Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          ksHOlsvW+nzK6Plopmt65ZDVDe4B7XexYCV8v9U0ZcY=
Subject key identifier:   87:AB:D6:E4:7A:0F:E8:31:94:F8:52:CF:01:20:11:E5:29:CE:1A:48
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       01A1DD5E2427F2151460E5F818B549728639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          1814
Signing time:             Sun 15 Nov 2026 04:01:36 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:36 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:36 +0000
Files and hashes:         1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
                          2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
                          3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
                          4: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
                          5: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
                          6: dNRPSnfq_fz0h0Bx9FN48757K24.roa (hash: PQQSUXtMe+CSMqNhT22afSsgYKHVv8p7crL3JYYOlA0=)
                          7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
                          8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: Ao+ZcjfRllganfKdTtOcJUxQm1/6XZaMpfjcF6aPTFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5e:24:27:f2:15:14:60:e5:f8:18:b5:49:72:86:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Nov 15 04:01:36 2026 GMT
            Not After : Nov 16 04:01:36 2026 GMT
        Subject: CN=87abd6e47a0fe83194f852cf012011e529ce1a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:72:a5:22:01:da:e8:38:63:7b:af:65:56:
                    04:be:e1:75:d4:8e:c7:27:92:77:ab:6f:1e:98:f1:
                    ef:b9:5f:2d:b8:9d:1d:c2:27:5f:6c:30:05:a2:fc:
                    d2:bf:d4:3e:ee:09:29:f0:64:64:87:4c:87:c5:a1:
                    cc:6e:7f:f8:6d:9e:7d:66:77:f0:7c:9e:ac:f0:57:
                    24:cb:34:fe:c0:60:f6:20:d0:8a:cf:98:08:14:09:
                    16:62:fc:55:97:04:14:42:32:ac:3e:73:67:df:ea:
                    85:69:cb:18:2c:44:2b:2b:e0:f3:e2:fa:3d:2d:fe:
                    50:82:72:ea:87:85:ee:f3:bf:07:24:10:34:20:65:
                    d2:e7:7e:5b:bf:e3:05:4a:54:fd:1f:73:c4:a5:e2:
                    68:81:be:a8:25:4b:f2:26:60:34:87:e8:e2:38:9e:
                    f6:0e:02:89:ab:d3:8c:a3:49:dd:9b:ba:ef:f6:e9:
                    80:6d:67:88:d1:aa:5b:6b:e9:3e:91:d6:7a:c0:d5:
                    5d:d4:38:58:c3:b5:af:ae:43:1f:88:41:03:8b:24:
                    32:e8:20:7d:a5:9f:ca:0b:19:63:e5:d6:c7:eb:43:
                    38:20:93:77:35:8e:cd:ec:c2:2f:a9:9a:a4:eb:d4:
                    0a:9d:2b:5b:dd:71:f4:2e:63:e6:21:0e:18:ed:dc:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:D6:E4:7A:0F:E8:31:94:F8:52:CF:01:20:11:E5:29:CE:1A:48
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:87:e2:6e:a0:04:56:e3:61:f7:10:ae:08:37:ff:17:4d:ba:
         f5:ad:c7:de:fb:6c:01:47:62:42:eb:41:05:c3:ff:db:d2:fb:
         68:69:b0:d7:fd:8e:13:b9:09:64:23:53:f7:e4:32:4c:b1:8c:
         ec:bc:66:a6:6c:62:2c:91:dd:8b:ae:31:a8:19:b3:4f:6f:aa:
         29:62:0e:f7:ee:49:86:fa:e5:f6:00:95:7f:51:53:7e:9d:db:
         35:26:da:43:70:05:50:ae:76:8a:9e:7c:52:14:a9:22:30:7e:
         40:cd:8f:2f:aa:67:d5:e4:8d:2e:10:a3:7f:20:45:81:31:be:
         39:25:00:98:e1:b7:60:67:26:6e:b5:7d:30:e2:0e:c3:d3:8f:
         5f:94:ba:e5:36:91:53:d6:6a:b1:f7:4c:0a:95:0f:0d:4e:94:
         54:32:20:ba:46:5d:8b:c5:9a:61:57:1e:b3:de:06:a7:e4:c0:
         70:38:4d:f9:72:c9:93:d3:7e:5c:8c:88:03:52:a6:8d:ba:61:
         f2:c5:1b:d6:4f:a0:e5:e1:29:86:4d:f4:46:2b:49:34:55:5c:
         cd:96:0f:a2:1e:c3:d4:41:97:8d:34:20:fe:fd:f7:0e:9f:77:
         07:f4:bf:46:22:c2:ee:83:fb:b4:2f:14:97:a2:fc:a1:cd:99:
         62:61:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:03:18 2026 by rpki-client