Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File:                     XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier:          HyUh3msXYDIvKfX1ZxT65V78097oPU4EFTi8OU677is=
Subject key identifier:   27:A2:45:6C:28:C2:9F:F1:90:73:0E:CB:95:6C:87:69:6D:09:E4:9E
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer:       /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial:       01A1D9EEF410A70A1C9B3143725934C20FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number:          08F0
Signing time:             Sat 14 Nov 2026 12:01:18 +0000
Manifest this update:     Sat 14 Nov 2026 12:01:18 +0000
Manifest next update:     Sun 15 Nov 2026 12:01:18 +0000
Files and hashes:         1: 1-KmRXcm0EffFQzS72fl1S3DZymg.roa (hash: rN/S5u/23R8Op30IhNEisJnhOq3o+6urpM4nYbYy55k=)
                          2: 1-p16KxsivgGZD8PXd4e_YHv5IC4.roa (hash: Qyqte6RopFpPPBHjfqe/11Zhs4/QiIF284F5Db6RdbY=)
                          3: HZjQ8dfa0hWcB-NnpWnYAzaxB-I.roa (hash: LZrOQ/KPSOzENF2jkc9vB3eqHtccVFGCJ8IUIaKPVcQ=)
                          4: IysZA3MLX2ZvO0KleomY7IPYa0Y.roa (hash: bJ8QUh9i9KG4qjAdJBbyeKXtAo2Wxax62J362DNjcHM=)
                          5: KVYnG1rasxK0lFwIWs0m90qVCwo.roa (hash: 3EZ/z4Q8VBlWlWq5DaBE242a5qu04Bq4t9H9x0FLAzs=)
                          6: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
                          7: QlVQHCKLxPDMUT5yzxzLFxcAbhM.roa (hash: z2k4hBGjSObTZ9Cn+8RZ81P7abO/BO6NGKjOJSPjmms=)
                          8: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: JQUJ6DbZrjBezqQjXbkopSl/PrfdAHLt5T8rd4GZMcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:ee:f4:10:a7:0a:1c:9b:31:43:72:59:34:c2:0f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
        Validity
            Not Before: Nov 14 12:01:18 2026 GMT
            Not After : Nov 15 12:01:18 2026 GMT
        Subject: CN=27a2456c28c29ff190730ecb956c87696d09e49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:83:7e:3c:2b:df:67:2a:84:45:b5:e3:c4:
                    9e:c2:39:c1:34:8b:46:a2:59:25:0d:8f:5f:4d:18:
                    69:14:c4:ca:41:b5:eb:b4:64:79:8a:8e:bc:74:c9:
                    cc:45:9a:2b:93:bf:b2:4e:b6:49:50:c1:f1:b2:2b:
                    fe:0a:c3:8f:5c:1b:7f:ee:ab:be:05:77:d8:3a:dd:
                    89:33:84:54:fd:08:35:b9:6c:bb:ad:85:89:86:cc:
                    4a:51:44:8e:a4:05:44:40:10:3d:e9:cc:58:40:26:
                    0f:f5:b5:dd:45:8f:cb:21:e8:44:cb:f9:01:a0:08:
                    30:7f:ed:e0:40:12:14:23:b9:ef:4e:1c:53:21:b8:
                    14:bf:0e:2b:7a:2c:62:b8:57:e7:b3:e5:5a:e3:50:
                    02:93:f0:b1:c8:a9:0a:b2:c6:05:1c:58:c4:87:af:
                    cc:ff:ab:01:4d:65:be:ae:3d:91:ab:ae:24:40:d0:
                    40:d6:e2:9e:c7:6d:42:cc:d1:7b:46:12:98:12:82:
                    15:77:3b:24:ff:37:38:64:f6:75:51:4c:00:e1:79:
                    c9:e0:02:5e:9b:c2:d3:2e:e1:fb:bc:93:df:b7:9a:
                    7e:db:d0:05:43:b6:9b:88:bb:46:1a:8c:71:06:bc:
                    7f:5f:97:21:35:67:e3:05:ab:8c:ad:5b:e4:88:30:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A2:45:6C:28:C2:9F:F1:90:73:0E:CB:95:6C:87:69:6D:09:E4:9E
            X509v3 Authority Key Identifier:
                keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:2a:fe:bc:41:e6:cb:d0:f7:06:cc:8c:30:bd:6c:e9:1b:
         88:1a:f6:a4:17:25:97:a7:97:f9:a2:8b:a3:c3:8a:d8:f9:ea:
         8c:1f:3f:50:b6:4c:c9:0d:61:df:19:a4:1d:70:56:f1:96:c0:
         a5:35:35:f7:7d:79:ad:f1:3d:61:16:72:d2:a7:73:e9:4c:02:
         58:41:d1:44:d7:d6:5c:dd:6c:6d:ce:1a:86:74:31:4f:dd:3e:
         db:65:c6:5f:b5:c2:e8:0e:d2:41:c6:31:8b:2d:04:a6:2b:ea:
         ad:d8:15:71:2b:ec:83:78:eb:fb:3a:3a:7c:97:af:d2:7e:49:
         94:ea:5f:f9:c7:60:68:14:03:5a:81:a7:da:f8:2c:a6:bf:54:
         d5:4f:21:e1:6b:7f:78:8b:d7:60:79:cc:9e:ab:85:c4:43:47:
         e3:37:65:28:3c:bc:a1:7e:dd:e0:37:f1:62:8e:55:8f:1c:cb:
         bf:fd:de:d6:e2:82:96:3f:3f:72:80:96:ed:ac:00:8e:f4:91:
         35:c0:dc:08:fd:1d:80:f5:c5:fa:3d:47:61:74:a5:0e:cb:e8:
         56:ab:eb:aa:2b:60:8f:3c:ab:ca:8d:7d:7f:0f:47:3e:6f:75:
         c1:43:75:70:50:76:90:85:a0:de:c8:22:65:9c:bf:38:3b:53:
         7b:f1:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:28:56 2026 by rpki-client