Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
File:                     mwj052FQMJu9IksB-J7CA8H8Vts.mft (raw, json)
Hash identifier:          kaOucX094/oSkIHuExe5YVV9jtvEpopl9nJLABg5P7k=
Subject key identifier:   C7:45:8B:69:FF:50:32:6E:A2:96:AD:4E:84:C5:49:EE:98:7C:66:8A
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Certificate issuer:       /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial:       01A1DD5E2AAFD40996805A2F897D74AA5B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
Manifest number:          1AF7
Signing time:             Sun 15 Nov 2026 04:01:38 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:38 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:38 +0000
Files and hashes:         1: TFHSombGEFpOEnNXNsGYvrJGdv0.roa (hash: /mqcFhr0w4cIRtBsI04NQ7kvUg9C5yo8DGAn8ldeUew=)
                          2: mwj052FQMJu9IksB-J7CA8H8Vts.crl (hash: Z9THeAFtzjT0WEqpmbsZVoTxYaMvvouXpyWxDF8avzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5e:2a:af:d4:09:96:80:5a:2f:89:7d:74:aa:5b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
        Validity
            Not Before: Nov 15 04:01:38 2026 GMT
            Not After : Nov 16 04:01:38 2026 GMT
        Subject: CN=c7458b69ff50326ea296ad4e84c549ee987c668a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:df:5b:64:81:b4:a8:cb:26:6c:93:69:ac:
                    0e:c8:f8:1b:a9:57:8e:d7:a2:ec:e4:95:7d:5d:72:
                    b6:61:62:9d:66:ac:81:3d:45:50:23:77:51:1d:4a:
                    e2:11:a0:01:9f:35:a2:b3:7e:14:3f:9f:44:f8:73:
                    4d:0f:ce:5c:f2:12:1a:ed:a5:9d:cf:6d:03:90:d0:
                    c6:62:a3:b2:af:31:81:27:71:63:a9:cc:f6:c0:d3:
                    10:ca:29:65:0f:6c:9d:8b:7a:3b:05:f2:56:47:d7:
                    cf:6e:da:79:bf:6f:de:66:bf:bb:e6:c4:13:bb:92:
                    18:4c:5a:9e:16:38:27:8d:c4:2a:b8:88:06:17:30:
                    21:6e:08:e7:a1:1c:e6:59:5b:88:3b:92:0c:f0:f1:
                    01:4c:02:b9:f6:bf:a4:ae:8d:e6:46:51:9d:f3:72:
                    f1:18:c6:be:96:c4:1d:61:08:b9:9c:6a:2b:98:2b:
                    e8:01:6d:f0:a8:3e:fd:75:eb:78:a1:3c:2e:ad:e6:
                    a4:51:d2:a2:e3:e5:90:9e:5a:07:c2:a3:df:94:e5:
                    35:5a:87:de:0b:0c:db:33:5c:aa:fe:a6:55:87:6d:
                    2c:7d:43:4d:9c:8e:70:7b:dd:25:e4:c4:cf:58:4a:
                    8e:62:89:36:fa:87:b7:18:f2:1a:2f:f1:d6:db:ec:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:45:8B:69:FF:50:32:6E:A2:96:AD:4E:84:C5:49:EE:98:7C:66:8A
            X509v3 Authority Key Identifier:
                keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:45:9a:51:84:09:7d:79:f5:1c:f3:91:fc:13:96:36:30:6f:
         eb:c2:cd:b1:3a:23:3e:12:70:c8:8e:44:e6:d1:40:07:56:6d:
         e2:dd:9f:f4:52:b7:42:b4:91:c6:1a:d4:67:1c:f5:dd:11:5c:
         91:c3:7e:0e:6a:da:c2:b7:be:29:73:88:73:70:58:c5:35:11:
         bd:78:03:81:55:7e:b2:cb:a4:70:fe:72:bb:10:03:b9:67:71:
         f4:2b:4b:03:8c:20:d4:5a:c0:a1:ee:9a:4c:fa:2c:c3:7a:58:
         df:39:7d:62:05:d3:fc:08:5d:68:c6:c3:ef:5c:1c:76:7e:ef:
         d4:f1:3f:42:09:70:f4:f5:c1:c3:93:70:01:52:d6:a5:1b:ab:
         28:ec:22:17:f6:63:61:af:f1:50:5e:5d:01:78:1f:c6:fb:f2:
         40:88:81:3e:1b:8d:07:65:59:a3:98:25:21:1a:9d:ef:89:f2:
         5f:b0:6e:5f:08:a7:6c:88:f8:1d:61:5d:65:b0:59:85:cb:58:
         aa:aa:26:2f:e9:66:6c:c1:45:d8:9b:40:1c:bc:6a:c2:0b:80:
         dc:68:40:f8:ba:84:56:9e:da:0e:69:2e:05:a7:37:1f:26:f1:
         94:dd:f7:fc:b9:49:c0:73:94:0c:a0:bd:fb:f3:78:28:dd:84:
         2a:e7:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:54:21 2026 by rpki-client