0:
                    ec:6c:1b:77:fe:b2:ad:73:84:b4:92:fe:66:41:ef:
                    1b:bc:e1:7e:5d:55:69:7e:b6:0e:8c:ee:d2:43:c8:
                    71:34:94:35:75:6d:58:dd:6c:51:7e:c3:2e:a5:cc:
                    32:bd:34:34:fd:85:9b:8f:be:01:56:dc:a5:01:eb:
                    76:82:51:e9:8a:1f:d4:56:55:f1:04:1f:23:ef:80:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:61:10:02:41:59:42:85:1F:C8:45:1D:EB:1C:88:50:9E:47:3E:00
            X509v3 Authority Key Identifier:
                keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ee:46:7b:1a:a9:4d:e2:af:fb:63:3a:18:11:25:a5:c4:ee:
         d1:db:4a:67:e2:b3:28:c4:5d:42:87:bb:3b:56:b4:7c:5a:a7:
         61:22:7e:9a:d9:5c:2e:2e:a6:7e:ee:e6:b9:ce:40:00:2e:29:
         25:73:17:9a:60:2e:0a:be:ea:e1:0e:1f:d9:b3:1b:00:84:52:
         83:9d:d8:c3:c4:45:d6:12:dc:63:33:74:aa:8d:7f:e1:bf:c5:
         b7:e6:86:08:27:0c:f0:b7:aa:a2:b4:ac:1f:93:17:e7:46:f1:
         09:22:3c:cd:45:ac:21:ef:b5:aa:da:e6:22:b2:ef:47:f5:8a:
         69:13:b6:80:63:4f:9b:14:81:9f:52:eb:06:33:ca:47:96:a6:
         80:0d:48:4b:0d:06:0c:72:f2:17:d8:68:a2:10:af:26:14:92:
         96:41:ab:2a:0c:6e:62:01:7a:fb:27:5c:b7:42:3a:ef:4a:b0:
         3d:75:f4:94:98:fa:1b:d9:2e:23:ff:2e:0d:7a:46:03:b4:b2:
         58:91:51:a1:77:5d:48:b8:69:4d:ae:9f:7f:49:e0:ed:33:56:
         ad:dc:18:db:2e:e7:a7:8d:60:cf:ba:ef:c7:e5:e5:40:6e:c3:
         de:99:78:c5:8d:30:80:2d:9c:52:23:0b:c6:d7:c9:c9:14:bd:
         74:ab:a3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:09 2026 by rpki-client