Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File:                     H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier:          uHI+SEqXScQRIT17shIRCJhr0MncDsrB61CFs1GYGu8=
Subject key identifier:   89:93:F5:11:25:5A:62:CD:81:5D:D6:59:3B:3C:E1:3F:65:E7:59:6D
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer:       /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial:       01A1DD5E04E2216CB7149EA5494F36C7F403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number:          0B52
Signing time:             Sun 15 Nov 2026 04:01:28 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:28 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:28 +0000
Files and hashes:         1: 0zv8thgM094fauKo7yb9m7KXvp4.asa (hash: 6HbLgwXUkv7C6GvCQ+QYiV39nDZw16/P94MxN+o+sH0=)
                          2: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: ++RgQzMMZX8pdWoRyITglZ1z2nX+Bpc0o/1N6m1r47M=)
                          3: sQzLWPKbpFQgbQEjLtiXfdxjj4M.roa (hash: WmZKXW7L65arfUIeRY8BoRfQ9yJjcjwFK1GSh1EJtok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5e:04:e2:21:6c:b7:14:9e:a5:49:4f:36:c7:f4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
        Validity
            Not Before: Nov 15 04:01:28 2026 GMT
            Not After : Nov 16 04:01:28 2026 GMT
        Subject: CN=8993f511255a62cd815dd6593b3ce13f65e7596d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:19:75:e2:51:25:fb:4a:64:04:97:3c:85:
                    af:7d:59:79:c7:84:4c:28:e1:fb:77:bb:c8:7e:28:
                    3c:60:56:23:6f:61:2f:c5:7b:ed:bc:b8:43:32:2b:
                    f3:f5:df:94:3a:4c:3e:76:99:3f:ff:ea:d3:9c:be:
                    10:c4:71:af:8b:ce:d1:05:8c:53:c6:c0:00:a3:70:
                    e9:fb:f1:05:b0:d5:e7:90:5b:aa:aa:e9:82:b9:9a:
                    dd:47:57:84:e1:45:e9:98:71:42:d4:1a:d4:62:f1:
                    c6:74:e8:ab:86:bd:fc:86:47:28:45:f7:32:72:be:
                    51:07:67:f1:46:c3:8c:bb:cb:00:cf:b8:1b:13:86:
                    24:b9:18:b9:13:b5:55:ed:d2:59:46:93:77:f0:bb:
                    a1:26:74:b6:5f:d4:17:3b:08:7b:16:82:e7:de:55:
                    7b:f0:df:bc:fa:57:70:25:49:c8:9c:22:57:9e:12:
                    b2:a9:de:14:2f:bf:a7:f4:c1:47:51:23:fc:a4:c1:
                    83:63:44:15:96:7c:24:2b:5f:aa:72:5a:07:b9:63:
                    38:4c:c8:9d:e4:5f:5c:20:e1:58:a0:09:18:36:7b:
                    04:75:1a:f0:f0:bc:8f:38:d1:72:7c:5a:17:2b:cd:
                    6d:ef:94:71:5d:32:cc:c6:a2:e0:0a:44:86:95:f7:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:93:F5:11:25:5A:62:CD:81:5D:D6:59:3B:3C:E1:3F:65:E7:59:6D
            X509v3 Authority Key Identifier:
                keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:47:a6:12:1f:d8:88:6a:26:a2:9f:7b:cc:6a:23:b0:d9:99:
         6c:e3:04:ea:be:45:99:f3:e9:7d:c7:5c:ef:b2:0c:f8:70:96:
         ab:d0:a8:e6:13:2e:04:01:77:9c:5a:b6:50:1d:c3:7e:0e:d9:
         91:69:d6:24:e2:6c:45:55:9a:b7:33:c3:17:58:b4:23:06:a1:
         78:43:d4:fe:8d:92:38:6a:6d:7d:fb:31:33:89:9d:15:95:8d:
         68:31:97:df:f8:d3:19:fe:a7:20:ad:7d:e0:56:34:41:89:a6:
         b9:ea:68:c8:01:0c:60:f0:e4:92:a3:b2:8d:3b:2f:58:14:f8:
         f6:c8:ea:cd:a3:79:32:c7:04:29:09:3d:d1:fa:1e:5f:2a:c4:
         42:57:2e:7b:85:5b:59:0a:df:03:28:c6:1f:2f:40:7d:f0:9e:
         d9:55:49:20:e5:22:fc:96:dc:23:59:11:98:61:cf:af:b1:53:
         d0:d8:cb:05:db:af:10:c1:ec:c5:22:f8:98:4a:eb:1c:04:b7:
         be:1e:21:63:28:14:f1:da:5d:03:e8:8c:e4:72:01:77:f8:2a:
         33:2a:62:85:0c:cf:86:57:ad:fa:ad:f5:07:8c:24:cf:93:4a:
         d4:ad:e8:bb:2f:8c:44:2c:22:34:b6:de:75:3a:f9:01:e5:22:
         73:e7:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:26:28 2026 by rpki-client